Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json)
Hash identifier: dFqpx233rKSqd10aYfqT8ylcR5pQoz2jOLR1R6eaELk=
Subject key identifier: 22:54:B6:0C:47:51:DB:F5:FD:E6:04:5C:79:3B:C7:84:A1:7A:83:80
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 03AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
Manifest number: 0399
Signing time: Fri 31 Jan 2025 00:53:57 +0000
Manifest this update: Fri 31 Jan 2025 00:53:56 +0000
Manifest next update: Fri 07 Feb 2025 00:53:56 +0000
Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: G1Wlt5BU/p7hyqtv1T6qNvJBlo6TG8oRmQ9/lzlK54A=)
2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: boOCGflbkanE4P7ei17MNzMPBecXSr0AQA7gAl1zsjs=)
3: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: up3g4qtJ9ZMvIsOtDsouhFbDzhKJ4y9yk6alGerKnUM=)
4: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: INiCagy0vcmCTPmYcGBpbqzBxIR9/gsh7a6DBH9yiqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Jan 31 00:53:56 2025 GMT
Not After : Feb 7 00:53:56 2025 GMT
Subject: CN=679c1f24-6d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:9f:cb:ff:63:64:50:63:79:3c:2f:71:84:
54:21:29:e5:f4:e9:4f:62:b5:e5:ac:b6:fb:94:2b:
1e:90:ea:c2:59:e6:88:08:91:47:f8:c1:92:dd:9f:
08:cf:c2:0e:33:44:40:71:57:95:de:e5:b0:00:be:
73:41:40:6d:4e:d7:93:18:3d:b2:c7:14:f1:b7:83:
5f:24:a2:20:65:05:9f:1f:34:44:27:1a:c7:96:9f:
9a:ff:77:df:ff:f7:25:c2:82:31:e2:6c:01:6b:e9:
c2:9d:41:f1:0e:58:60:1a:46:5c:40:e1:6f:db:6d:
f4:ea:6b:65:2c:cf:e6:9c:e2:06:4c:76:e5:db:2c:
96:32:42:29:0e:5d:0c:6f:3b:d3:6c:54:21:c0:7e:
8e:5d:3a:25:da:5c:70:7c:ec:0a:25:47:d8:ca:c1:
81:ea:ee:58:9b:0c:ab:74:d0:91:10:4d:c1:a0:df:
da:8b:21:c6:a7:cd:27:53:43:0e:50:bc:c4:46:83:
e3:85:04:34:fc:03:2a:7f:c3:68:eb:91:73:ac:99:
75:c0:06:1a:3c:ec:f5:aa:11:f4:48:28:91:9c:5b:
98:aa:da:5b:64:9c:54:bd:0a:e9:93:35:76:60:c9:
e2:5e:d6:7a:61:2f:27:1f:93:a5:32:36:0e:a8:6f:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:B6:0C:47:51:DB:F5:FD:E6:04:5C:79:3B:C7:84:A1:7A:83:80
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:05:41:97:f2:7d:ff:ad:9d:f7:a7:07:d2:c7:2a:79:1e:
d0:8e:e6:a9:d3:96:90:03:45:cf:25:02:a3:cf:67:1e:79:f9:
e7:1a:9d:be:16:92:37:d9:12:f4:6c:10:0b:ef:86:48:ea:2f:
ce:8c:63:72:78:37:f0:aa:fe:68:93:b2:ba:3d:5a:0f:f3:73:
35:03:09:46:25:3b:4d:83:0d:54:1b:98:b9:84:ae:9f:9a:08:
01:1b:1d:d9:04:e1:a3:fb:7a:b8:46:ef:2c:33:9c:cb:0b:e2:
d0:d8:c3:00:e5:f8:f7:f7:96:c9:2a:be:67:86:db:71:4f:47:
87:8b:c1:48:86:e8:3f:13:c6:6b:2e:7b:ec:61:4b:99:8b:25:
4f:e1:4e:f8:18:52:bb:27:ad:c1:e2:dd:2c:aa:f3:53:38:a9:
2f:89:6e:60:32:b1:b7:09:dc:35:bd:6f:7c:72:e3:d6:9c:0b:
3e:1b:36:11:5f:b9:d2:a8:5d:9a:1e:43:60:27:e6:10:70:cf:
ce:80:90:04:a9:cc:2f:30:21:f2:0e:6c:94:07:f3:7b:bb:f8:
a7:10:63:d6:09:c4:b5:2b:1a:3e:aa:df:1d:12:81:50:23:58:
86:2e:e7:56:73:0a:47:f4:e5:fc:dd:00:8d:18:e6:6f:85:76:
b2:22:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:43:47 2025 by rpki-client