Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json)
Hash identifier: Bs6qGRwC9eAecax88rqFQNgyxdyt5LMPr/D76NpXybQ=
Subject key identifier: 27:1C:11:A4:FB:7E:00:2E:70:2E:3B:D4:E9:7F:34:82:73:C0:05:D3
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
Manifest number: 26
Signing time: Fri 31 Jan 2025 06:51:05 +0000
Manifest this update: Fri 31 Jan 2025 06:51:05 +0000
Manifest next update: Fri 07 Feb 2025 06:51:05 +0000
Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: ZiRvbjVcwTKbHnt8ZWmMXJ6ai9ewsudTw+MbiGFbs6g=)
2: 07D85DDEA7C811EF92C28379C4F9AE02.roa (hash: 9mVkmZtrTEdtUbw4LlN+DxJy0nOhfAMrpxdSeh7xUKY=)
3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: VhOJTg1J41s5lkOv/ckUP2wgxV/zxhCWRKbMpmBKiwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Validity
Not Before: Jan 31 06:51:05 2025 GMT
Not After : Feb 7 06:51:05 2025 GMT
Subject: CN=679c72d9-2f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:c0:c8:a6:e0:e6:56:bd:4a:c2:a0:97:5a:
6c:54:31:e2:3f:ac:1e:c7:67:b3:9c:ac:84:62:f0:
e0:ec:09:0b:12:1c:11:a4:3d:5d:39:c3:3f:56:1c:
a5:90:5b:61:2d:ff:d6:ea:25:f9:a7:03:6f:b8:72:
1b:eb:d5:e5:3f:8b:ce:08:11:d1:cc:08:81:65:c2:
13:39:ba:17:80:f2:0b:6e:a2:9b:82:20:98:cd:e5:
e9:02:5e:c4:f4:a0:b7:07:ff:f9:05:7c:ab:42:ba:
e6:ee:67:fb:97:48:b1:46:00:79:b8:51:2c:c9:22:
f9:27:6d:82:cf:8d:33:0e:93:9d:85:84:7c:2b:aa:
c6:fa:97:e3:21:2d:44:8c:d6:4d:bc:ff:2a:37:71:
0b:80:69:99:8c:dd:f5:fc:2b:77:0a:f0:37:c0:de:
2b:a1:59:e4:eb:5e:5b:7d:86:ad:be:aa:06:b6:a3:
c3:42:84:c2:e9:33:3e:24:a2:df:19:37:78:31:7f:
e5:39:75:5f:72:c2:fe:72:dd:64:c2:cb:4c:5a:50:
5e:62:2a:cd:f5:29:31:aa:29:f8:f8:4a:83:bb:be:
d3:77:b9:38:00:e4:2d:f9:2c:07:a3:e2:44:28:22:
1d:91:80:41:19:39:84:62:90:5b:6b:cb:8c:c9:af:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:11:A4:FB:7E:00:2E:70:2E:3B:D4:E9:7F:34:82:73:C0:05:D3
X509v3 Authority Key Identifier:
keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:9a:4a:4b:a4:eb:1f:61:cd:7c:1f:6e:32:86:bd:2b:f9:07:
fe:2a:c5:74:b8:ab:a3:38:b8:8d:0c:a7:88:09:30:d7:b3:95:
52:d3:db:63:cf:9e:73:47:16:7e:c5:ea:a8:be:a8:b3:4b:e8:
75:46:d2:67:7a:83:ba:46:5c:1f:c4:c8:96:f3:a9:bc:3f:37:
d4:3e:95:a9:47:9d:7d:c7:17:69:dc:dd:76:0f:ec:5d:ed:53:
69:fc:b2:b9:41:95:3a:f5:02:0c:60:4a:4a:51:0f:6d:9e:77:
7d:e6:67:85:11:e2:9a:bc:d2:cd:87:9a:5a:65:fc:f2:c4:ed:
a0:c3:2e:44:32:52:73:73:ca:fb:93:84:4a:d6:bc:a8:76:8f:
45:43:f5:59:9f:fd:2a:00:32:7d:3b:9e:80:86:1a:a7:79:be:
e3:30:6d:d7:3b:1f:e4:f2:11:99:cb:4e:a0:52:82:54:00:3a:
92:2d:9c:c7:76:0c:da:a8:45:5e:9b:86:f8:91:11:1a:ac:90:
d2:3e:58:af:57:fc:2b:5d:48:c3:8f:23:ff:9c:7d:2b:56:5b:
5b:c1:79:46:92:d4:47:d4:1b:2f:df:c6:6f:6d:3b:d7:c7:cb:
d9:c9:b3:df:08:2d:7e:f3:be:86:88:30:5c:24:b1:56:27:30:
08:da:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:45 2025 by rpki-client