Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json)
Hash identifier: iMTzXwBHDw0A80MUI2FUmQB5LRU96JEilSBQ1+JvOVc=
Subject key identifier: 86:00:3B:24:9F:90:82:31:C6:58:4C:7B:6E:EB:5E:B4:29:18:FC:1E
Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
Manifest number: 0136
Signing time: Fri 31 Jan 2025 03:36:47 +0000
Manifest this update: Fri 31 Jan 2025 03:36:46 +0000
Manifest next update: Fri 07 Feb 2025 03:36:46 +0000
Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: hOC8auB5AdCbOq1qNjt0hdSRlEU5yWJVU+3e0ee5X0E=)
2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: BGY/uPAB8s6bOk+iTJOiyTH1PPXIxJM6rQPQkuaz0DI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4
Validity
Not Before: Jan 31 03:36:46 2025 GMT
Not After : Feb 7 03:36:46 2025 GMT
Subject: CN=679c454e-7314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:e6:a7:65:cc:45:12:a9:91:4c:1e:01:cc:
6b:f6:d2:bc:53:c0:11:15:7e:7d:8a:ed:05:a2:b7:
d2:f3:62:da:bc:b2:f8:52:25:41:55:b0:89:3c:25:
b0:9a:4b:e5:2b:ca:7c:19:49:df:c1:da:9a:b9:e3:
c2:02:d4:a5:05:9f:60:95:09:2b:ef:16:13:0f:cf:
dc:43:cd:99:0b:69:02:f8:a9:3e:0e:30:a8:b0:d2:
0e:67:db:81:96:37:5c:1b:5f:b7:68:38:94:cf:cc:
c1:19:a9:cf:fe:40:de:ff:45:5c:c1:33:f3:b4:6e:
81:c7:b1:e7:ca:e7:c3:28:62:a7:9f:9a:59:4e:7b:
04:2b:31:63:fe:df:d8:a5:26:88:0e:0c:57:1e:85:
8a:c4:13:b3:83:ab:6f:0f:44:a4:e3:2f:70:07:47:
c3:fc:4b:d6:75:77:12:d6:6d:26:dd:47:2a:39:a5:
32:a9:ae:8e:4a:82:34:55:86:35:cc:83:94:19:52:
4a:28:9b:b5:ff:3c:d7:ed:cc:b1:e8:eb:52:55:ca:
07:f4:27:36:ca:a4:5b:ff:92:11:b8:bd:98:4a:46:
fe:8f:97:4f:e4:24:3c:0d:25:ec:35:89:39:9e:ef:
52:6a:44:32:5d:17:31:fe:dd:85:b1:bf:d7:91:5c:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:3B:24:9F:90:82:31:C6:58:4C:7B:6E:EB:5E:B4:29:18:FC:1E
X509v3 Authority Key Identifier:
keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:6d:5e:8c:ae:12:ac:35:31:c6:14:7f:7f:56:8b:e0:55:
ee:47:b4:1a:93:03:0e:a2:cf:87:88:37:c6:4b:19:c6:ee:2a:
11:7a:d7:e0:5f:08:2a:e2:4f:73:ca:d6:95:15:fa:65:3f:2b:
ce:4a:fd:71:92:cb:9a:c2:b8:e9:58:45:f9:17:ae:26:7a:08:
cc:40:6b:d8:e8:24:be:b2:ed:a4:94:01:37:c4:d5:d2:46:53:
e7:86:c0:a0:39:4d:4d:f2:52:4e:cb:63:e4:d2:42:34:59:e2:
d3:81:5b:12:c3:ed:b6:e2:a9:59:e3:fe:e1:c7:da:48:27:bd:
7a:f5:26:75:45:90:7f:a8:4a:1f:e3:99:bf:1a:39:10:c6:3e:
26:0c:87:b1:4b:f8:3c:a6:ce:f6:cb:62:ca:05:d1:44:a9:03:
39:91:8f:39:e1:ce:05:a0:27:1a:6c:32:92:de:0a:41:d6:07:
25:b3:38:4f:59:a5:5c:f0:7b:bd:d1:4c:1b:95:00:4b:68:56:
05:44:c2:de:54:52:c9:a8:c1:25:04:aa:b2:4e:95:09:3e:6e:
ef:a5:ce:99:d5:f6:9d:f2:2f:bd:a3:c2:71:3c:ad:ae:a1:5c:
d9:f9:f6:5f:49:6f:8e:4b:37:f7:d9:7f:59:29:86:11:3a:b8:
a7:5a:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:19 2025 by rpki-client