Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier: 7OS437C5FzuX96PvrUbltoHSDituJgTrXp3T4QZxtjE=
Subject key identifier: 9D:36:DA:79:24:06:88:C8:F6:33:27:AE:DD:F6:7D:0E:14:4A:16:DE
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number: 130A
Signing time: Thu 30 Jan 2025 19:29:38 +0000
Manifest this update: Thu 30 Jan 2025 19:29:38 +0000
Manifest next update: Thu 06 Feb 2025 19:29:38 +0000
Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: pRnGJHnskqCbr7yrPuwiKe66OgJb5O8m4En4MgAsJS8=)
2: 631365F6CDA011EF9A781760C4F9AE02.roa (hash: b9xFFrzjuvwYbcIk4ZLMf5cF5I7piEwQw1yb0RX8EuU=)
3: 98DE3894CCE411EFA6203F26C4F9AE02.roa (hash: 3SgVhCtfs/W3yv0G/O8aned3SDegTr9jVDz9oCjRCUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Jan 30 19:29:38 2025 GMT
Not After : Feb 6 19:29:38 2025 GMT
Subject: CN=679bd322-35e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:b0:c4:84:6e:13:e3:b4:34:f4:10:db:32:
21:12:79:66:cf:d8:c8:9f:4f:cd:c4:68:15:93:86:
c4:3b:8e:9e:83:01:4b:13:f8:7b:1b:77:63:ba:cb:
07:85:43:57:c7:3f:d2:34:2b:df:a4:5e:19:b8:7f:
57:57:eb:0a:dd:f2:7c:8a:17:29:2e:30:62:90:39:
f0:95:c5:cb:e5:43:98:bb:41:e5:99:18:8e:17:0d:
2c:2f:46:6b:1e:ca:cd:1c:59:21:4d:c3:83:7c:f2:
8d:68:7b:58:a1:ab:f1:3e:cf:15:00:e3:90:d4:8a:
b7:4f:38:d4:9f:26:02:aa:5a:80:de:d6:67:9f:bf:
97:47:5a:8a:bc:a1:32:df:dc:0d:77:fa:ea:72:1a:
2b:c3:03:99:49:a7:56:75:0c:32:0e:66:26:0a:41:
09:5f:95:80:f3:a8:0e:ac:86:34:a8:40:01:e2:a4:
93:32:b0:fc:40:74:ec:5d:73:53:fd:a5:d8:d6:9d:
b6:43:c0:d8:a7:34:77:33:fe:ee:ba:09:30:6f:04:
19:0d:06:4f:30:4a:77:cc:d7:2a:07:da:43:76:7b:
19:fe:c9:ad:da:b9:fe:e5:df:27:4b:95:ca:ac:e7:
e3:a4:90:fd:ba:13:24:d9:69:01:3b:27:a6:2b:a2:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:DA:79:24:06:88:C8:F6:33:27:AE:DD:F6:7D:0E:14:4A:16:DE
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:bf:fd:0a:34:a9:01:3a:ab:50:8f:4c:ff:b6:9c:e6:f1:72:
c2:39:a0:f0:52:18:86:8f:76:0d:45:9d:97:21:86:10:b5:d2:
3e:bf:9c:cc:b6:ce:7d:fd:68:eb:50:ea:cf:68:89:26:21:a4:
7f:23:fe:4c:81:67:2f:37:63:b1:97:64:44:02:9c:fc:1c:a1:
57:02:e3:b8:a8:c0:7c:79:05:e1:e2:17:5c:5a:03:fa:5d:bf:
47:f7:43:62:db:ed:67:94:80:0d:11:66:70:37:8a:4f:3f:bc:
43:c8:8b:c6:5e:0c:4d:3e:a7:c0:c9:25:7d:c3:e5:0b:1f:97:
92:8d:43:1c:3e:e8:37:99:a8:c1:c7:13:c7:24:b2:80:a1:60:
d6:6e:f8:43:8b:55:f3:83:94:b7:3e:f3:09:30:4f:82:c8:2c:
6b:9b:2d:43:72:00:be:4e:f3:ce:43:70:d1:13:36:62:b0:5b:
13:70:87:26:22:8f:c2:70:e8:ca:c0:0e:da:8b:66:92:b2:d3:
5d:17:7d:d0:15:96:d8:80:b2:7a:19:e3:96:9e:24:94:eb:80:
64:c9:34:e5:51:0c:ba:a7:72:0c:81:0a:1d:b8:d4:a8:18:d0:
43:c5:eb:7b:6c:b7:bd:a9:9c:98:c4:85:90:a8:ee:68:27:77:
a4:bb:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:35 2025 by rpki-client