Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier: Kdn7MNwl+aDPdYHegZ8a6FrbAhgyc/hPriLtqseOxD4=
Subject key identifier: 51:3B:3B:3F:FB:E5:8D:CA:A8:AA:7B:94:DE:1A:7A:6C:3D:E8:0D:72
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial: 05EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number: 05E5
Signing time: Thu 30 Jan 2025 22:57:40 +0000
Manifest this update: Thu 30 Jan 2025 22:57:39 +0000
Manifest next update: Thu 06 Feb 2025 22:57:39 +0000
Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: F1OJaVaGmkyWvxte/hFRaXXQUUXMwN53jc221lPV/cI=)
2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: OXMHoo8Egs65FUqbV0ME5rvmbJEFphKa1wlI6laYOWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Validity
Not Before: Jan 30 22:57:39 2025 GMT
Not After : Feb 6 22:57:39 2025 GMT
Subject: CN=679c03e4-dea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:bd:3c:a4:4c:af:f1:bb:ac:a7:9f:dd:9c:
db:4c:63:7e:62:c8:33:44:8b:3a:71:ba:3f:c4:99:
cf:51:b2:8b:a1:4b:ff:84:d2:b2:1f:37:4a:d8:30:
05:84:d9:3c:8d:b8:80:02:ec:4f:3f:c9:1a:0d:f6:
e9:83:1a:95:1e:c1:d3:42:15:58:9d:81:9a:ed:78:
7d:2b:4c:70:73:f6:f4:c3:7e:36:91:07:1b:97:90:
86:28:6d:fd:41:0b:1a:e7:a5:0c:0d:93:67:66:15:
1d:fd:dd:f3:ec:b2:b6:5f:8a:7e:3e:8c:10:fb:18:
b1:51:cf:44:5b:e8:e4:a6:15:ab:fd:16:ab:29:b2:
7f:c3:f6:ca:aa:8e:e6:fc:9e:7d:1f:56:e1:03:f3:
33:66:15:5e:82:2c:42:6e:3e:49:8c:a9:82:e7:c0:
e7:e2:97:a3:9d:9e:65:d1:ff:0b:f0:e8:be:06:01:
4c:96:5f:b7:67:da:38:90:1f:4a:48:87:02:b9:da:
fd:3e:31:95:fd:e4:5b:fa:3d:84:9d:d2:c5:6f:5f:
e3:22:14:30:19:49:d1:dd:39:40:1a:18:2d:a6:e6:
05:1d:08:b9:7c:e4:f0:ff:40:9b:69:fc:65:74:a5:
6d:a2:2b:3a:8d:5d:58:34:51:bc:b1:4c:05:c0:cc:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:3B:3F:FB:E5:8D:CA:A8:AA:7B:94:DE:1A:7A:6C:3D:E8:0D:72
X509v3 Authority Key Identifier:
keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:30:3a:e8:03:51:cf:11:3f:2e:ea:f4:fd:bf:65:fc:3c:
f8:21:bb:55:70:d5:e4:3c:b5:fc:a7:fa:37:89:9a:08:b9:b5:
10:6f:a5:75:06:5e:74:fe:73:f8:ed:2c:ac:62:0a:67:47:19:
d6:61:b9:3f:87:45:a1:02:65:d9:f9:55:79:31:81:2c:36:57:
a9:99:7b:43:82:72:b3:97:9d:4b:69:af:3d:e5:ea:57:c1:a7:
7f:9c:71:04:3c:b2:dc:fc:ae:c1:94:75:32:84:19:9c:51:32:
96:60:5d:e6:f6:3a:e1:e5:54:c7:bc:20:94:2e:12:80:1d:22:
9d:c8:88:ed:cc:e6:34:55:d4:04:d1:41:85:3e:d6:aa:e4:ba:
af:10:3a:c5:5a:e1:65:db:c7:2b:23:27:8d:09:1f:d8:40:4e:
ca:b1:70:78:2b:0f:c8:73:ce:7b:f9:4f:33:81:f1:9f:98:62:
d3:ad:10:c2:cf:8b:e0:59:08:e5:85:fc:a9:31:1d:69:23:6d:
a8:da:0d:56:08:eb:23:f0:3e:c8:3e:1a:5a:db:10:9c:c0:b3:
5d:53:20:9a:4f:0f:8a:f5:3f:9c:b6:1d:23:f0:77:71:f7:ca:
71:73:45:d7:2d:d7:a9:43:42:d2:3a:14:30:e1:53:af:e1:75:
7b:f6:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:01 2025 by rpki-client