Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json)
Hash identifier: WPh6awNVE06JBScxAfHbwsVd+aE390Q7yYuhXGMTYx0=
Subject key identifier: 7F:78:6A:B1:DD:B9:B3:59:C0:EB:16:06:85:99:57:80:39:CA:7B:52
Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
Manifest number: 011B
Signing time: Fri 31 Jan 2025 03:54:44 +0000
Manifest this update: Fri 31 Jan 2025 03:54:43 +0000
Manifest next update: Fri 07 Feb 2025 03:54:43 +0000
Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: EC4iNeE0BLqvjfbY4MJ571ssIxpRva1YV0bsAPYSfZo=)
2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: U86j7UjADgM2E45QTk1FhQ37u/QVFr1IVoMXiU/NlC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5
Validity
Not Before: Jan 31 03:54:43 2025 GMT
Not After : Feb 7 03:54:43 2025 GMT
Subject: CN=679c4984-f7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:4b:96:06:78:3d:ec:db:e6:bb:90:77:60:
9b:28:9c:c2:f2:82:17:16:00:2c:7f:da:6c:64:4b:
18:64:d2:63:fb:30:22:6a:a4:bf:af:74:33:0c:50:
e2:78:4c:15:52:13:0a:f8:73:62:dc:59:77:03:95:
e8:1c:74:f7:e4:6a:42:de:cd:f4:46:eb:60:25:aa:
e6:b8:94:5f:3a:a5:9d:29:8c:7e:e3:2c:b9:7a:a5:
e6:b3:f0:0b:e1:f7:0f:5f:d5:4a:9d:a3:3a:93:3b:
4d:3d:02:de:97:fc:70:5a:2d:35:e3:3e:1f:eb:24:
da:3d:e3:4e:28:70:92:1f:74:46:ac:46:18:8a:15:
7c:9a:85:38:85:89:3c:1e:83:85:80:74:47:8c:21:
f1:bb:70:02:13:69:32:18:59:e1:a8:64:91:fe:e7:
4e:ae:06:4e:04:2e:bf:1a:c5:6f:eb:5b:34:6b:ae:
97:bb:79:8a:6f:10:6c:d6:30:ff:d8:f7:52:1f:60:
e3:92:2e:26:b5:3e:f9:e7:a0:93:4a:f7:71:30:f8:
14:02:bd:ec:2d:c9:f1:9e:17:f1:ae:e1:0d:48:c7:
b9:00:b8:32:8a:cd:c5:68:b4:af:c8:ee:0f:45:fe:
be:65:95:cc:8d:ba:1f:ee:40:2c:21:37:3e:b8:0b:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:6A:B1:DD:B9:B3:59:C0:EB:16:06:85:99:57:80:39:CA:7B:52
X509v3 Authority Key Identifier:
keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:0c:f4:23:12:7b:a4:0f:3d:ed:71:06:af:cf:65:33:a7:
fd:8c:71:27:5c:78:5c:02:22:a0:e4:ac:af:6d:80:df:0d:d3:
b6:12:e6:9a:40:42:1a:60:3e:0e:a6:6b:32:b8:c5:69:c7:5b:
42:10:16:d8:50:f7:b3:01:91:2c:72:23:2c:eb:4c:dc:01:d4:
11:fe:7e:3f:90:de:13:6b:ca:df:a4:06:5e:ae:90:26:09:0e:
f4:2a:d4:17:81:ee:9d:34:ff:65:4c:bf:8d:3c:82:b7:17:ba:
57:c7:fd:ba:cb:f3:10:dc:d2:62:5c:bf:8d:c8:b8:b7:79:80:
da:87:4a:b7:72:80:f1:ad:d1:ff:bb:d5:21:22:0d:89:53:30:
c9:43:39:ac:61:00:be:51:02:5a:7f:cf:86:2c:94:ff:bb:9c:
18:cd:c3:31:dc:0a:c7:9f:03:93:25:41:73:08:07:20:0a:40:
a5:b6:3d:de:02:f8:3b:4d:51:64:ea:c3:0a:8d:55:7b:97:8c:
c0:02:71:50:b9:7b:04:33:2a:83:97:b7:5c:76:13:98:03:c8:
52:f6:70:28:12:cb:ab:94:11:a6:4d:ff:7f:22:45:52:bf:9a:
5f:41:68:f7:21:57:a8:cf:80:ff:01:a8:e7:40:a0:84:44:65:
e3:5f:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:04 2025 by rpki-client