Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json)
Hash identifier: gxBhZI9mEkZqF9Bs5PXq3w1P0z2ByhxutvT42MvT7qA=
Subject key identifier: 46:94:DF:CF:8D:EC:CD:31:AC:13:12:A6:2C:15:CD:DD:C4:66:CB:17
Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
Manifest number: 02F3
Signing time: Fri 31 Jan 2025 01:22:35 +0000
Manifest this update: Fri 31 Jan 2025 01:22:34 +0000
Manifest next update: Fri 07 Feb 2025 01:22:34 +0000
Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: XH2SDPQ17Vm/ayo9Cu3ihKHQLMlBHrbc94zRFlReVi0=)
2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: YDV59vkDGMUjv69JwCXS0TevAXxNgXIE57WFOFZhJBo=)
3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Validity
Not Before: Jan 31 01:22:34 2025 GMT
Not After : Feb 7 01:22:34 2025 GMT
Subject: CN=679c25da-4835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:09:75:95:ad:3f:6c:5a:5b:2b:f0:06:b1:
9d:cb:c2:e3:1a:aa:af:2b:91:05:fb:8e:c5:dd:27:
fd:81:e3:f8:92:14:bd:5e:62:e1:24:a6:88:a3:83:
51:32:7b:54:44:a7:a7:6b:83:21:28:4c:e0:61:ff:
c4:6b:d6:cb:5b:ed:fd:e1:4f:b3:a7:f7:a2:5f:17:
3b:90:56:d1:b0:1d:72:d4:e6:92:dc:ec:6c:1d:e1:
a3:b0:74:9d:9a:d8:3c:11:21:d3:cc:1a:1d:20:c5:
82:4c:e7:08:3b:3b:07:83:99:50:1c:75:ae:32:3c:
dd:db:01:e3:4a:3e:d9:de:13:18:f8:4b:2c:8f:02:
6c:1a:a6:42:00:86:9b:00:f6:1e:b9:a4:9c:9a:38:
8f:30:88:c0:19:92:c1:6a:b5:3f:56:23:c4:1a:e0:
33:d9:b5:97:22:1b:fe:75:f7:51:b9:11:25:30:22:
b6:d3:9d:42:dd:8c:77:ad:e8:52:23:69:ae:63:46:
c5:b7:3e:67:f1:65:b8:e7:a4:d3:90:a4:31:c2:ff:
e1:46:dd:7c:4f:9e:ef:68:60:43:da:a6:e6:eb:5c:
ff:0d:ed:a2:79:66:eb:ce:7b:51:22:fa:05:83:71:
ac:34:59:21:f0:a4:db:b9:8a:28:7c:1d:1f:3a:43:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:DF:CF:8D:EC:CD:31:AC:13:12:A6:2C:15:CD:DD:C4:66:CB:17
X509v3 Authority Key Identifier:
keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:d3:99:9a:4a:d2:84:3a:f9:fc:c7:23:d5:d6:56:37:36:
97:5f:cb:ac:63:92:76:00:4f:18:ca:6e:e9:01:2d:37:89:37:
66:eb:9f:72:4b:f3:6b:88:66:f4:5a:bc:78:1e:ec:a0:f0:93:
27:aa:5f:9f:0a:e4:5f:65:65:3c:a5:09:c0:b4:24:14:34:de:
6b:4f:3b:fa:f3:f7:0f:dd:4c:d3:c1:11:c0:5e:75:13:f0:38:
d4:34:76:04:9f:83:c9:7e:a4:2f:98:d9:1c:97:01:99:01:3d:
5e:0f:5e:2f:ea:d9:ee:77:3d:be:17:e6:7e:af:ff:60:c0:2e:
80:b9:47:c3:f4:76:8a:66:e3:e5:7a:2a:0c:67:d0:99:27:6f:
86:d5:87:cb:25:40:cf:4e:d3:1a:03:bc:08:d3:53:28:8d:83:
0e:c6:07:c8:77:b1:ed:ba:e1:7c:eb:16:b5:4e:4f:5c:66:cf:
a7:89:0e:d4:60:cc:31:73:e3:5b:74:49:0e:5b:e1:f7:c6:a3:
c3:4e:f6:3c:6d:cd:71:2f:8d:ff:65:5d:32:36:93:09:0a:19:
13:9a:95:cb:de:d4:5f:30:48:21:0b:0d:29:be:b5:f9:80:a0:
22:72:95:04:da:77:fb:29:39:9b:da:0b:e7:92:d5:e3:b2:72:
82:b1:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:14 2025 by rpki-client