Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier: /MR8D+B7wQ2crfn2gpMW237FjMsAFugsbBo66xmFFkI=
Subject key identifier: 39:6B:6C:94:5F:26:0D:9C:D9:10:7E:AB:02:5D:19:06:2B:A5:0E:D5
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 05:01:13 +0000
Manifest this update: Fri 31 Jan 2025 05:01:13 +0000
Manifest next update: Fri 07 Feb 2025 05:01:13 +0000
Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: K1lDb/q3PmBG1pwYoDIg49nkJmfGjiSN58AaIUAWFUg=)
2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: Jan 31 05:01:13 2025 GMT
Not After : Feb 7 05:01:13 2025 GMT
Subject: CN=679c5919-61f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:5c:0a:2d:d2:25:81:8e:b6:5a:36:60:76:
a2:ce:0f:03:c5:5a:ff:0a:78:d4:a0:64:28:4a:76:
ab:13:a4:b6:ae:04:f9:06:8b:dc:25:2c:81:09:1c:
a9:89:03:b6:8d:bd:20:e0:d2:f3:bd:b2:db:dc:18:
8a:05:78:91:d0:fa:2a:01:6f:b0:d8:cb:8b:42:76:
4a:e4:48:5c:97:93:80:4b:b6:19:61:82:93:85:f1:
fd:2a:98:ed:c0:0d:74:72:b8:5b:67:bd:95:af:42:
00:22:8d:d3:b5:96:42:e4:ab:28:45:f7:7f:ae:3a:
a0:fc:fc:85:be:88:cd:71:e5:55:e9:cc:0a:2b:28:
80:8b:0f:d0:fd:bf:92:89:4a:06:20:29:11:9c:fd:
7b:48:65:c7:f2:ef:20:87:d6:13:8c:9a:8d:cf:0c:
e5:7f:04:ae:4e:c6:3a:51:2c:a7:82:04:31:43:f7:
ad:62:0f:8f:8e:51:11:73:11:12:f9:40:03:a8:3a:
69:2c:13:44:47:0e:50:3e:b6:56:6d:6d:86:d3:de:
db:6d:60:6e:2c:3d:bc:22:09:5b:26:62:2e:10:b2:
bf:91:3a:c8:81:07:a5:a1:83:ab:f6:7f:0f:ea:63:
b2:0d:9e:78:4b:7b:3b:eb:c8:9a:b7:27:30:3b:27:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6B:6C:94:5F:26:0D:9C:D9:10:7E:AB:02:5D:19:06:2B:A5:0E:D5
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:56:30:e8:8c:e2:0d:40:69:56:74:e7:0f:ca:77:be:8e:
f2:7d:bc:f7:57:a8:b9:6a:e9:42:6d:08:9e:51:7e:e5:a8:d5:
22:92:35:dd:df:51:4b:6d:3e:d3:d7:a1:5d:e1:2d:87:34:15:
cf:bd:25:c8:41:e6:85:2a:c9:b6:df:46:45:81:40:9c:08:6e:
f3:76:0c:e2:d4:6d:65:8b:2c:ff:91:1d:2b:e2:d8:6e:ff:86:
cc:e6:3d:d7:87:7f:fd:e5:c8:5f:57:46:58:b8:3b:a0:33:34:
e1:ae:2b:41:78:e8:f0:9a:2c:f3:e4:a9:9d:6c:c0:e3:0b:fb:
c1:38:8d:99:2b:98:fd:08:c8:59:72:bb:2b:b7:1f:90:ae:8e:
97:88:73:1b:14:b4:fd:89:ff:e2:94:62:f7:9b:ec:11:4c:ec:
90:50:13:0e:0f:fe:82:02:5f:9a:63:b6:10:61:83:b5:6b:c6:
dd:66:2e:0d:7c:49:2d:bc:cc:03:2e:a4:99:42:ed:a8:58:71:
6a:f0:dc:f3:ea:53:66:74:46:6f:60:47:8f:1d:b6:cd:17:5e:
12:c2:26:1d:82:b1:6e:4e:53:93:8c:f0:06:b3:9b:5a:37:27:
5c:8e:98:74:f0:b0:00:76:85:ce:96:3d:e6:47:10:27:1a:2d:
fc:8f:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:56 2025 by rpki-client