Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json)
Hash identifier: hB+WNrg6EXQaQKNVgLzJ2jOur1PYbVL+sLKBj90+4Us=
Subject key identifier: E9:AC:26:FB:2E:58:75:5D:A8:77:B9:EE:C3:99:B2:D1:57:66:18:63
Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
Manifest number: E1
Signing time: Fri 31 Jan 2025 04:35:47 +0000
Manifest this update: Fri 31 Jan 2025 04:35:47 +0000
Manifest next update: Fri 07 Feb 2025 04:35:47 +0000
Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: 8YKfsZ1+IlYWYzivDywmKAiSoKojhWlK+9KXvQ0xd8o=)
2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: WhOLdJmONFcVyaVlMrHX886HXRKh0RLcsl55SUDqRa4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Validity
Not Before: Jan 31 04:35:47 2025 GMT
Not After : Feb 7 04:35:47 2025 GMT
Subject: CN=679c5323-a13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:ab:e5:7a:7e:f0:34:6c:ec:56:8d:15:1d:
7d:f4:b6:2a:4a:e4:07:90:27:d9:72:9e:ef:8a:43:
c7:0d:8f:5a:75:ad:7d:45:8c:cb:58:07:4c:ed:7e:
10:16:ff:0b:ff:66:a8:81:ec:63:70:9e:35:a9:fb:
04:19:b0:2d:08:d1:c1:e7:31:8d:09:6e:f7:d8:a5:
54:2f:e6:1e:ae:e6:03:eb:fa:2d:ab:19:49:ba:8b:
7e:0f:5e:f7:03:fa:67:cf:9a:1d:85:1e:d3:19:89:
c6:ed:21:d1:8c:fa:a6:a0:24:d0:33:7e:9d:d9:1d:
41:76:f9:b7:4e:76:fa:28:c9:c1:19:e7:00:fe:8d:
eb:1b:d6:46:08:a3:5d:4f:df:04:39:c3:f1:c3:15:
43:9a:a7:04:a9:9c:0f:11:cc:99:30:7b:29:05:58:
f7:7a:59:14:dc:b5:cb:87:22:fa:f8:73:59:ce:a4:
c1:bc:3b:65:a3:c4:67:fa:38:78:f2:e6:fb:36:35:
fb:3d:ea:ea:f1:db:ef:7f:78:49:ef:af:3c:b7:bc:
35:49:f7:bf:0a:25:22:28:ae:f3:3c:d6:ea:f6:6a:
75:60:83:99:b0:a3:4e:c1:71:d6:45:dd:8f:ad:c1:
2a:16:e0:41:92:07:51:4f:e8:8f:c0:44:58:3a:d1:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:26:FB:2E:58:75:5D:A8:77:B9:EE:C3:99:B2:D1:57:66:18:63
X509v3 Authority Key Identifier:
keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:35:79:28:92:b5:12:0e:d1:16:72:63:1f:50:7e:a4:48:
32:e8:3e:68:24:9c:58:0e:e3:6a:01:38:0c:53:2b:e4:d0:c0:
ea:4b:be:4c:b3:21:2f:7b:7f:8c:52:56:36:3b:74:44:3a:68:
ff:f0:fe:41:39:e0:96:0b:ba:b8:3d:02:a6:eb:a1:c5:51:48:
ea:ce:ee:6c:a7:66:43:bf:88:9e:92:8c:3e:bb:ed:fc:83:0f:
58:19:26:91:4d:f0:b9:37:84:d2:af:27:fc:c2:d7:de:35:7c:
11:6c:00:ce:91:5d:e2:b1:e4:a1:30:09:d3:4f:f3:e5:d3:3c:
f3:4a:af:7a:b2:98:42:43:fe:3e:e9:31:86:6d:b6:ca:ce:69:
9e:f4:c0:f3:8c:c6:29:fb:2a:fd:58:c0:b5:83:af:01:91:a6:
54:00:f7:29:30:75:6d:de:07:5f:f7:51:da:3e:b4:a1:95:e7:
02:bb:18:d3:71:ca:23:d2:f0:40:b4:7b:19:23:f3:a1:af:1b:
62:a9:b1:07:23:24:b0:38:1b:f9:2d:8f:aa:e0:6a:17:73:91:
54:3b:95:2e:34:60:cf:2e:7f:1d:88:e4:0b:c0:79:ba:4b:90:
43:6b:7c:42:95:2e:3c:63:41:c8:d5:13:16:ef:eb:6d:34:43:
d6:b4:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:23:39 2025 by rpki-client