Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier: 6Ik1P2g0gOuCtJo7ZANAa71WPYthjiQHX6AvxH/m1KI=
Subject key identifier: 45:37:40:B1:8F:96:40:5C:E9:C8:F7:D7:24:E6:72:92:F2:A7:0C:81
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial: 044A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 00:17:51 +0000
Manifest this update: Fri 31 Jan 2025 00:17:50 +0000
Manifest next update: Fri 07 Feb 2025 00:17:50 +0000
Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: a+z6kAZpkvIm8C43TRlozw3MEFy/eqfdpfiW4++33p8=)
2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: KhOuOM0Hy/s5cLutXXqmoIGycTqYNiIVdRfd5kJumPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Validity
Not Before: Jan 31 00:17:50 2025 GMT
Not After : Feb 7 00:17:50 2025 GMT
Subject: CN=679c16ae-646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:79:97:eb:71:d7:c1:5d:c7:40:77:f7:3d:
c0:e1:f7:f0:d8:92:c8:cf:5d:59:8a:de:67:fc:94:
61:dc:d3:02:5f:4f:b4:de:69:a9:b6:a7:44:9a:4e:
e5:cb:d3:72:fc:bf:1c:85:59:62:f3:b8:8e:91:a1:
21:2b:30:06:24:1b:a9:5c:15:34:d1:dd:9a:d9:bc:
e5:9f:46:7e:ce:33:7f:b3:e1:1b:f9:f4:6a:e2:0f:
89:26:66:7a:72:92:cc:c0:b5:73:b2:fe:04:11:8f:
01:45:d4:41:34:29:8b:aa:be:bc:45:a5:26:6e:ab:
95:72:69:d4:1d:a7:e4:37:a4:fe:32:63:13:c6:e2:
6e:2a:c6:89:19:76:66:e0:e6:09:eb:b7:f7:e8:63:
08:87:ad:0b:e5:c3:74:e1:48:43:18:fb:28:3c:25:
98:8a:69:d2:50:bf:4f:f1:ca:fc:e4:b0:2c:0a:ee:
cb:68:e2:b4:db:81:d6:5e:35:af:f7:0d:66:10:1b:
e1:a8:e6:f8:17:f8:b5:09:e5:68:4a:57:60:8a:8c:
76:27:3c:8b:c4:ea:ff:e5:17:0b:48:63:d3:7c:02:
88:09:e6:4e:a9:7c:7d:84:75:c0:49:cc:54:af:77:
61:ce:27:c4:28:af:b6:77:89:92:e6:99:c1:74:27:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:40:B1:8F:96:40:5C:E9:C8:F7:D7:24:E6:72:92:F2:A7:0C:81
X509v3 Authority Key Identifier:
keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:1d:c9:ee:ce:85:ee:ff:d1:ef:e5:51:c0:ec:57:3d:85:
31:58:ac:2b:03:b2:bf:39:63:68:27:ea:aa:af:ef:a3:a1:d4:
8e:ce:1f:a5:65:03:87:b3:92:c4:54:13:0e:41:82:16:4f:44:
e3:d9:71:8a:34:7a:ff:f3:7a:bc:54:66:dd:b8:32:ca:0d:db:
78:7e:1e:d1:f5:3a:6f:f7:ab:8e:69:8a:ac:b3:da:e0:2a:34:
55:b1:e3:15:6a:3f:06:67:f4:d2:e9:7f:28:1f:94:ff:ad:a4:
f2:48:8f:29:cb:4f:e6:6e:b3:c6:aa:fe:ee:99:2e:66:d6:28:
f3:c5:1c:88:b0:c2:e0:c9:a0:22:34:d9:39:a7:b5:11:47:ad:
ce:28:4d:05:76:ee:60:c5:e1:58:7f:ab:44:f7:aa:f6:79:12:
ce:21:25:95:69:8e:13:b5:1e:4f:fa:b4:2c:88:b7:56:d6:84:
ee:a1:17:60:01:a9:1a:bc:6d:01:0a:e3:61:59:1f:34:67:a7:
73:33:bd:95:6c:28:4b:44:92:91:e4:23:b5:a6:25:35:7c:4e:
9b:6b:c7:41:54:cd:34:aa:e3:6e:16:59:9a:bc:37:4f:b2:a2:
27:3e:86:b3:2a:b7:93:1b:14:ad:57:87:09:fe:4d:23:6f:c8:
27:35:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:13 2025 by rpki-client