Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json)
Hash identifier: USdlw6xKvJiYJa+4Z0iU14qXC3YivGlWULPdPFemcGw=
Subject key identifier: 8F:61:E4:5E:AE:80:31:56:6D:33:C7:EB:D6:F0:72:DA:B2:DD:74:1C
Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C
Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
Manifest number: 017F
Signing time: Fri 31 Jan 2025 02:59:08 +0000
Manifest this update: Fri 31 Jan 2025 02:59:07 +0000
Manifest next update: Fri 07 Feb 2025 02:59:07 +0000
Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: sZmBurRUVv2dYtRzDptO9pOvj7Xno4dK3t90jA5BIn0=)
2: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: J9lQZhRy8nlJurek/6TmeBBfcqfbhz3LFug7IIYnNuk=)
3: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: G7v93sM93gzZ4BgWqisV58Q1qgwmrLJ0bo2fkE0d3wQ=)
4: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: Ta/ZWvPosDSPnLIBb0P0lxVE7uAqrQxU6Y7zoCnFQ8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C
Validity
Not Before: Jan 31 02:59:07 2025 GMT
Not After : Feb 7 02:59:07 2025 GMT
Subject: CN=679c3c7c-9d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:48:c0:9f:37:ed:33:85:22:12:78:32:9b:
36:44:43:7e:7c:d1:ef:01:11:85:88:e6:e9:fb:28:
27:b9:15:17:75:ff:73:f0:b0:45:fb:45:d6:77:ab:
b3:2f:ad:d5:a3:b8:8f:e3:28:7f:c0:b8:29:20:a6:
30:dd:e8:86:8e:77:e1:a3:53:b6:88:1f:65:5d:ae:
49:60:92:e8:9e:87:a8:ec:58:3e:11:7a:b2:09:2e:
ba:42:66:0a:31:b5:82:fd:02:32:05:64:1e:fd:6b:
63:89:67:fe:48:72:d3:40:9c:c9:9e:79:70:8e:41:
17:95:72:47:7b:54:0d:f4:04:b7:dd:03:3e:31:25:
44:0e:93:1f:18:fe:dd:bd:2f:e1:c9:fe:23:0d:2a:
0d:96:d1:44:e4:91:dc:e6:8f:9b:29:14:1f:53:f1:
f2:64:ec:92:81:6c:87:f1:f0:aa:47:da:10:b1:c2:
ea:cc:f9:2a:38:dd:61:aa:88:1c:96:c7:33:37:e3:
0a:00:f5:1b:ce:f0:28:4f:61:32:ad:52:32:c7:aa:
d7:9b:53:38:c7:37:db:8a:78:73:b2:c6:bf:c1:dd:
4e:c2:21:95:12:a7:cf:25:86:de:f3:39:c3:63:6b:
4b:af:95:28:f0:8e:4b:af:99:04:83:92:27:9b:e0:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:E4:5E:AE:80:31:56:6D:33:C7:EB:D6:F0:72:DA:B2:DD:74:1C
X509v3 Authority Key Identifier:
keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:c0:22:ad:7e:44:0e:6c:08:06:5f:89:c7:9d:cc:98:2f:
3f:82:2f:49:ec:be:c0:ca:d2:99:c0:c3:a0:ba:3b:a8:29:e2:
ed:d0:c2:98:cd:9e:d1:96:cd:4b:b2:f2:44:92:d6:86:d2:2c:
12:fc:d0:67:c0:57:e4:5c:8a:1b:60:26:f0:d8:5f:e3:6c:74:
5b:db:e6:d1:87:ff:c1:7c:c5:a5:89:37:3c:b0:d3:77:a7:e8:
e2:a0:fd:ff:6c:ed:c0:0b:fb:17:11:b7:1d:bf:4e:6e:64:5e:
5c:bc:a1:3b:60:03:d4:62:58:d8:f0:6c:37:88:8b:03:d1:b0:
5c:bd:92:84:65:b9:2d:4f:62:51:0d:bf:2b:c1:09:69:8e:61:
d0:3c:29:e6:a5:94:3c:e3:4e:06:f8:8d:6c:55:89:79:e4:5a:
38:c2:c8:e1:98:87:34:fc:4c:f7:44:05:c7:40:0b:eb:b5:31:
88:3e:12:a9:bb:00:4c:64:cd:bb:c5:9a:34:96:85:5f:4a:04:
ee:67:9d:e6:f7:54:6e:1f:92:91:1a:73:ed:07:6c:05:2f:ef:
3f:a0:cf:8b:a3:e8:f0:9d:5b:04:56:64:b1:0a:f5:b6:71:5a:
8c:15:16:47:08:4e:97:0c:c8:ba:f8:35:ef:1d:62:b4:14:94:
02:c8:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:45:30 2025 by rpki-client