Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json)
Hash identifier: EBsHk1BmKiHMmPifvuFoT3DPkUOC/0OMbtAUMdDwRR4=
Subject key identifier: 78:4F:38:24:5E:10:AF:D5:CE:00:B6:4A:D8:82:6C:01:E7:D0:AE:23
Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54
Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
Manifest number: 0102
Signing time: Fri 31 Jan 2025 04:12:45 +0000
Manifest this update: Fri 31 Jan 2025 04:12:45 +0000
Manifest next update: Fri 07 Feb 2025 04:12:45 +0000
Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: 26aXyMwmdunrwzMMnsiv9imqJFh2+KhLrtWsLJnoatw=)
2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=)
3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
Validity
Not Before: Jan 31 04:12:45 2025 GMT
Not After : Feb 7 04:12:45 2025 GMT
Subject: CN=679c4dbd-951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:df:63:a9:ac:4f:82:31:1d:0d:df:aa:ff:
4a:5c:41:73:f9:ea:7f:2b:28:bd:82:4f:90:2c:6d:
94:45:56:a4:b3:53:fd:e2:b1:cd:8b:4c:48:96:67:
0a:3c:f5:0b:33:fe:7b:79:bf:41:74:b3:98:43:00:
27:20:50:1f:36:4a:c8:64:e4:c9:fa:bd:ce:78:e1:
4e:11:cb:16:b4:10:35:86:c6:61:49:bd:26:06:91:
42:56:ae:65:29:cd:76:07:a6:3a:7f:7c:e2:c9:1e:
02:55:dc:12:b0:94:07:95:c5:da:05:68:78:f9:69:
76:58:49:14:b1:c1:10:1c:47:b7:45:96:f7:1a:a5:
73:10:14:36:e6:e5:4a:47:c3:e3:09:0b:50:18:db:
1f:1b:f2:3c:c2:3c:dc:0d:c5:52:37:63:0b:98:e6:
7e:21:b2:7a:5a:0f:60:d7:da:d1:72:80:73:66:81:
dd:bd:75:ba:0f:80:50:09:7d:68:8b:9f:be:b3:59:
d9:18:1b:79:ee:9b:d2:6c:39:60:62:a3:46:3d:30:
fa:0e:bf:7a:bb:1d:be:0a:88:6f:b3:64:fe:6a:05:
76:e7:82:e9:14:e8:b6:46:43:d9:21:8c:76:12:c4:
c3:96:2d:15:47:b0:e0:fe:23:27:59:13:23:9f:51:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4F:38:24:5E:10:AF:D5:CE:00:B6:4A:D8:82:6C:01:E7:D0:AE:23
X509v3 Authority Key Identifier:
keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0b:a3:30:e0:f7:2d:69:fc:87:fa:a2:3a:61:b2:65:a8:4f:
7b:5d:82:27:66:b8:b1:0c:74:8c:c1:87:4f:4f:d6:c2:a0:ce:
13:c7:4d:70:b0:7f:d6:7d:77:f4:45:f7:9f:06:f6:6e:09:61:
2b:e9:0c:19:43:20:e5:9c:6d:25:f2:16:b6:d9:f1:7d:e9:db:
df:93:71:9c:05:0b:b8:ee:6e:8a:d7:6e:57:7e:54:0e:c1:8d:
a6:f1:18:b9:7f:ca:f9:83:4c:f0:28:65:40:42:da:a1:9a:7b:
3c:03:a7:37:e4:a7:a4:e3:73:fe:d5:fc:97:a7:94:1b:65:3e:
2a:a8:24:0c:4a:f3:a9:fe:67:c4:f8:8b:bb:08:2d:36:a9:95:
8f:bc:4f:bf:2b:ca:14:66:03:e9:67:fd:e7:3e:ea:a7:c1:4f:
44:22:12:27:07:87:84:7c:4f:27:15:cc:a0:20:b5:ed:a6:44:
a9:51:71:f1:05:69:59:6e:42:13:7f:6c:14:ab:7b:02:fb:c9:
e4:7e:be:b1:42:14:5a:d4:97:7b:31:54:3e:fd:b3:3d:2f:95:
ea:c5:9b:fc:49:ce:12:a9:32:73:16:ca:22:f6:04:9f:73:33:
34:9d:bb:f7:ae:52:e5:04:b2:d1:3b:92:34:d1:22:85:6c:1e:
b6:9b:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:08 2025 by rpki-client