Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json)
Hash identifier: jVr5rpFGt7d0hRTTuuulnUzHQTkGyk2D1+FtS3WWpmE=
Subject key identifier: 8C:F9:6E:5F:72:C9:8B:83:2C:DD:25:4C:09:93:E6:22:CC:87:96:F4
Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
Manifest number: 7F
Signing time: Fri 31 Jan 2025 05:44:30 +0000
Manifest this update: Fri 31 Jan 2025 05:44:30 +0000
Manifest next update: Fri 07 Feb 2025 05:44:30 +0000
Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: dCWgUZ391HrwQY/B5npy0Vv7TAG7oXWbGIwgt1IHsKs=)
2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: XvWRCynYkFhCMaJDNTtD88NyWN5MgwjlrDADWnFFA8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360
Validity
Not Before: Jan 31 05:44:30 2025 GMT
Not After : Feb 7 05:44:30 2025 GMT
Subject: CN=679c633e-eafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:dc:03:71:d0:f5:9e:bf:f0:1a:73:36:64:
c6:42:ad:48:a6:84:43:b0:98:4b:b7:f3:f1:a3:09:
d7:1f:93:08:30:13:ec:e6:ff:f9:c9:a7:69:71:b4:
9f:cf:68:af:78:ca:00:1e:23:59:e5:37:9b:72:95:
26:6e:a5:48:5b:9b:24:70:cb:c3:f6:cf:3a:f1:61:
ca:5a:eb:f6:f2:00:18:67:90:c9:0b:6e:70:75:5a:
66:26:22:45:b3:a6:6c:51:f8:8e:7e:68:d9:3f:1b:
3c:3c:b6:6e:84:d5:34:09:ec:6d:6c:88:7c:5f:ac:
ab:ad:6f:80:ce:3d:e9:00:8b:8a:46:9c:d5:6d:fa:
3e:42:c6:96:26:68:02:cd:08:92:52:d7:a1:ef:72:
42:5c:41:27:97:c3:dc:76:f9:66:45:3a:0f:77:ab:
19:89:9b:81:f8:b2:5b:01:d3:f1:61:aa:69:0d:3d:
86:5a:75:0f:ca:2b:e7:00:67:8b:2f:7f:ec:9f:d1:
bf:de:fb:e7:7d:fa:d5:63:68:b4:33:a4:c4:72:6a:
7a:a0:60:61:6d:b0:54:d6:63:18:cc:ae:c0:c4:f9:
87:6b:5a:63:23:b4:fe:22:7d:68:58:03:31:86:4f:
f9:a1:20:62:43:c6:c9:3f:22:89:6e:e1:06:bb:d8:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:6E:5F:72:C9:8B:83:2C:DD:25:4C:09:93:E6:22:CC:87:96:F4
X509v3 Authority Key Identifier:
keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:98:e6:d4:54:f7:bb:4c:d2:89:48:23:a5:52:90:7a:78:
19:fe:d8:b5:a4:05:21:91:5b:0f:c5:82:32:b6:dc:ab:c5:76:
1b:1d:98:44:36:b7:69:39:11:0b:59:cb:b0:0b:3b:67:51:fe:
e8:df:f1:7b:3c:83:d4:62:9b:38:83:c0:0b:5d:bc:85:59:aa:
b8:4e:54:2f:12:8f:36:ea:65:17:c8:cb:ad:87:18:dc:dd:9e:
e4:60:26:22:62:8f:95:c6:ea:2d:a7:3e:bb:fa:7f:c4:53:f6:
68:06:e8:5d:39:5a:82:b0:7c:1d:5b:64:0c:b2:f8:39:79:07:
70:14:7c:7c:da:77:3e:82:14:98:0c:c9:10:b3:46:81:b6:6e:
aa:62:fb:98:92:e3:fb:96:31:0a:39:df:a6:3f:27:4b:9a:fc:
b1:f9:b8:63:24:86:38:62:77:7c:53:fe:f2:ca:7d:55:af:62:
be:d8:d1:2c:02:43:b4:2b:7a:5a:85:0d:63:a5:81:9b:ba:1a:
ab:8e:b5:5c:66:aa:7f:a1:de:57:70:99:a1:41:93:ef:45:5f:
93:8c:8d:90:2f:34:28:61:cb:b5:81:d0:14:d1:8a:da:6c:ca:
5c:c5:7a:5c:72:56:7d:41:df:ba:b7:d9:89:28:4d:1c:4f:9c:
8e:eb:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:14 2025 by rpki-client