Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json)
Hash identifier: 6cDy/fa7bpCyNh/m3VaubBHFMIgT92uujjvnKYaTNr4=
Subject key identifier: D9:7A:62:E0:CE:0A:54:19:70:26:8B:60:F1:5B:16:98:35:CF:34:D9
Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Certificate serial: 0525
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
Manifest number: 051E
Signing time: Thu 30 Jan 2025 23:35:58 +0000
Manifest this update: Thu 30 Jan 2025 23:35:58 +0000
Manifest next update: Thu 06 Feb 2025 23:35:58 +0000
Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: 3qO/xZMWiapF4RosX92dVaOX9fEVDQ0ks/KY8T1UqhY=)
2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: QJH4AI00yRGEUDIXxzK7vr00Zj8U+JgNqRc/dr5Ast0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317 (0x525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Validity
Not Before: Jan 30 23:35:58 2025 GMT
Not After : Feb 6 23:35:58 2025 GMT
Subject: CN=679c0cde-454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:00:78:6f:ab:f9:c0:ae:c1:fc:4f:d9:fe:
78:e6:7d:e0:fb:da:b2:43:8f:2a:38:44:6a:96:79:
2e:1a:68:29:46:f1:4f:40:4e:b4:f1:43:4c:a6:35:
6b:6d:4f:b7:c6:f6:cf:25:ae:6d:b8:6a:bc:95:ee:
ba:00:e1:e6:2f:94:38:67:7e:a1:ff:0e:cd:d2:5d:
1c:36:5b:0f:9c:c2:1c:c0:d9:01:9c:ff:84:12:e8:
fc:9d:5a:96:33:50:ae:f7:bc:8e:e8:b2:ed:a7:d8:
b3:2d:86:d0:d1:14:fe:f8:9c:9f:80:59:69:49:4d:
9e:ed:06:5c:0f:a6:0a:1f:e8:a1:2a:63:16:58:a8:
a1:5b:6e:60:b3:53:c9:5e:a2:60:c5:0c:93:06:e8:
41:fe:0e:da:ce:35:6c:0f:ac:cb:52:bb:35:c1:35:
e7:01:28:02:12:d0:07:b5:dd:41:e1:b1:37:09:10:
1e:40:cd:5f:af:37:ae:81:d2:35:af:45:a1:aa:3a:
26:d1:38:21:eb:dd:82:c4:cd:d5:a7:27:1d:07:e8:
45:a9:45:bf:78:d8:47:06:e5:ff:61:19:f2:89:30:
24:17:14:97:fe:47:c5:34:e6:42:a9:fc:d6:b3:af:
d9:b1:87:8a:25:fa:b5:bd:47:f0:52:ce:45:f8:b9:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:62:E0:CE:0A:54:19:70:26:8B:60:F1:5B:16:98:35:CF:34:D9
X509v3 Authority Key Identifier:
keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:55:ea:e2:59:22:0b:90:ec:48:37:03:ce:29:0f:fb:85:
65:99:dd:aa:4f:3f:10:95:a4:94:5b:d8:af:e7:75:0b:73:83:
97:86:5f:91:03:a1:ff:4b:d4:39:59:5d:4a:6f:72:aa:eb:ec:
83:e0:4a:eb:23:1c:e0:cf:bd:68:59:99:1a:9d:28:6f:c9:fd:
a6:d6:af:33:52:77:be:9e:b0:43:b9:ca:2c:f6:ae:29:f9:96:
37:c9:96:1a:d3:ef:55:60:57:b2:61:44:46:aa:6b:0a:92:fd:
a2:06:ce:6c:78:75:a3:03:1c:29:fa:40:98:ff:98:35:ca:bf:
59:f7:3b:00:b0:93:4e:67:6e:a2:e9:de:4b:74:92:5e:ec:6f:
51:59:51:28:11:33:18:c0:44:3d:e7:e2:53:86:6c:55:77:7a:
a7:16:e1:95:35:59:a2:e7:98:48:c1:03:ba:0d:c9:52:05:4e:
b0:a2:3f:e1:d1:f4:20:11:7f:89:d0:10:81:99:e1:49:97:5d:
6d:38:72:21:be:59:02:9c:16:9a:85:5f:6c:16:fb:db:67:76:
70:58:13:d0:5d:a6:d1:ae:d6:53:9f:33:2d:bc:61:d4:19:ba:
e1:af:03:d5:6a:da:c1:c9:28:8a:03:09:e1:00:cb:4c:74:f2:
85:6c:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:40 2025 by rpki-client