Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier: zA//pW96l74X7z5+hFwbGy733WYa805V8xm3a6z/JFU=
Subject key identifier: BC:69:A3:F7:A1:8E:D0:EE:FC:7C:0C:12:EA:37:DB:CA:DF:7B:61:D4
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 03:54:03 +0000
Manifest this update: Fri 31 Jan 2025 03:54:03 +0000
Manifest next update: Fri 07 Feb 2025 03:54:03 +0000
Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: I76f3x1tyrtmSXBrhS4aTyWUzxey4QpH+n/Xu8Q4uPY=)
2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Validity
Not Before: Jan 31 03:54:03 2025 GMT
Not After : Feb 7 03:54:03 2025 GMT
Subject: CN=679c495b-c281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:17:91:11:69:b4:18:f5:9d:7f:91:7d:97:
e4:a3:62:81:90:e7:8e:08:42:b8:25:6a:9e:40:6b:
4b:9c:f9:16:a1:d6:48:d6:b1:fd:ba:9e:e9:b8:a4:
29:0b:dd:79:0b:03:fc:9d:5d:3c:8e:18:0b:ff:6c:
a3:10:21:cb:04:47:6d:e0:63:05:61:dc:d0:32:0f:
fb:22:2c:d1:16:6b:a9:ec:51:ed:b9:8c:bf:82:7d:
94:11:ab:f4:c9:20:08:a0:14:0b:b9:27:23:9d:df:
c2:c7:17:84:d2:b1:94:e8:f2:cb:05:ef:47:97:31:
d9:56:24:a1:3b:6a:a2:06:4c:66:8e:37:9e:cd:50:
e3:da:bd:b1:3d:08:84:75:2f:7b:2f:ac:05:28:af:
7b:3e:71:90:34:26:cf:93:e6:31:e7:15:87:7b:f7:
f9:5c:b4:02:4f:ba:6c:83:39:cd:ac:c1:28:57:6c:
71:9f:b0:e2:80:f6:e7:9b:01:56:7a:a3:fb:88:a3:
df:df:a2:6b:a4:fd:e4:8f:de:4d:d7:7f:32:66:2f:
cc:ae:4c:82:ae:8d:db:e2:11:32:ac:21:96:2a:14:
8e:c8:1c:49:b3:b1:a8:a0:8b:88:be:5f:10:53:bd:
15:2f:b3:42:cd:74:ff:31:71:4f:4a:32:b5:78:99:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:69:A3:F7:A1:8E:D0:EE:FC:7C:0C:12:EA:37:DB:CA:DF:7B:61:D4
X509v3 Authority Key Identifier:
keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:9d:2b:f4:5e:32:62:00:30:50:66:d3:23:00:16:48:fa:1e:
7c:df:da:b8:4d:76:1d:cd:16:f2:5f:bc:c1:3c:81:41:dd:1b:
6b:fb:d4:dc:6e:f6:0c:71:f3:db:0e:0f:b9:d7:26:27:6e:30:
1a:9e:0a:7a:89:dd:ae:d9:12:95:bd:7d:4e:fc:59:95:4b:12:
44:00:41:d4:17:82:e7:57:1f:aa:64:58:e8:d5:74:2e:87:14:
7b:a5:f2:e2:fa:8d:7a:8f:84:58:29:ab:82:a4:74:32:8c:63:
db:71:99:74:a4:77:3e:56:b5:85:a0:40:10:b4:9f:3e:7f:88:
ae:68:54:af:4b:b2:b2:e7:93:6d:23:9b:7e:d3:6b:e1:d6:6a:
db:dd:a2:af:8f:ae:22:6e:17:97:b5:29:26:3f:d2:e0:bf:c9:
1d:dd:ba:e8:0e:b5:35:5d:e7:2f:7d:70:30:f0:22:de:56:9c:
b1:a9:25:f6:4c:43:06:80:09:e3:03:6b:f7:7f:e9:1d:32:10:
c4:0b:a6:92:18:2a:9e:12:99:1e:12:a5:b3:69:93:15:a7:1e:
7c:b3:fd:5f:35:e9:e7:49:0c:79:2e:67:51:f0:ac:64:ec:e0:
84:f8:14:81:5f:c3:94:f9:c4:c2:ef:44:36:99:bc:a7:7a:43:
f7:b4:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:16 2025 by rpki-client