Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier: ywpztyLjXSB6YHU0D3BY8JtBw8k3/ANXhu+CyrjGFYc=
Subject key identifier: 7C:46:3E:D9:6E:AD:3C:BD:66:A0:68:EE:B8:35:C2:CB:74:43:F7:3F
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial: 1910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number: 1904
Signing time: Fri 31 Jan 2025 16:26:49 +0000
Manifest this update: Fri 31 Jan 2025 16:26:49 +0000
Manifest next update: Fri 07 Feb 2025 16:26:49 +0000
Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: 4TfT14Por7Tx9ZVkSyyXOViVSzVSnInon1SfMOHUO+Q=)
2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6416 (0x1910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Validity
Not Before: Jan 31 16:26:49 2025 GMT
Not After : Feb 7 16:26:49 2025 GMT
Subject: CN=679cf9c9-5e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:53:5a:6d:a8:2d:56:c4:7a:cc:a5:04:4f:
b7:0d:ad:41:db:e4:de:0d:b1:8b:07:19:cc:75:20:
4e:63:fa:aa:ea:a3:c5:0a:db:62:9e:a3:7f:d0:15:
59:8d:90:86:1f:25:9f:e3:67:7c:03:f8:67:6d:d6:
d8:e6:42:ff:83:45:21:56:92:12:b2:d2:0e:9d:55:
31:cc:0c:72:8b:80:77:b5:70:ea:e5:8c:2f:b3:51:
4d:09:09:5c:43:e3:76:0f:92:08:1d:96:50:e9:ad:
57:d6:e9:6f:67:e3:a7:21:6c:1e:43:3e:5d:43:e2:
97:42:03:54:dc:31:6f:3b:33:9d:16:cf:24:5b:74:
f7:f7:4f:02:3a:a6:87:28:80:b7:df:dd:c3:c5:bf:
a5:51:ce:d5:47:f5:a1:72:c4:16:f8:00:a0:6f:e1:
12:f6:cc:5c:fe:d4:2d:3e:49:5f:b4:d8:86:e6:0a:
ce:7d:6c:c9:a6:2c:66:9d:9b:30:0b:f0:ae:df:cf:
62:2a:75:06:9e:06:70:46:55:30:d8:09:87:46:35:
ff:bb:bb:1f:de:00:aa:36:10:15:2c:95:9d:7a:14:
7a:44:bc:fd:da:30:a1:6f:39:7e:3f:08:59:36:15:
db:9b:e5:1b:c0:37:bd:40:8f:fa:24:09:dd:02:74:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:3E:D9:6E:AD:3C:BD:66:A0:68:EE:B8:35:C2:CB:74:43:F7:3F
X509v3 Authority Key Identifier:
keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:1a:2a:66:77:66:fa:0f:a6:85:78:d5:2a:23:03:f3:8b:
56:e5:0f:a5:53:ce:50:17:7d:27:fa:0c:6f:f7:e2:23:a4:54:
a8:fe:c2:23:26:75:7f:67:72:e9:5f:1b:41:f3:0c:60:0d:0e:
b6:98:8d:8f:a1:d5:c2:98:29:c6:e8:86:bc:ff:3e:15:2f:25:
41:19:31:0c:bb:c1:a7:9e:7a:40:d2:e7:c2:f5:b9:6c:45:35:
81:1d:fb:46:6d:34:e0:e7:61:a5:c9:da:aa:12:9f:7b:4a:47:
32:15:93:7d:3e:9e:7a:ad:e3:80:b2:22:4d:9a:c5:26:ea:68:
6a:ef:d4:71:b6:c1:82:e7:95:9d:de:48:e9:26:9b:2a:e5:67:
ed:3d:34:70:df:aa:a1:40:3f:0c:04:a4:8f:ec:cf:18:3b:86:
c5:58:ea:56:04:c2:9d:42:5d:71:35:b5:5b:39:64:a2:73:c5:
1a:46:dc:78:d9:8c:45:69:3f:ea:70:73:43:40:98:a8:b8:89:
a0:05:72:c0:2f:f0:48:8d:6d:28:80:ad:6e:b3:4e:a0:c2:20:
9d:76:0f:5e:73:cb:4b:5a:a8:dc:8f:06:3c:31:01:40:2e:12:
e2:e8:53:c8:1d:6e:e3:c9:1a:d1:d3:e9:6a:23:75:05:9c:40:
b5:68:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:29 2025 by rpki-client