Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier: lHWr2Y0Y/s33MF7qQe2Ir1Mcz9f8xlSKvm0lQ35EMck=
Subject key identifier: E6:C0:03:81:21:D1:63:65:D8:6B:DE:47:D2:65:BB:D5:74:90:11:E7
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number: 84
Signing time: Fri 31 Jan 2025 05:42:21 +0000
Manifest this update: Fri 31 Jan 2025 05:42:21 +0000
Manifest next update: Fri 07 Feb 2025 05:42:21 +0000
Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: p1ekxAx/mbFcq4KFv+h+6R4CexCD+ILDpvGPI9Zf4t8=)
2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: nq8ODXuG2X1On3FZK6D1Ybw7+HTqr1F1kxAZ6zyabRU=)
3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: 1y/ITkoFaBAOp9EAsg22Me68ifQMXDcby23ipO0Xd9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: Jan 31 05:42:21 2025 GMT
Not After : Feb 7 05:42:21 2025 GMT
Subject: CN=679c62bd-4267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:7a:c9:9d:e8:44:73:42:db:fb:a5:74:67:
87:65:dd:31:0b:ee:c6:4f:f0:dd:bb:b1:31:7c:4d:
34:6f:8f:13:b4:25:64:c5:9a:9e:2d:4d:3f:a3:0d:
5e:0c:85:ce:85:7c:b4:40:14:e2:45:5b:5b:0f:7a:
ab:9d:62:8b:21:5b:83:5d:9a:c1:7b:6f:f4:f7:55:
46:d1:21:73:6e:7a:51:b4:30:99:41:44:42:25:ec:
d6:9b:e4:18:06:2c:cb:0c:27:2d:f2:e5:8e:97:a9:
56:2a:5e:83:cd:06:8c:af:45:11:6b:5c:05:d1:dc:
ba:10:29:bf:b4:0e:e2:9b:12:f8:c2:e9:3c:8f:f2:
2b:c8:ab:c2:e1:9e:ef:6c:6f:42:7c:5c:1d:32:5a:
13:58:b8:b2:d6:01:1d:17:37:d7:e9:6d:36:41:77:
26:45:45:7d:c5:90:18:49:21:63:00:da:48:b3:9b:
4e:e8:d5:c8:a9:17:95:72:a7:2f:0c:e7:5a:f8:29:
d5:5f:58:ef:23:e3:7a:d3:bb:fa:1c:74:34:bf:0b:
d6:ee:9f:b2:a9:d6:24:f4:1a:f8:05:46:1a:54:70:
59:63:5f:3c:9d:dc:1d:94:1d:37:33:f3:e9:d0:3a:
54:15:b9:10:ba:c1:32:ae:d6:35:18:37:53:c3:b7:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C0:03:81:21:D1:63:65:D8:6B:DE:47:D2:65:BB:D5:74:90:11:E7
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e1:cd:cf:82:2f:1a:48:c7:56:81:7d:0e:db:9e:41:24:44:
2d:c2:38:8a:19:45:2a:f6:23:10:0f:ea:aa:60:51:92:ce:38:
be:6b:70:26:62:f0:f4:7f:2d:df:df:46:f5:83:66:f8:07:66:
6f:db:60:a0:03:e3:85:bd:63:4e:94:3c:a1:9c:74:3e:06:9c:
56:02:19:17:e0:45:58:e0:03:4d:25:b9:f2:c2:09:7d:58:06:
c2:a5:cc:c7:c5:b5:5e:9a:e4:8a:b7:67:aa:7a:71:1e:cf:7c:
42:9a:de:ef:0a:00:84:01:4f:90:0a:61:b7:9a:b8:10:13:ae:
6e:71:3a:30:ee:40:74:ee:e1:a9:83:8f:47:d0:3f:eb:24:c8:
30:46:ed:c5:6f:3e:6c:14:78:b2:49:dc:ab:18:de:3a:79:1d:
b9:67:f9:a9:83:81:f4:74:ae:df:76:2d:de:5c:d0:da:66:d9:
d8:3d:60:3b:15:2f:e8:a0:81:57:f1:71:ad:12:12:74:e7:63:
58:07:fc:76:76:8e:f5:bd:e6:71:de:41:80:8d:72:06:7a:65:
d2:d7:60:cb:58:4c:79:6b:1e:ac:e1:76:3f:04:3a:85:05:ff:
f5:96:30:75:f0:f5:3b:ea:06:71:f0:07:74:7e:e0:2c:d7:a6:
a8:13:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:42 2025 by rpki-client