Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier: T+fLNid06G8/FQOjpiKRpiwHqj5mtbTddm7VSmfxofo=
Subject key identifier: 99:05:F2:9E:22:2B:EE:96:D1:22:B3:BC:D8:2E:C9:82:56:0E:72:3C
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number: 27
Signing time: Fri 31 Jan 2025 06:50:44 +0000
Manifest this update: Fri 31 Jan 2025 06:50:43 +0000
Manifest next update: Fri 07 Feb 2025 06:50:43 +0000
Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: 6Jv3Q9aZ10Tl1fG3Usnfl0SHF6FdjFWRU7Yo9H9Z0Y8=)
2: A69DB4ACA70811EFB1511445C4F9AE02.roa (hash: ve1sSgZ6oct5AOmrySo9DC5xQlX3NPwVMFkq6CjA+1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Validity
Not Before: Jan 31 06:50:43 2025 GMT
Not After : Feb 7 06:50:43 2025 GMT
Subject: CN=679c72c3-31bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:94:ea:fc:bc:b7:63:f0:53:95:af:64:cc:
6f:de:f3:9f:c0:d7:e3:f5:b3:e2:d2:4d:43:15:91:
2c:e5:19:00:a7:6f:d8:e3:27:ef:35:f8:c6:69:fa:
bb:11:97:2d:94:42:3d:10:49:eb:08:03:d8:5d:d6:
0e:d8:79:99:39:db:d2:8e:bb:a9:26:13:7c:e6:c4:
8e:6c:20:32:96:09:6b:db:08:a4:cf:45:b9:12:01:
f8:da:a0:62:26:5a:6e:5e:5c:d2:84:20:31:a9:23:
80:0e:ec:9c:5e:97:26:7f:0c:25:2a:ed:53:a4:9b:
5c:71:e9:4a:79:11:04:fb:4d:4f:46:f0:97:11:ff:
8f:17:1e:4b:71:90:76:d2:50:5a:a6:8c:bb:ae:56:
d3:83:40:5a:d7:fb:fe:c8:60:83:b6:5d:9d:1d:72:
34:27:2f:22:b6:fc:44:4d:71:6d:30:74:44:ab:bf:
b4:2b:33:ea:aa:d0:c8:b1:94:88:7f:09:2d:50:ab:
01:01:3b:ff:1c:5e:5a:c1:b1:18:19:0c:8e:b4:a7:
19:aa:92:f7:e1:4c:e2:6e:d2:33:15:b9:64:e3:43:
3f:83:ee:64:f4:16:9f:c1:38:26:a7:e0:f6:14:6d:
a6:19:d6:5d:2e:9b:5f:83:d3:bf:18:93:30:45:1d:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:F2:9E:22:2B:EE:96:D1:22:B3:BC:D8:2E:C9:82:56:0E:72:3C
X509v3 Authority Key Identifier:
keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:36:9f:4d:f7:64:d6:fd:3a:de:b1:e9:f7:d5:2e:29:ac:40:
9d:04:57:64:6a:6d:f7:1d:84:51:c0:34:d8:4d:fa:10:ea:6d:
54:8d:d1:e1:d7:b2:52:ab:d5:bd:f0:b4:79:74:a6:e8:0d:28:
1a:d1:85:52:42:3f:b0:15:80:61:2a:78:12:b1:1b:e2:5f:48:
e0:29:99:04:06:5d:92:7c:90:b7:b3:d9:da:e9:e7:aa:04:7b:
79:41:4a:9b:42:24:b0:7c:1b:02:8b:c7:34:3f:18:ee:45:21:
d0:90:df:c1:4a:21:28:6b:16:a0:ab:83:17:51:c9:76:bb:33:
e8:28:f1:0d:4d:12:7e:07:d6:a2:83:a2:a5:4f:b2:f9:bd:66:
58:07:a1:2f:bc:09:e9:d1:ba:c2:57:e5:c9:1a:0e:09:af:5f:
f7:66:85:45:36:25:43:1d:2a:ea:33:99:80:e9:b8:c6:c8:dc:
7c:cb:e2:be:02:22:6b:c3:b2:21:38:d6:1f:e6:93:1c:62:4d:
b9:26:11:b3:87:e2:08:67:65:3a:3e:4f:6a:47:b0:49:0f:43:
09:64:d6:67:9e:ea:d0:7e:c6:fe:12:ed:ec:bf:26:27:2a:40:
6f:76:c5:8e:96:fe:a5:13:dc:93:bf:12:74:71:00:ad:ce:fc:
ea:ba:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:25 2025 by rpki-client