Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
File: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft (raw, json)
Hash identifier: EWswcUeFT6OzQ+mf2X9HAeiize4DvzpWFpjeNaLQ/C8=
Subject key identifier: DD:E4:16:0D:A8:03:D2:08:17:AF:46:A1:57:AC:4B:EA:9C:A1:FF:52
Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Certificate issuer: /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Certificate serial: 0A4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
Manifest number: 2AC7
Signing time: Fri 31 Jan 2025 15:58:15 +0000
Manifest this update: Fri 31 Jan 2025 15:58:15 +0000
Manifest next update: Fri 07 Feb 2025 15:58:15 +0000
Files and hashes: 1: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl (hash: XS6vL30EcEMgqigaoMHiruimtUQQ8jwIdSsENdMRZhw=)
2: 1324C3945ECB11EAB9A53075C4F9AE02.roa (hash: hynQ+zMY6yYtj9TGCMxo6QilzD8OnYO85+WnqQbdC74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2636 (0xa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Validity
Not Before: Jan 31 15:58:15 2025 GMT
Not After : Feb 7 15:58:15 2025 GMT
Subject: CN=679cf317-2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:d5:ea:3b:c7:11:ac:13:53:90:ac:be:4d:
8c:88:07:dd:80:9c:76:bf:64:37:67:96:17:58:6c:
db:4d:a5:08:e6:4f:a9:d3:a5:07:47:7b:17:1d:9b:
4b:37:cf:d3:cc:5c:a0:eb:c3:b4:e0:1c:0f:bd:ad:
4e:36:36:18:9e:3b:f3:50:f1:6d:43:44:e5:80:c9:
4d:e5:1e:26:9e:f0:95:fa:0f:43:8b:14:97:8b:ea:
a3:96:cf:bd:b8:b3:47:a6:36:40:db:56:00:3a:ec:
25:f1:25:25:b2:45:7b:fb:90:85:72:7f:94:c4:87:
3a:2f:91:99:20:45:ee:f7:fd:1c:14:56:56:a2:94:
4c:13:38:3b:0e:87:a5:1a:01:a1:3f:de:f7:d1:aa:
42:3e:63:3e:41:f7:29:f3:ca:85:3e:a1:05:ac:b7:
8e:da:12:ee:b5:19:5b:e1:be:16:04:b8:b2:67:c2:
62:48:c0:4d:33:cb:87:86:da:e3:56:9a:4b:ac:76:
c5:93:81:82:ac:f8:2e:02:24:32:35:ce:a5:5a:56:
7d:78:72:67:83:aa:73:88:d3:78:b7:09:e4:65:f2:
7a:4a:9d:8a:40:cd:e2:cc:60:30:af:d6:92:34:1d:
93:83:3a:15:cf:d6:2c:85:0e:91:d4:2b:91:17:6c:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:16:0D:A8:03:D2:08:17:AF:46:A1:57:AC:4B:EA:9C:A1:FF:52
X509v3 Authority Key Identifier:
keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:38:5a:8e:48:e7:5f:0f:54:ff:26:5c:ba:44:f6:7e:38:c9:
b2:a2:6d:ee:0d:0f:d3:cd:0b:92:14:d9:79:a0:c5:97:b5:b9:
b0:b1:dd:93:97:f5:31:47:5b:c8:47:bb:84:0f:da:43:06:4a:
95:ac:44:d0:8e:84:bc:ce:a7:28:8c:f8:c9:2d:60:4d:8e:84:
de:3e:2e:d0:1c:1f:1b:94:b6:23:43:48:0d:5a:01:72:52:73:
da:c0:ab:bf:b8:1a:6a:a8:d1:64:e4:9a:32:ae:85:4a:02:c0:
8f:80:f0:ea:89:47:b6:76:4d:2e:07:2a:08:a5:7b:f0:8a:cb:
54:c9:b7:26:83:8d:a9:2b:a2:7a:e1:72:ff:e7:71:65:1d:00:
3e:7d:52:bf:a9:d1:02:39:29:57:b6:8b:13:f4:53:97:0b:ab:
b4:72:44:d7:65:88:f6:83:3d:27:93:5b:c7:6d:02:b9:f6:0e:
1f:6c:d1:39:32:ac:3e:70:de:1c:49:01:35:36:13:7b:6d:f1:
ca:d4:7e:49:0c:b5:88:fc:8e:80:0c:64:cd:93:9a:e5:d3:58:
f9:e2:ce:1e:e1:3e:87:bd:99:7d:ce:90:75:cd:fa:2f:36:7f:
da:45:2a:04:cb:f9:df:41:fb:b4:99:34:c3:0f:ca:64:b1:9a:
05:dc:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:39 2025 by rpki-client