Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
File: X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft (raw, json)
Hash identifier: mZw8QoCxaf4QcyyFDv0rSQRplz8DB255qEDWNukpJik=
Subject key identifier: AB:B8:D2:E0:70:CF:E7:7C:D6:1E:A6:0C:5D:C6:B2:B4:F4:B2:92:4E
Authority key identifier: 5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9
Certificate issuer: /CN=A91CE285/serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
Certificate serial: 097C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
Manifest number: 0976
Signing time: Thu 30 Jan 2025 20:14:08 +0000
Manifest this update: Thu 30 Jan 2025 20:14:07 +0000
Manifest next update: Thu 06 Feb 2025 20:14:07 +0000
Files and hashes: 1: X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl (hash: WkvkXow2MWIkAsIcTZ7uwqlGJ8Zfu7XieU058IxjHJ8=)
2: E5C4974689CF11EAA39AF441C4F9AE02.roa (hash: FJBYOIrltpRMrNwPrut4yj3xc+CpMT9AOJtC+2kI31Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE285/serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
Validity
Not Before: Jan 30 20:14:07 2025 GMT
Not After : Feb 6 20:14:07 2025 GMT
Subject: CN=679bdd90-b4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:ac:dd:80:b2:8d:e2:a5:b8:d6:03:76:e0:
fe:3f:1f:0c:e0:4b:7c:eb:76:e5:b5:e7:fe:f2:95:
9c:c3:58:7f:e4:2e:ef:39:1c:7c:6d:80:dc:64:5d:
9d:70:a1:37:17:b1:2a:ee:d6:44:83:f6:c3:85:7a:
f3:77:0c:f0:96:e6:ac:6a:b4:56:6d:6b:24:b5:83:
18:1c:71:69:98:14:0a:aa:34:0a:9b:bf:1a:c2:cd:
9b:10:1d:b5:7b:5f:8d:77:45:b3:d9:74:32:3e:df:
0b:80:8d:d6:80:02:94:36:87:3e:8e:8f:76:13:b1:
d8:4e:09:d8:51:12:5a:dc:03:d3:1c:11:bc:4e:ca:
25:5f:86:af:fe:41:51:a6:8f:6c:88:d4:7e:f8:a1:
3b:30:e0:fd:ce:7c:2f:dd:5d:6f:bd:89:a2:75:0e:
76:9c:2d:25:1c:e0:f8:d7:ad:53:3f:0e:24:01:86:
bf:9e:c5:bb:0a:d6:3b:d8:65:e0:72:9f:bd:0c:7b:
d9:9a:bd:6e:f2:53:c3:06:58:31:1a:27:63:13:6a:
3b:33:a3:45:37:6c:a8:d1:0c:1e:ba:ce:7b:af:5c:
cb:c3:04:1b:c9:7c:dc:13:8f:02:5a:20:c4:53:cb:
e8:2b:a0:7d:e4:84:b4:f2:24:5a:e5:47:5f:79:db:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:D2:E0:70:CF:E7:7C:D6:1E:A6:0C:5D:C6:B2:B4:F4:B2:92:4E
X509v3 Authority Key Identifier:
keyid:5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:12:b4:5c:19:e9:51:f9:11:26:a3:f8:01:11:49:05:ad:a4:
7e:a6:98:6f:b0:56:d7:04:57:c2:bd:6a:ed:ad:de:87:a7:92:
7e:bc:26:38:09:b7:9e:15:ce:10:3f:7f:f4:40:5e:96:0e:f3:
dd:cd:ba:9e:b2:4a:27:9e:49:32:a2:da:d8:3d:5d:76:89:a8:
5e:ef:78:0f:bb:9b:8e:db:84:5c:5b:70:76:ad:49:f0:06:f1:
5d:db:11:90:14:30:b7:e0:ea:3c:ab:92:29:8a:5e:52:9e:df:
be:e3:71:a1:6d:26:96:69:b7:c0:df:99:33:e5:2c:85:49:6e:
d9:24:99:0e:da:3c:56:33:85:9f:06:48:ba:43:15:03:19:3a:
2d:3a:b8:b2:44:06:bc:8f:42:9c:0a:62:98:b0:72:57:7d:85:
fd:93:e7:aa:95:84:bf:ff:1d:13:6e:bc:f8:64:a0:42:82:ea:
5b:d3:01:a3:b4:46:95:5e:d1:ef:fd:2b:30:c3:d8:7d:22:a3:
6b:bc:49:ae:d0:1d:4b:cc:0b:a3:38:bb:a3:8f:d2:2c:8b:d0:
eb:1f:d6:e9:c2:c0:2a:9c:c4:17:3e:a7:6e:bb:74:35:72:5a:
1f:f8:cf:e9:26:a6:63:ac:1f:fe:b2:08:ba:eb:5f:28:84:ec:
3e:fd:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:51 2025 by rpki-client