Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json)
Hash identifier: aIVV1Vnz+K2DEO/IBW/ymqlR9isef2+zSRo5WnemC08=
Subject key identifier: B0:C5:30:DF:58:4A:EC:D1:5A:AA:74:E4:80:4D:9D:CA:BF:3D:6C:06
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 347D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
Manifest number: 3463
Signing time: Fri 31 Jan 2025 14:58:42 +0000
Manifest this update: Fri 31 Jan 2025 14:58:41 +0000
Manifest next update: Fri 07 Feb 2025 14:58:41 +0000
Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: wMfaAAzw1GYJjFQV+9tQDE6Hr2fBp2BWZlRaJcZm/Yw=)
2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=)
3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=)
4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=)
5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13437 (0x347d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Validity
Not Before: Jan 31 14:58:41 2025 GMT
Not After : Feb 7 14:58:41 2025 GMT
Subject: CN=679ce521-74da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5b:2a:34:81:50:bd:9a:ab:13:d8:4a:b5:38:
b0:69:58:70:7d:7b:dd:7e:54:e2:1c:c3:b4:f9:68:
94:c8:e8:67:40:db:0f:ce:32:8e:4b:bd:28:55:6a:
76:e8:9e:bd:50:a5:f7:9a:09:1a:cc:77:be:e4:94:
12:6a:2a:7f:ee:24:72:08:70:cf:42:2d:b3:9e:14:
0e:fa:9b:8f:9a:4a:da:13:87:ad:52:47:81:d5:f0:
b3:7f:5d:68:47:2e:e1:3a:44:ee:f1:11:84:6d:2f:
f3:5d:fa:d8:fd:cc:b3:a5:b0:11:09:06:9a:0c:f7:
26:19:57:ed:79:42:97:32:84:1c:29:ed:3d:2c:32:
30:63:04:10:d1:7c:2e:25:e1:65:39:78:d1:81:c1:
38:d9:bd:ec:c3:00:18:01:98:d4:6f:cd:cd:b1:02:
a1:82:20:90:73:22:b4:c3:40:db:18:15:c2:75:4a:
74:71:47:c5:82:00:b8:c3:80:ce:b6:4f:37:82:9d:
61:be:a2:24:af:92:17:ab:87:9b:54:03:8a:11:99:
d4:a5:e7:e9:93:1e:93:61:3e:1c:f6:43:2a:3f:13:
76:d8:29:18:69:cb:63:f6:ab:89:a6:c9:b9:2e:f9:
3a:97:dd:c8:ee:99:e7:ac:fc:ab:1a:8f:bc:01:46:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:30:DF:58:4A:EC:D1:5A:AA:74:E4:80:4D:9D:CA:BF:3D:6C:06
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:28:b6:2c:ae:b1:f3:68:8a:85:64:e4:0d:08:d5:f9:b0:45:
5b:ad:33:1a:44:af:82:0d:a2:03:17:32:ba:27:4e:75:b8:a0:
f3:bd:09:bc:a3:97:6c:9c:c3:39:36:25:1a:06:ec:62:ae:23:
6f:88:ce:fb:0c:fe:be:97:d1:60:0f:1f:41:7f:6a:35:b4:3b:
91:c3:31:35:5f:8b:e1:1d:51:b9:c9:60:c5:8e:90:7f:98:73:
c1:be:1c:e5:ab:59:21:38:d0:02:b7:da:51:c6:40:b1:e6:a1:
cd:36:89:93:b1:75:50:39:57:84:72:2b:99:d7:93:83:4d:c8:
b9:d4:2a:ca:cc:10:3c:01:c9:03:8e:32:db:ea:1d:a4:7b:b7:
5b:a0:fe:ac:67:2f:af:c8:43:20:15:74:bc:ac:b7:31:cb:76:
82:5e:16:f5:c4:1c:46:28:e9:63:b5:a6:e0:58:01:d4:5f:d8:
8d:c0:af:69:85:eb:8e:92:ce:9b:8d:71:22:d1:9b:21:10:90:
40:a9:b8:5b:0b:06:a6:8b:00:a3:82:71:d7:a9:b4:dd:8f:a1:
85:54:57:b9:33:19:70:bd:64:db:71:42:5e:69:53:02:f2:c0:
40:bc:7a:34:8c:1d:c7:eb:7f:73:65:71:c6:06:1c:56:3f:6a:
39:22:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:11 2025 by rpki-client