Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft
File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json)
Hash identifier: nLa3o5pInJ3qU4NBqnRTLdWj78i2UDdf6EQ3cOb9MAA=
Subject key identifier: 54:44:68:91:AD:15:BF:00:AF:0C:3F:30:B3:CC:22:35:50:70:0D:2A
Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94
Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94
Certificate serial: 09A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft
Manifest number: 0993
Signing time: Thu 30 Jan 2025 20:10:52 +0000
Manifest this update: Thu 30 Jan 2025 20:10:52 +0000
Manifest next update: Thu 06 Feb 2025 20:10:52 +0000
Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: heQmhytZhxI1K1b3ZgVuC5U7zOVQa4QqoR2KJR26pfk=)
2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: QT/K5tGfOd7GalxXyOBi4xKWLa0cvDIyEyK/W9LM+Pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94
Validity
Not Before: Jan 30 20:10:52 2025 GMT
Not After : Feb 6 20:10:52 2025 GMT
Subject: CN=679bdccc-7efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:b5:dd:6d:d2:c1:2f:e6:c5:45:42:5b:9b:
12:cd:ac:16:69:cc:f2:95:5f:3a:3a:54:25:2f:fb:
55:fd:c5:54:5d:be:43:f9:2e:48:30:dc:9d:02:57:
6b:24:49:c1:c8:58:23:51:a8:79:20:af:3a:b9:d5:
1e:69:21:a5:3d:4a:f1:b2:ab:d3:45:37:0b:37:0d:
58:c8:aa:a9:ff:81:e1:83:d8:51:9e:50:26:e8:65:
b2:75:ce:6e:40:87:74:6c:8a:c0:8c:f6:0a:c9:a6:
ec:e1:15:93:4f:e9:6b:a6:7d:50:2b:e3:cf:92:df:
b5:f0:90:29:34:fd:98:c6:aa:94:24:18:b1:d3:b7:
42:f1:24:df:b8:64:cf:78:a2:40:e2:47:bb:69:25:
ef:02:8b:79:46:52:3d:78:d3:68:bf:91:bd:86:bc:
28:b4:d4:89:2f:1f:fd:e0:08:d0:da:21:ce:b7:a9:
f5:d0:3d:8a:cf:cd:ed:b6:c2:c7:fd:9a:4b:15:bc:
f5:cd:ce:53:9b:50:b5:53:dd:d8:91:01:de:05:7f:
3a:96:d2:b7:17:4f:5c:0b:13:36:9d:0d:f5:d2:1f:
9f:2b:f3:01:af:6a:34:ec:b7:6f:f7:c9:87:9f:41:
ed:a1:b3:6f:55:6c:08:54:6e:33:8d:92:d1:b7:45:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:68:91:AD:15:BF:00:AF:0C:3F:30:B3:CC:22:35:50:70:0D:2A
X509v3 Authority Key Identifier:
keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:f7:98:f2:e5:c6:3b:c3:6c:ce:b8:c2:14:44:14:7b:90:
f8:ab:5b:6e:3b:41:e9:3e:dd:c0:b4:a3:f2:fa:3e:70:5c:7a:
44:c9:b7:4a:a3:e1:18:01:85:e7:c1:67:bd:d7:9f:52:b2:9b:
29:17:8a:26:1b:db:ef:c6:6e:2c:f1:9b:8f:e5:70:61:f0:f2:
80:b6:02:7c:a9:f3:6e:fb:00:77:78:77:b0:93:5b:93:27:f9:
31:e5:a2:99:42:fc:77:a5:68:79:48:e6:5d:bc:4d:e0:ab:c7:
59:8b:3c:72:8e:66:72:f6:c7:4d:e8:e6:c1:fb:f8:7f:23:23:
bb:ec:2e:a9:ab:bb:3f:ba:81:e3:1d:4e:b5:2f:70:c0:16:98:
d0:f9:61:c6:3b:02:73:8b:d7:47:fd:2a:50:9a:a8:29:25:8b:
61:23:3a:7f:72:12:5e:8d:29:96:cc:11:18:cc:cd:7c:fb:72:
69:65:1b:b0:93:b1:67:c3:36:bd:67:3a:f1:c6:55:4d:d1:a0:
78:eb:57:ba:14:d7:2d:9a:35:c7:75:db:cd:64:8d:57:f3:41:
32:c4:f2:5b:31:91:36:c3:a1:8d:61:6b:7a:dd:45:6a:e7:d2:
db:4a:95:b3:0a:99:b0:c1:d8:e6:96:76:47:93:b1:1c:f1:ea:
38:11:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:51 2025 by rpki-client