Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json)
Hash identifier: rabfyhH/6rWaHDaGesWnYPH6OKCZqqoikCpOVoJWCOc=
Subject key identifier: CA:3A:66:C2:E4:41:30:A4:50:EF:AC:77:5B:36:58:B6:D9:4B:51:2F
Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Certificate serial: 2D9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
Manifest number: 2D83
Signing time: Fri 31 Jan 2025 15:32:02 +0000
Manifest this update: Fri 31 Jan 2025 15:32:02 +0000
Manifest next update: Fri 07 Feb 2025 15:32:02 +0000
Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: A6/6tePMsiWsZXvnY71YQL5za3neF2J42UZtaQqKD+4=)
2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: Ge8zFlpjpqEtuKQN0h56H1Urr1O0D0HMkBD9jJfCPmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11675 (0x2d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Validity
Not Before: Jan 31 15:32:02 2025 GMT
Not After : Feb 7 15:32:02 2025 GMT
Subject: CN=679cecf2-674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:41:27:6c:b4:a8:89:2c:68:be:dc:ca:d0:
1f:52:15:3c:29:ed:f8:84:99:95:f6:f9:29:36:a7:
dd:4c:a2:bf:2e:16:10:53:7c:f1:d2:40:9e:0c:ce:
80:19:9c:40:66:b6:b5:13:4c:82:ad:8b:c3:db:7f:
8a:77:04:71:cf:60:5a:4b:ce:86:c0:8a:3c:66:a3:
9a:f1:63:59:b8:ff:3c:c2:63:93:b8:42:2b:36:45:
af:70:9a:11:7a:1e:d7:25:41:fc:89:51:2c:41:f1:
eb:ea:59:47:5a:29:f5:06:a0:10:57:d1:f4:09:59:
c4:eb:7d:71:56:2e:4b:41:ce:44:97:fc:3d:ae:9c:
ee:89:6c:67:b2:b1:3f:98:2e:a9:16:73:9d:0b:d7:
24:04:54:1c:93:01:4c:de:19:62:6e:d0:8d:fe:d6:
c6:68:52:a3:4c:d3:a2:27:c9:14:60:e2:05:a2:5f:
4d:ed:b8:e5:7f:d9:6a:e1:60:8b:08:4c:90:33:97:
e7:43:c9:f6:6a:e9:ce:42:fd:9e:d1:ce:e4:7e:7e:
7c:78:01:12:5c:38:b3:be:81:52:28:00:54:43:15:
6d:cb:1b:b6:f1:41:21:fc:38:7c:20:9b:07:b0:4c:
fb:7a:05:e9:d5:08:e1:29:50:83:2a:28:b3:d1:37:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:66:C2:E4:41:30:A4:50:EF:AC:77:5B:36:58:B6:D9:4B:51:2F
X509v3 Authority Key Identifier:
keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:87:b0:0c:5c:11:84:5b:d8:25:81:d9:f6:4a:7d:b5:8f:
24:1e:73:18:dd:b7:50:de:2b:cc:dc:8b:23:78:79:4c:23:43:
00:9c:ba:8c:38:fb:c1:14:1d:af:e1:24:30:dc:90:91:f0:1a:
4a:0f:0c:0c:29:ad:b2:2f:76:06:cf:79:57:5d:84:4e:6e:74:
35:1c:bd:26:2e:98:db:04:15:bf:56:f3:7f:dc:f5:73:0a:a0:
bf:9d:42:a4:d3:80:88:ee:4c:62:f3:c3:8a:3d:54:72:08:f7:
ca:10:5c:27:7d:57:16:12:80:8a:8d:62:9d:9f:5b:f6:2c:68:
10:9f:5c:f4:19:f8:bf:39:8a:15:45:de:e4:fa:e4:2c:9c:74:
49:4c:7d:c0:0e:ce:47:86:73:06:ef:20:3c:78:c9:95:6b:dc:
81:d0:c5:a0:65:3c:aa:a2:02:3e:2f:ff:c9:21:2a:0b:39:76:
c9:9a:85:60:8d:a0:f0:68:5c:d5:0e:02:97:9a:55:2b:d7:4b:
03:f7:e4:d2:6d:bc:c2:4a:e5:07:f5:30:35:da:1e:b5:df:bc:
19:c8:65:e4:bc:42:90:81:2b:74:3a:be:31:a8:92:69:83:e3:
e0:68:ec:44:8b:0a:dc:2e:05:d5:3b:13:a9:ea:9b:e9:5a:27:
71:1e:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:54 2025 by rpki-client