
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: dWKwx0AAZL5+XVGLQ5e6ufMypcr4z63MfATE/RfsAcc=
Subject key identifier: 25:52:37:F5:5F:95:7C:DB:3C:06:49:C3:C6:65:0C:0F:FA:CC:39:50
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 0221
Signing time: Fri 31 Jan 2025 02:07:39 +0000
Manifest this update: Fri 31 Jan 2025 02:07:38 +0000
Manifest next update: Fri 07 Feb 2025 02:07:38 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: lB2/I8xPaISHbR3VNK5lME+yaBF/gRBYBEtbpl11CDs=)
2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=)
3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Jan 31 02:07:38 2025 GMT
Not After : Feb 7 02:07:38 2025 GMT
Subject: CN=679c306a-dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:cd:3c:70:f7:79:71:93:49:21:62:2b:97:
25:e9:50:85:a5:c0:35:70:49:cb:46:0d:eb:f9:2a:
48:a1:93:de:85:e1:ab:dd:a3:d5:66:1f:01:64:3d:
cd:af:3a:4b:87:4d:94:ce:fa:0f:19:2a:86:72:dd:
b5:48:0e:f1:a8:99:a4:76:bf:f7:20:b8:21:04:8b:
68:e9:0f:18:36:38:1f:9a:a1:96:fd:0b:57:f9:3a:
4f:9c:00:a6:cf:ad:dc:9e:2f:e7:64:e0:01:2f:d1:
7b:33:9b:43:bf:c0:77:5c:2d:3b:47:d8:25:87:be:
b9:ff:0d:6f:ed:e1:6a:92:bc:a8:8b:f7:a2:15:76:
2f:4a:f4:c3:1a:fa:af:2c:b6:79:db:a0:ef:e2:0b:
16:02:1e:84:83:30:a3:04:40:9c:aa:03:e0:cc:7f:
4d:f8:53:92:58:6e:a1:8f:ba:bf:aa:6c:3b:17:e7:
5f:a0:a9:b4:d3:94:80:a1:71:6d:f2:c6:27:79:38:
53:2e:e8:40:59:16:76:39:e7:85:bb:f4:c4:6b:8a:
ae:cc:6d:15:49:f4:59:05:50:3d:f1:ed:dc:91:c5:
d8:e1:15:73:63:ad:c0:79:89:49:a0:84:26:52:10:
ac:a3:fe:07:0a:8d:10:3f:41:ec:d5:3e:ed:26:4a:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:52:37:F5:5F:95:7C:DB:3C:06:49:C3:C6:65:0C:0F:FA:CC:39:50
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:80:e3:96:72:0c:7a:27:54:05:e7:ab:81:a8:12:a6:3d:6c:
ef:15:c6:55:81:47:3e:14:fb:f3:16:e5:90:13:6f:4f:3e:5a:
a1:02:05:3d:ed:c3:17:57:09:23:70:bc:35:e5:a6:59:da:3e:
95:bb:97:87:f7:8d:8b:a4:a8:81:a8:47:fe:f8:6b:66:69:1e:
fe:e3:d9:52:6d:5e:b7:7e:8e:13:94:29:04:59:6a:17:d7:8d:
a0:28:28:cf:43:e5:4a:19:e0:2b:be:71:2b:6b:b9:19:d3:fd:
17:da:70:95:11:4b:d5:0a:27:c2:c4:c5:bb:e4:9b:34:47:11:
de:60:d2:cf:6c:67:85:c6:9f:8c:c8:1f:80:da:b6:f1:85:b5:
2f:00:6a:2f:21:1b:97:d9:62:9b:1a:bc:d0:f9:99:7b:6b:cd:
d0:14:3f:fc:d3:a7:2f:ae:b5:f6:01:c1:7c:16:14:d0:ab:aa:
b4:c5:0c:20:69:45:e4:bb:2d:b2:2b:d8:24:c6:49:cf:31:84:
6c:62:53:c8:c9:a4:0e:22:0a:44:6a:59:92:30:6b:92:47:59:
96:fa:74:7d:0c:d3:4e:81:16:d0:db:1d:37:fd:ef:f1:d8:d1:
a4:71:cc:df:fb:f9:44:2b:f8:f0:ba:fe:3b:66:8a:05:6c:d1:
9b:8b:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:06 2025 by rpki-client