Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json)
Hash identifier: 2aTrG/2tqV7rPf5S5rbOBx5p9l9LCulPLKSrLrrrizQ=
Subject key identifier: 03:4F:28:73:BE:BA:29:7B:53:26:66:B6:23:EB:90:6A:DC:F2:1A:27
Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Certificate serial: 09B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
Manifest number: 09A9
Signing time: Thu 30 Jan 2025 20:07:32 +0000
Manifest this update: Thu 30 Jan 2025 20:07:31 +0000
Manifest next update: Thu 06 Feb 2025 20:07:31 +0000
Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: KJM5LNMDNHbtsBxucSJWtMtxBNcVm3IVxbmlAXsixhw=)
2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482 (0x9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
Validity
Not Before: Jan 30 20:07:31 2025 GMT
Not After : Feb 6 20:07:31 2025 GMT
Subject: CN=679bdc04-cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:84:0f:e5:8a:6e:31:8d:37:ec:76:cc:e0:
85:2f:e7:e9:af:78:d2:a6:5b:df:ea:74:16:0a:80:
48:f8:82:49:f9:d3:5b:2d:c7:c5:40:88:35:70:12:
2f:df:19:8c:65:bf:6b:07:46:2d:d9:32:3f:09:2c:
d7:2c:20:3b:e6:7a:06:00:9d:a4:fb:de:17:ab:dd:
73:24:8e:e7:e3:f7:57:ca:51:90:8d:5a:8b:16:b1:
28:ec:1e:fc:bb:e1:7e:85:fd:36:a1:62:70:b9:86:
9d:0b:57:ca:33:50:31:f1:87:56:73:c8:2b:68:d6:
be:7d:98:f5:be:d8:30:42:32:08:90:0b:db:ef:80:
a5:7c:81:01:e6:67:3b:a9:05:e4:32:ea:18:51:91:
ea:ef:a9:6b:b7:c9:a1:f7:29:09:8b:a1:77:5c:bb:
32:ad:92:56:4b:f5:be:4d:63:30:80:26:27:36:6c:
5e:1e:c2:a3:b7:d0:7a:9f:2e:09:9c:0d:79:18:71:
ed:71:62:42:bd:84:ac:f1:98:4b:52:f0:39:6e:ab:
02:00:19:bc:c1:43:0b:af:32:1c:57:8f:53:4c:6f:
a3:20:e1:c1:35:07:3c:5c:e1:b1:3e:26:b5:25:41:
08:18:22:b6:78:7f:2e:d3:80:11:ea:47:5a:3a:c8:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:28:73:BE:BA:29:7B:53:26:66:B6:23:EB:90:6A:DC:F2:1A:27
X509v3 Authority Key Identifier:
keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:5e:95:f2:23:3f:bd:ab:9e:00:0d:3b:32:a9:75:22:d9:
53:9c:76:25:ee:91:84:e9:4c:b1:af:13:d7:15:07:07:36:79:
84:81:60:c9:80:c8:c1:dd:d4:15:3a:63:16:4d:4b:f8:ef:63:
67:a3:c1:6a:27:cd:a2:7b:db:50:65:83:dc:b0:e6:21:bf:16:
26:e2:fb:17:3e:c2:6d:4e:0a:58:a4:ef:dd:23:a7:94:e0:ce:
c0:8d:a2:8b:f2:42:db:8f:bf:90:02:ea:42:8c:36:bd:b0:8d:
ac:c9:42:d8:81:a0:c4:c9:f8:63:6c:1d:72:81:66:c0:25:77:
6b:91:5a:5a:7f:d4:35:2d:2d:a8:21:49:ca:25:e2:d0:71:99:
16:9b:68:85:23:d8:12:ba:4b:39:69:2a:3b:06:41:62:71:20:
79:14:7b:22:51:67:96:05:68:a8:8f:e6:f9:92:b9:f2:21:65:
ca:a8:f1:83:10:6e:41:b1:a5:9c:35:24:80:71:ca:a8:47:26:
9e:14:91:e4:3b:86:77:03:b8:24:35:7d:6d:41:37:de:50:f9:
49:c9:d0:52:b8:b7:17:55:ef:e5:6f:fe:f1:25:fe:d7:4e:8d:
59:e4:e1:d5:6a:1d:4a:e7:8a:cc:49:ea:84:cd:dd:53:70:f4:
15:3e:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:08 2025 by rpki-client