Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier: qnHiNvc8i5jkzh4DzcUVnYZ73J90MkcAPeZ4Hm4HtpQ=
Subject key identifier: 0C:4B:E7:4E:21:28:7F:B2:F0:B8:7F:C6:A8:41:EA:78:BF:DD:ED:25
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number: 5B
Signing time: Fri 31 Jan 2025 06:08:21 +0000
Manifest this update: Fri 31 Jan 2025 06:08:20 +0000
Manifest next update: Fri 07 Feb 2025 06:08:20 +0000
Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: nkzwyr7pWJ+7wQNuP2JOC/wN1Bz+/Y+0rjEu/0Hd5Ng=)
2: 609701825A1611EF9ED11513C4F9AE02.roa (hash: bgNsvlct6cf/BWMOzM4D0nnTwsIX5vRKPjJTejU5LP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Validity
Not Before: Jan 31 06:08:20 2025 GMT
Not After : Feb 7 06:08:20 2025 GMT
Subject: CN=679c68d5-7c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:46:55:89:55:db:43:0a:f0:ba:a1:54:36:
b0:74:34:4e:5a:c8:ee:c6:18:7b:a9:42:cc:49:f5:
69:32:95:09:e1:c4:77:7b:ba:97:ac:04:66:f9:68:
a5:7e:45:6c:ff:0c:10:23:97:d5:24:8b:f6:cb:2a:
5d:98:2e:da:8f:0c:26:a7:7a:96:3d:f4:fe:1a:ba:
7b:0b:e6:35:94:d5:79:d6:c9:9c:f7:70:67:a2:62:
f7:0c:ba:ad:7d:72:b5:34:1a:cf:0d:e6:c9:85:7f:
77:fb:13:d1:3d:ee:cc:c0:54:a7:cb:ad:f7:1d:85:
ff:eb:b8:c4:17:d4:2d:2e:cb:b9:15:c2:f7:0c:58:
d5:13:3c:d6:15:55:b0:5b:3c:89:77:58:cb:d7:17:
33:7f:0d:3f:37:01:af:bf:0b:76:81:c3:d1:ba:30:
27:55:8d:40:b6:1d:ac:26:64:fb:6e:26:fa:13:cc:
97:e2:ae:e7:e5:4c:00:64:6d:b5:53:4d:98:5c:83:
10:9f:ef:be:e5:24:6c:e1:ff:0a:3a:00:a3:0b:ed:
d2:42:0a:78:24:05:31:b3:82:0a:5a:0e:37:a6:83:
ad:c4:83:23:96:65:fe:42:a6:27:6e:cd:81:55:de:
49:49:79:44:82:b8:9e:10:59:4e:4c:5a:48:e8:03:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:E7:4E:21:28:7F:B2:F0:B8:7F:C6:A8:41:EA:78:BF:DD:ED:25
X509v3 Authority Key Identifier:
keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f1:26:ab:7c:12:5c:6e:2e:b5:1c:ce:cd:c9:58:85:8c:a9:
c5:c9:f7:71:37:84:88:06:0e:96:3c:1f:67:2a:3d:c6:7d:1d:
c6:85:87:57:65:57:07:f0:84:99:7f:3d:84:6a:6e:91:1a:1f:
6c:b5:a7:69:fb:15:f5:5d:6a:f5:4c:ef:53:67:1b:e4:49:e2:
e8:d2:c5:1d:68:6d:c8:45:b7:61:1f:e1:12:79:a9:a5:7c:a3:
fb:e2:0e:47:1b:8b:e2:5d:8f:f5:37:cb:20:5c:b8:ef:cf:8e:
f1:8a:58:c3:8a:be:0a:19:04:38:ac:34:f7:b8:04:36:5e:fc:
80:04:b4:22:d6:94:46:e6:fb:4a:63:45:64:8e:8f:6f:5a:f8:
ab:74:dc:3c:88:17:82:db:29:0a:13:6d:d5:b3:aa:30:fd:b6:
83:8e:f3:80:3a:02:ad:b3:ea:a7:ea:01:e6:e9:93:7d:9d:8d:
51:aa:f8:6f:f1:5c:5e:3e:cb:c7:dc:0c:b9:d0:0b:0e:e7:82:
29:44:38:5f:f0:3f:bc:38:41:20:9c:09:a1:52:39:24:5f:a5:
f5:22:d8:49:78:f5:20:a5:88:2b:2d:8d:dc:d0:4f:55:b9:f9:
01:ee:47:3b:df:ec:30:98:c5:44:eb:8a:b0:bf:0d:57:7e:fa:
a5:93:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:27:30 2025 by rpki-client