Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier: 6BHsp5DUV4nivcrvsuMssuVZxXHzJCMoDyaihICDhJc=
Subject key identifier: F5:63:17:FC:93:6E:CD:32:51:47:B4:8C:69:57:D1:05:FD:15:3A:57
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number: F6
Signing time: Fri 31 Jan 2025 04:21:47 +0000
Manifest this update: Fri 31 Jan 2025 04:21:47 +0000
Manifest next update: Fri 07 Feb 2025 04:21:47 +0000
Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: h43wlm8eK1sTqTCyyNfLKsUbSFs8ZRO6ak9o4hcIg+k=)
2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: YxGxJeshNnV3Vuuq1mbiFcEZbIJHwrpzAcTYwU5uciY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Validity
Not Before: Jan 31 04:21:47 2025 GMT
Not After : Feb 7 04:21:47 2025 GMT
Subject: CN=679c4fdb-1f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:66:ae:f7:ed:4a:b6:63:32:2f:9c:42:0e:
bb:a8:28:53:40:19:f1:06:db:bd:59:aa:25:73:00:
e6:6d:3d:3d:d0:09:f2:b8:44:b2:dc:44:45:2b:d7:
0f:77:5a:ed:d2:17:12:2f:38:d5:da:f2:28:d7:6f:
82:f0:13:31:1e:a5:eb:f9:67:e4:e2:0f:7d:23:97:
bb:49:a7:0b:ee:36:8a:d5:a1:58:1e:16:d4:98:d6:
18:33:0f:80:b4:c2:6d:9f:4c:fe:c1:b1:22:09:39:
6f:70:66:7d:06:a0:60:ef:6d:5d:f8:85:10:20:a9:
b2:de:dd:1f:05:d6:1c:2b:7f:18:48:b9:bb:a6:ca:
63:8c:12:d1:1a:12:00:c1:a5:0b:4c:37:19:c9:08:
0b:b4:69:6d:d6:6d:1f:92:b9:a2:75:6e:39:6f:5d:
7e:af:fb:1a:27:75:53:9d:7e:61:bd:f4:03:ca:ba:
db:ac:03:85:28:0a:1d:bb:88:20:7c:4a:c3:75:40:
a9:a5:6e:25:13:93:f1:4c:3f:5b:0f:9e:f8:33:45:
b6:47:4e:8d:b5:69:e6:3d:3c:f1:a0:36:a9:79:bb:
be:4c:2e:99:db:66:0d:f9:3a:25:06:1c:5d:e8:ff:
c6:bf:9d:01:98:2a:c9:ff:79:4d:84:14:d6:10:a6:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:17:FC:93:6E:CD:32:51:47:B4:8C:69:57:D1:05:FD:15:3A:57
X509v3 Authority Key Identifier:
keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:ad:99:f7:00:99:41:ae:9e:c3:95:69:b1:68:70:66:3d:9a:
a7:23:a2:83:96:85:3e:2a:34:b9:c5:92:04:2a:0f:22:a0:f0:
16:3d:9c:94:ef:a8:95:91:08:e9:9b:23:e3:8e:39:c0:f6:aa:
47:c7:4a:c8:ce:68:8e:ed:12:34:29:84:a7:64:1c:25:8c:42:
4d:48:6b:d8:52:37:d3:18:f1:f1:38:9c:4f:03:76:35:b3:67:
77:55:68:e4:19:35:8b:a9:6a:a4:4e:ea:57:8e:f3:f6:e6:41:
a7:41:2d:9d:9b:6f:7c:9a:fc:3b:42:22:f2:7a:1a:84:c4:7d:
5e:91:f4:09:4c:36:94:cb:8a:78:45:97:d2:86:36:ed:a2:20:
b7:d5:43:a8:dc:be:f2:5d:3f:49:e3:35:7e:21:7a:42:d1:85:
1e:9f:9a:fa:2a:54:82:54:a7:19:0b:45:76:f7:83:50:7d:ab:
5b:e8:28:15:81:05:47:bc:e1:dd:b6:0d:cf:b6:de:c2:26:99:
48:1a:fc:67:46:6a:2f:9d:2f:0a:b3:55:1b:a9:6e:2b:b4:bf:
50:d4:79:66:e3:32:e9:81:e9:28:d5:fd:77:fd:45:36:3f:71:
c4:02:33:83:21:65:80:77:df:55:5a:ad:ea:bd:15:36:23:05:
52:64:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:20 2025 by rpki-client