Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json)
Hash identifier: RuyST6lyW1dkwV2pUc4lUdyJZSFAwm5GHlc/wXbYq88=
Subject key identifier: 8C:B4:F6:0C:29:E9:EF:A2:B8:52:72:BC:D7:84:F7:6F:B4:42:BC:C8
Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 03:49:22 +0000
Manifest this update: Fri 31 Jan 2025 03:49:21 +0000
Manifest next update: Fri 07 Feb 2025 03:49:21 +0000
Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: 6LXrVksr9KhHvbidoQ/5mkp1ssve0gvgKv6cYieIrVI=)
2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=)
3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: W/53nThgtqJJzKbcr1z4E+VxinzpZInwajjfUaYcr0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Validity
Not Before: Jan 31 03:49:21 2025 GMT
Not After : Feb 7 03:49:21 2025 GMT
Subject: CN=679c4842-e5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:50:75:18:af:58:f8:df:1f:33:7c:fe:b5:
c8:de:6f:31:82:20:34:46:c1:f2:b8:c7:f3:db:0f:
56:0e:ae:60:29:6f:ff:fb:57:64:5c:d3:7d:9f:30:
32:d6:68:86:5b:60:c0:65:bf:4f:39:d1:55:20:4c:
bf:e5:cd:bd:76:73:29:dc:9c:33:04:b0:7c:5d:52:
5d:ba:8d:f4:fb:38:27:07:f9:02:3d:0a:38:68:a0:
81:66:51:a1:be:e0:72:d3:47:43:b9:e7:5e:2b:57:
72:77:db:6c:72:c7:65:52:ce:07:0b:e9:07:76:bd:
f7:d8:11:f4:38:24:67:36:62:c0:6a:14:8b:bb:43:
81:66:c7:87:fd:c0:43:3e:23:76:6c:30:56:9b:81:
d9:ba:8a:fa:16:dc:b9:3d:0c:b8:d9:7b:06:05:f2:
4f:2b:6a:1b:a8:1e:f4:99:ba:b0:8c:1b:e9:2e:44:
8d:2c:92:9a:6c:28:62:09:c2:40:18:0f:12:55:07:
b9:95:06:20:6f:ee:e7:19:c5:34:98:82:29:d4:80:
56:60:20:99:9f:5c:d0:1c:85:d1:21:79:05:ff:d5:
68:63:1b:10:95:8b:a3:f8:65:0c:17:fb:b8:93:76:
46:0f:e8:e7:89:88:39:d9:6d:f6:61:b5:c4:50:4e:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:F6:0C:29:E9:EF:A2:B8:52:72:BC:D7:84:F7:6F:B4:42:BC:C8
X509v3 Authority Key Identifier:
keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:88:89:ad:0c:b1:9a:64:74:62:e2:75:c8:1b:73:63:9c:
53:d3:7f:5a:c1:47:34:9b:61:02:c7:14:b9:ca:be:55:03:ca:
a5:6e:74:2c:4e:c9:e9:c4:de:aa:dd:3c:bb:cd:b3:23:e6:4d:
40:f5:9f:6d:c7:ae:46:2f:b4:31:59:a1:ea:87:29:3a:06:a9:
c3:8d:eb:3b:6c:fc:7a:a1:25:63:52:91:9b:4c:b4:24:56:cc:
19:84:00:30:6d:33:2e:93:ce:45:a6:66:f6:bf:7c:f0:e1:07:
41:1f:fb:e8:e4:54:a9:8c:68:6b:ae:90:b0:f7:6f:36:f3:dc:
e9:cf:3a:79:02:5d:d8:22:6b:c5:ed:35:cc:3a:5d:5e:6f:90:
91:ad:97:8a:67:61:c8:62:20:a1:5c:00:46:ad:4f:21:79:4f:
24:3c:b4:8c:a2:4d:90:48:c4:90:8c:0f:08:08:04:21:6f:b4:
15:a9:e6:2e:b7:f1:d0:2c:6f:9d:8e:86:b3:a0:9a:12:a0:ed:
cc:6a:a0:1e:c9:26:d0:34:f1:7f:d3:34:5b:4f:ad:34:c3:ca:
e0:78:77:8a:55:e9:9e:b0:09:fa:f2:c9:48:26:c7:bc:8d:76:
65:f7:86:c7:34:8d:bd:80:4f:63:ef:df:98:4a:32:58:7b:c7:
e9:8a:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:59 2025 by rpki-client