Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
File: C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json)
Hash identifier: OaLO0WmNcKjyp5yPSHWZ/Aa3ELlp4VBBABdO9MnP4qg=
Subject key identifier: AF:B8:B8:30:C6:D2:9D:1B:C9:4B:35:8A:4F:F5:92:50:03:80:98:82
Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C
Certificate serial: 0648
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
Manifest number: 0640
Signing time: Thu 30 Jan 2025 22:30:28 +0000
Manifest this update: Thu 30 Jan 2025 22:30:27 +0000
Manifest next update: Thu 06 Feb 2025 22:30:27 +0000
Files and hashes: 1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: TPrizRXaEwkTmS+52dVHtgWN93JKEhqVBav3mcmKnNQ=)
2: FAEF1526DE9E11ECBEA8AB0EC4F9AE02.roa (hash: 3D0F61i4bYzZFK1RP5xCz8C+pmRRrnbu/OVCc11V77A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C
Validity
Not Before: Jan 30 22:30:27 2025 GMT
Not After : Feb 6 22:30:27 2025 GMT
Subject: CN=679bfd84-b16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:d9:09:04:07:eb:49:3e:fd:d5:02:ce:bb:
6c:c7:02:27:ca:be:52:74:c4:55:25:ac:07:e2:ba:
14:46:75:ac:f3:58:5c:d7:04:8a:ba:db:9b:13:ce:
29:cd:e5:46:23:5e:69:db:b7:dc:b0:fe:4b:67:fb:
10:3d:b4:eb:36:f0:91:ec:16:d7:70:32:22:7c:5c:
7b:13:1e:9a:53:75:ba:39:c1:b8:d1:c7:ab:1a:73:
aa:5c:25:83:31:bb:fa:31:93:80:87:9a:b9:39:cd:
7f:bc:3d:9a:dd:a2:b7:e4:5f:68:2e:6f:e6:70:fd:
cf:f3:1f:a8:39:35:7c:32:06:5c:02:28:1b:27:5b:
57:48:64:3b:8d:9a:3d:5c:e6:8d:40:e7:d3:79:58:
df:c1:d6:a2:2b:06:f9:75:e2:5d:1b:61:6a:7d:4f:
3b:5d:62:5a:3c:9d:f4:d6:bf:e5:80:36:1e:81:b6:
41:f0:61:6b:3a:45:d3:e8:94:32:fd:84:d6:b0:54:
15:f3:2e:fa:8d:42:7c:f0:47:d3:fa:ee:22:30:08:
d7:76:19:d1:86:6a:ac:28:8b:f0:51:be:33:2e:c3:
25:46:92:de:a7:e9:7f:b4:1f:47:bc:27:2e:6c:3f:
51:9a:9f:63:55:1f:54:8b:75:b6:b0:fc:22:4e:6e:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:B8:30:C6:D2:9D:1B:C9:4B:35:8A:4F:F5:92:50:03:80:98:82
X509v3 Authority Key Identifier:
keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:a7:d3:31:f6:f2:fe:54:8f:30:f0:39:c7:26:0c:c9:07:
3e:c7:f7:42:bb:8e:48:b8:b0:32:7e:ef:d9:90:19:c9:f3:57:
26:6a:d5:87:33:74:aa:fd:6f:1c:a9:71:a1:f4:65:53:02:72:
ac:e6:9c:8b:e6:a4:26:4e:d7:33:79:13:1c:24:c5:92:45:a3:
31:8b:2f:8e:cd:70:5f:7d:bd:50:ed:8f:76:74:d1:02:6c:2e:
ad:a9:cd:d9:c9:87:42:50:0b:71:07:5c:c7:8a:a7:d3:f4:66:
70:0f:4a:78:9c:2f:39:3c:80:96:47:fa:0b:3e:2d:c2:0c:46:
5b:0a:6a:6b:3c:48:78:9d:a9:83:bc:bd:76:3d:fe:93:93:2d:
df:a7:af:3f:05:8a:be:a6:b3:c9:a7:4d:e3:f8:d8:6f:a6:88:
89:7a:12:f8:58:e2:ae:d8:a3:f9:fe:14:3b:b2:b9:41:fd:a3:
d9:71:ac:36:97:2f:c7:6a:b9:6a:33:67:8d:4f:7a:9c:7b:fd:
54:f5:64:8f:04:d1:8b:a3:33:8b:23:f0:d2:36:0f:84:75:38:
86:d7:c8:11:59:cd:de:8f:a3:e9:e7:16:54:6a:ed:7f:b0:5e:
af:c9:29:fe:f6:6c:36:d6:ed:da:9c:28:d5:85:cf:13:b4:3c:
48:b7:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:51 2025 by rpki-client