Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json)
Hash identifier: ZurLaKyrwYi6AxMjcuB0QowPJK2TVMLqHA/PPEayitw=
Subject key identifier: F8:68:AC:3F:DE:60:F5:EF:D2:6B:B0:14:C2:73:16:24:9F:83:95:17
Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Certificate serial: 0604
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
Manifest number: 05FF
Signing time: Thu 30 Jan 2025 22:52:12 +0000
Manifest this update: Thu 30 Jan 2025 22:52:11 +0000
Manifest next update: Thu 06 Feb 2025 22:52:11 +0000
Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: 1dFEM3YXqP3QAXD0F5l5o7hVF0XYgNUTTlbq9o6mChI=)
2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: oheVgwgcc5IUYSIleOKjSz3O1d0TWSDn9p0tlk0co7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1540 (0x604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Validity
Not Before: Jan 30 22:52:11 2025 GMT
Not After : Feb 6 22:52:11 2025 GMT
Subject: CN=679c029b-920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:b6:64:07:e4:66:b8:1b:eb:2e:82:1a:13:
d1:52:fc:1d:ff:19:97:71:48:ea:96:0d:ce:53:59:
33:79:b0:e4:68:7b:73:91:72:94:5f:de:68:7a:c1:
55:fa:51:77:b6:fe:0e:28:dc:0e:6b:8a:f5:38:0b:
8b:c5:72:c7:4c:0f:8f:ea:7c:1d:eb:27:3b:d8:53:
22:87:1d:cc:16:9e:b1:5f:90:fd:f4:27:a4:2d:29:
57:10:cc:83:44:46:95:36:2f:87:57:db:2f:cb:a5:
13:57:3b:eb:f9:d4:de:af:af:1e:79:11:83:ad:11:
4e:97:47:6e:98:9e:ef:a3:67:84:1e:99:ea:74:d0:
54:0d:07:a9:0d:e4:fc:48:ab:7b:c5:42:e5:9e:47:
46:99:08:b7:3b:96:3c:85:ca:2b:3b:52:10:d1:41:
cf:4c:d2:4a:3a:63:f9:95:e1:8b:47:ee:97:b6:88:
e2:09:73:e6:2a:c1:f9:10:83:c6:d0:cd:5f:df:e3:
0f:fa:a3:10:fe:da:18:b2:39:ae:b3:7e:8e:36:55:
3a:4b:f2:8b:24:7e:74:a2:b4:e3:49:c2:fd:b9:b4:
42:8d:b7:90:9c:43:e4:68:db:7c:43:a0:1d:68:0b:
0f:6a:ff:3f:7c:24:a6:19:b3:f4:d0:e2:1b:7f:3a:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:AC:3F:DE:60:F5:EF:D2:6B:B0:14:C2:73:16:24:9F:83:95:17
X509v3 Authority Key Identifier:
keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7d:44:5d:0b:da:83:a9:0f:6b:be:40:a3:56:4a:5b:e5:ec:
ca:ae:b8:5a:72:dd:91:c3:36:d0:f4:ba:c6:e2:a8:04:6d:6c:
82:b8:bc:9a:d7:c8:29:04:01:89:d1:0a:f8:bb:4c:45:9f:33:
17:6a:81:a2:0b:a2:4a:7d:75:de:4c:34:d6:37:67:89:4a:0f:
8c:4b:0b:06:57:1d:ea:0a:56:f4:91:8e:ff:12:5e:52:5f:66:
5a:0e:d5:e6:1d:83:12:f6:13:cf:81:2d:86:30:eb:09:66:a2:
12:88:a4:8f:73:2d:f8:19:ae:ba:f0:de:d9:a2:05:16:0b:cf:
d9:60:5b:7e:92:0b:34:f2:4c:0f:61:1d:7d:69:fd:25:61:28:
59:3c:e8:68:da:de:01:d3:00:fb:f0:b7:87:f9:10:c8:c7:c8:
61:bd:a6:50:69:aa:8c:aa:d1:15:0d:59:5f:2b:ae:e6:75:ed:
fa:d7:c6:70:ee:e6:0f:46:18:4d:8d:42:26:93:fe:92:58:b2:
f8:af:7a:8e:75:5b:e7:91:11:46:3c:66:81:27:05:2e:1f:2d:
1a:28:5d:e6:00:57:5c:72:99:bb:e7:48:b3:5b:c2:b2:94:02:
01:ae:ae:9b:bd:0d:4f:19:03:8c:62:03:fa:fc:8a:c8:28:49:
a3:96:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:06 2025 by rpki-client