Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json)
Hash identifier: OQ8dZ62M7Fz7ifOdxc9pJZN0Mm+bN/FS3Jh3e2BVHV0=
Subject key identifier: A5:5B:4A:6F:02:24:76:44:05:19:10:5A:51:BD:DF:A4:51:8F:A2:F1
Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
Manifest number: 02E6
Signing time: Fri 31 Jan 2025 01:24:48 +0000
Manifest this update: Fri 31 Jan 2025 01:24:48 +0000
Manifest next update: Fri 07 Feb 2025 01:24:48 +0000
Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: +JEr0KRJJmbI/9RTJp+I+AHk2mMsHeoKKsJfA+QQcds=)
2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: ziC+4E1YChOduXVyJ0jy/1ifVphFnzBug4X1uVrRcws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Validity
Not Before: Jan 31 01:24:48 2025 GMT
Not After : Feb 7 01:24:48 2025 GMT
Subject: CN=679c2660-4d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:86:5f:e7:e6:4f:0f:6a:54:d7:06:12:8b:
04:b8:c9:af:c3:90:aa:10:f3:a1:56:53:0a:8a:d3:
30:b3:8f:6e:51:99:24:82:67:16:a0:a3:af:4e:23:
35:90:3d:89:05:7f:65:0e:5f:6e:5c:a0:40:64:dd:
7e:05:88:c6:4a:4f:21:0f:15:d9:75:07:45:67:4d:
33:93:db:07:f5:cc:ec:73:43:d2:87:31:10:f8:cf:
b8:12:09:9e:2d:5f:ee:6c:6b:6e:3f:8d:92:09:0c:
ed:11:ca:b5:84:ac:fb:8b:8e:fa:b9:61:25:cd:b0:
0c:19:af:c8:82:55:e6:c4:9b:d3:8a:a8:6f:1a:5c:
70:e4:57:89:6e:63:44:31:f4:ba:26:bb:df:49:c8:
e3:43:af:94:c3:10:70:41:46:2a:0a:9f:b3:8c:74:
de:ee:b7:b0:54:60:c4:e2:c1:df:68:42:1a:2c:b3:
d3:de:a7:74:33:fd:34:29:cb:09:cd:8e:f2:72:01:
f7:2e:85:5f:1e:5e:21:94:7e:50:85:d0:7a:69:a7:
ca:40:d1:cd:cb:8c:2f:df:47:58:71:1d:7a:86:f7:
62:76:08:d8:24:17:9f:2f:84:c7:16:63:8b:cb:7c:
b4:23:be:b3:46:c1:b9:b4:58:ee:14:a1:41:ea:7f:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:4A:6F:02:24:76:44:05:19:10:5A:51:BD:DF:A4:51:8F:A2:F1
X509v3 Authority Key Identifier:
keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:61:8f:51:2a:44:ce:c8:2b:91:fd:3e:2d:4c:78:97:64:
05:a2:45:cd:97:0b:46:cc:eb:c5:41:43:f6:53:92:bb:5f:3e:
3f:85:c2:03:20:ca:a5:7e:b7:60:3d:46:07:d1:59:bf:27:06:
9f:96:8a:a4:2b:a5:bc:88:fc:79:a8:34:04:6f:bf:50:5b:dc:
0c:c9:d7:5c:a2:39:3e:2d:6b:48:02:16:3e:0c:bc:c0:28:e8:
a3:94:75:b3:4a:29:c8:db:39:52:ad:55:b0:94:57:5b:93:7b:
b1:e2:99:ae:86:35:54:92:4a:22:66:af:85:9b:93:bb:c7:45:
11:26:cb:8a:9b:38:2a:66:a4:a3:ac:81:b3:99:cc:38:4d:da:
c3:a8:49:ed:6a:05:3b:da:5a:8a:29:f0:59:be:16:3a:e1:e5:
cf:6f:a3:6e:0c:d6:4a:43:73:eb:d3:5b:ef:fc:68:fe:1a:d8:
25:19:b8:2b:86:92:02:c5:c5:cd:a3:14:8c:a5:23:42:7c:7a:
14:0c:e4:d6:03:3e:a7:e7:86:51:35:c9:b7:2d:4a:39:e3:6d:
ef:2b:9b:7c:d4:2b:26:88:a8:29:5e:b1:d1:80:4a:25:f3:2b:
5b:a3:e6:36:4d:3f:87:ee:f3:67:dc:5c:eb:5f:05:b8:c5:2b:
ab:38:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:59 2025 by rpki-client