Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: GhgC7zIjfRuKV7hv8iM36VkqiaFS9YDJef8mt1bD9UU=
Subject key identifier: 32:AA:60:3D:D1:62:A8:39:44:8F:68:43:98:6D:79:6C:2A:79:7C:20
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 03E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 03C4
Signing time: Fri 31 Jan 2025 00:47:32 +0000
Manifest this update: Fri 31 Jan 2025 00:47:31 +0000
Manifest next update: Fri 07 Feb 2025 00:47:31 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: Qm3SqaHp7mfmHE3B7iJJU8xj4YEz4wZuEXk95qZgDds=)
2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: RXAdqmSBa5R8pArnqqd3C38h3ZgnJT4nvm5yTc/m5SQ=)
3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: KeTueCm3z2LBug4KnXXzF4iTTZQ8It6Q070daguo0jI=)
4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: e7+o0oFCUhzzHHgIWSNACl9jZuC2f8qoowBsWPxw+Fs=)
5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: P0OlJRLvIMDdrF/RijM8YcE19SRlKeRCGV8u4qFW30s=)
6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: 2EXYCICBvAeJltk6VH8XYxe2JtqWcKEjv0iqiczQGfw=)
7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: b/gp19EaEtfqCK263TvkCdJtfuwUtevQan/MP233wis=)
8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: 93Kt6LwZj8vpnkAC/zmxnrwkVwaQ3ULBvZN+SYlceu0=)
9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7CVfnyqnIiLW71WuBjnEZ7aaTtwRTAZvuVVY0lHLWVc=)
10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: EMqyfxPHhDkEirOZ3LxPHg+w+AohZeB5bS2RIkYA/qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Jan 31 00:47:31 2025 GMT
Not After : Feb 7 00:47:31 2025 GMT
Subject: CN=679c1da4-30f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:99:37:f9:98:24:ba:a3:81:19:21:f7:b5:
f1:d7:c0:e8:58:b0:46:a2:bc:0e:2c:d1:2d:65:7e:
58:81:33:cb:f1:95:94:2a:39:e4:96:d3:4a:ec:2a:
e4:63:c4:0d:78:fb:b1:b7:b4:29:f9:cf:f7:f4:59:
2c:b1:a6:06:a4:5e:48:94:53:3c:82:e5:d1:3f:f6:
9d:e7:71:ed:5e:d2:39:fa:fa:df:ab:06:fb:e9:0f:
4e:0c:b3:29:ac:a3:db:2b:83:0e:9f:82:c2:3c:a3:
3c:de:04:be:4c:3b:60:f7:86:1e:69:dc:2d:3c:cc:
78:42:8f:48:d2:c4:d5:e1:a3:5d:08:5b:e8:a0:ef:
29:3f:e0:88:5f:3d:fc:ea:62:e7:45:dd:3c:f7:f8:
83:f6:21:05:1b:74:e9:2d:8d:22:90:88:1c:5a:b3:
14:27:ff:94:05:7e:e5:4e:e6:86:5a:68:09:3e:d0:
78:ba:93:d7:85:2f:f1:9f:c0:72:bd:2c:4c:df:e3:
f1:08:ce:fa:71:56:82:c8:e7:10:25:89:62:6e:e7:
89:94:df:9b:ef:0b:1a:b0:96:2f:ab:63:b9:7d:53:
12:6c:a0:4d:e3:f1:93:41:8e:08:ff:22:08:48:02:
5e:a9:b0:7c:7e:dd:4a:b2:c6:2c:db:09:35:ea:28:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:60:3D:D1:62:A8:39:44:8F:68:43:98:6D:79:6C:2A:79:7C:20
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:84:6d:28:57:37:93:8d:90:0c:d1:46:58:fd:7c:79:da:47:
33:af:31:b3:8d:0c:d9:64:79:6b:9d:48:15:f2:a5:4a:08:4b:
f4:f5:40:ab:74:e9:84:74:b3:df:f6:a4:d3:b0:ae:3c:de:c6:
9e:14:45:71:12:c6:16:71:9d:2c:cd:7a:ce:19:91:84:1a:c8:
04:a3:2e:6f:ac:9c:d3:2b:7b:2a:72:2f:29:2f:41:27:63:0c:
71:5c:f7:91:76:5a:bd:e3:42:59:bf:1d:28:f5:e4:2d:c3:91:
08:31:d1:eb:92:cb:b2:6d:44:fa:b6:8e:f0:78:9f:d6:91:89:
10:d3:b4:7c:95:c2:17:d6:66:fa:3f:d6:fa:1b:3f:8d:84:b3:
48:fb:ae:17:57:4e:32:d2:ec:89:48:71:b2:53:06:82:2a:24:
45:a7:0c:b9:0b:a9:13:97:0e:bd:55:56:fd:81:50:94:85:4b:
8c:02:d1:0f:82:66:48:79:ff:32:81:ec:da:a9:c7:5d:4e:d5:
46:5c:ce:15:b6:4c:a1:f9:29:2c:47:19:df:76:57:57:9c:91:
e3:7c:a8:73:d3:17:bc:15:96:d4:bc:89:69:1e:07:55:ee:d8:
74:ad:bd:64:26:2d:9c:21:9b:c9:77:96:44:fe:ce:9e:df:7d:
d2:d1:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:47 2025 by rpki-client