Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier: prcTINLeC1QdIBkkSF1R7eKWiiodelFj1BW1nN5fx+g=
Subject key identifier: 88:74:D7:A8:79:6E:A5:2B:E8:A5:C2:F6:31:A7:A2:76:65:39:C2:4E
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number: 0217
Signing time: Fri 31 Jan 2025 02:15:46 +0000
Manifest this update: Fri 31 Jan 2025 02:15:45 +0000
Manifest next update: Fri 07 Feb 2025 02:15:45 +0000
Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: DrwIgH92Rs/HTxAX2zMo8+JlnjD/yY0e26stW6w3uZc=)
2: E309B1883C9711EF88C2B284C4F9AE02.roa (hash: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc=)
3: 8673F05C816911EF9022F40CC4F9AE02.roa (hash: Lvob14CywzAMuxThU8EVo51F2cECjcbnduJBtYIJSBI=)
4: 4E65B594D35711EEB8F04828C4F9AE02.roa (hash: oF0KHM0s6qEdjrzJyCovkn3VK6S/rVe2wxmJbXBONNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Jan 31 02:15:45 2025 GMT
Not After : Feb 7 02:15:45 2025 GMT
Subject: CN=679c3252-77bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:63:4d:da:70:db:29:f9:34:5e:97:62:29:b8:
0d:3f:06:d0:ea:b2:81:79:f8:ef:14:00:c0:1b:25:
87:19:aa:22:40:70:be:b7:0a:b1:b5:b5:d7:2c:c1:
50:f3:22:6a:1b:4d:70:05:88:5e:28:9a:27:cb:44:
c4:ae:00:21:1f:1f:0b:cd:5e:40:88:b8:7f:62:93:
c3:42:e3:c4:a7:58:52:b7:cf:21:6e:ac:e0:27:c5:
29:ad:fb:80:83:51:e7:61:b5:99:d6:b2:17:39:6e:
42:a4:5e:eb:dc:73:77:c5:35:b2:b5:50:e2:1e:b3:
a2:5c:7e:a3:0c:b1:5e:18:23:3c:d8:74:8b:cd:ea:
d1:07:31:6c:6a:55:96:04:13:3d:47:87:87:86:77:
76:eb:85:19:ff:0c:6d:1a:f9:da:ca:7b:ab:26:c4:
4d:42:64:93:31:57:b8:34:ec:ab:6b:65:90:63:65:
24:e2:3b:e8:5c:22:11:11:7d:b6:38:4a:5a:3b:30:
6a:7e:97:fd:aa:33:d5:aa:63:69:7e:53:87:82:34:
79:01:df:ee:d2:df:b8:2e:70:ca:e4:2a:4c:0e:d9:
e3:5d:4f:91:d7:cd:43:d2:51:59:a5:15:f1:5c:c2:
96:3d:4b:77:c2:5e:e1:1c:65:21:3b:93:f3:5f:4b:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:74:D7:A8:79:6E:A5:2B:E8:A5:C2:F6:31:A7:A2:76:65:39:C2:4E
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:04:0b:13:3d:3c:e8:98:53:69:b2:c9:3e:72:69:af:d9:2e:
13:f1:51:1a:ef:d5:2d:24:c8:d5:0f:b4:ab:b8:ee:71:a8:24:
e7:d3:b3:70:50:36:df:4d:08:ab:11:74:24:62:65:ac:d7:d4:
82:e2:2a:69:f6:90:8b:5a:82:ff:22:1c:a3:51:d3:f3:11:ef:
ac:48:b6:3e:73:23:34:11:d5:15:fb:d1:ef:f0:86:23:ba:78:
3b:c0:70:4e:27:69:c1:ea:2e:66:28:4c:f6:73:aa:82:a7:67:
1d:3f:22:e7:85:ac:ab:7d:7d:75:ad:c3:1e:68:b8:89:98:fc:
5f:37:55:d2:31:13:99:c6:70:0e:37:62:85:3a:74:88:3d:ab:
3b:2c:dc:7c:60:5d:93:76:3a:7e:dc:b9:ec:c7:04:50:45:3a:
ca:8c:5b:60:8a:4e:b6:b0:2a:4c:bb:43:3f:ba:38:f1:3e:22:
dc:e7:26:7f:66:a7:1c:c9:05:22:9e:ba:fb:3c:90:4e:53:c1:
6d:77:1b:d8:fa:71:b7:44:2d:18:0e:ca:21:98:bd:60:b6:5d:
b9:14:06:a4:f8:b0:92:43:74:c6:de:c4:e4:70:ce:41:bd:9c:
ad:6d:9f:f2:e2:7e:c1:fc:48:98:51:df:64:46:12:59:df:16:
66:8c:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:28 2025 by rpki-client