Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: 2nRtO0ARdLGqgdP+lupQv/4OHREJS5OD6CK2DmKF/q0=
Subject key identifier: CC:02:79:D3:57:24:B4:58:C4:1E:13:95:65:49:EA:1E:FE:18:A0:B3
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 06A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 06A0
Signing time: Thu 30 Jan 2025 22:11:03 +0000
Manifest this update: Thu 30 Jan 2025 22:11:03 +0000
Manifest next update: Thu 06 Feb 2025 22:11:03 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: ovAQrqM2bbR+ewoW3rchL9EhKtDWmHNYRgjLvDVWzfA=)
2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=)
3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Jan 30 22:11:03 2025 GMT
Not After : Feb 6 22:11:03 2025 GMT
Subject: CN=679bf8f7-8a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c6:e4:09:dc:0e:37:97:d1:37:3b:21:f3:99:
c1:7f:d3:47:dc:0f:f8:d1:b6:8e:e1:ff:4a:f5:b9:
3a:b6:96:41:74:57:ff:01:90:e2:60:32:0c:2b:f2:
88:0c:7b:d7:15:b5:99:07:38:f1:b8:b3:50:75:99:
94:4f:e9:75:54:96:a1:46:69:a1:92:cb:04:a3:55:
65:b7:87:49:20:2f:b2:27:09:ff:84:51:dd:72:40:
15:b4:ae:c4:e5:42:77:eb:46:58:cd:75:d2:9c:e1:
ba:60:01:dd:e2:fd:d6:5a:b7:6f:01:2f:92:4e:40:
03:16:f2:b3:fd:93:35:bb:17:d8:6d:a7:69:8c:71:
e3:a1:21:5e:5a:35:3f:61:76:d3:8e:26:e0:93:4e:
a4:b2:cb:b4:4f:ea:f7:22:ae:ea:4c:a9:20:2e:a3:
7d:1b:f3:26:99:ba:63:e6:5b:ab:0c:d5:41:0c:c7:
b8:fc:ed:85:b5:bd:b4:cf:3a:57:29:7c:65:03:22:
93:72:7c:95:82:f0:ee:3c:eb:b4:69:97:21:c6:6d:
46:35:ae:98:b8:53:dc:be:ca:9f:ce:bb:35:4f:85:
ad:9b:4d:1e:b2:3c:a7:bc:9d:05:ad:db:c7:c2:4e:
8b:00:09:6e:a4:b6:14:8e:d4:13:5b:d3:56:09:2a:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:02:79:D3:57:24:B4:58:C4:1E:13:95:65:49:EA:1E:FE:18:A0:B3
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:96:70:9f:08:0a:3e:96:77:7d:96:3d:3c:b9:04:a2:51:
12:05:c6:3c:9c:a9:29:2e:6d:7a:5e:19:65:fa:1b:35:cc:4a:
90:b2:cf:b4:eb:35:c6:54:c5:a0:54:5d:95:ee:ec:c7:52:35:
11:f8:b8:74:2e:52:ef:5e:ba:59:c1:57:12:1f:20:13:02:08:
5e:2c:3d:ea:f3:7d:4a:58:96:35:ec:07:e3:d4:22:21:83:0c:
68:27:cb:c8:b7:35:76:7b:e2:66:ad:a7:03:98:1e:1a:07:26:
e1:50:8a:ab:13:cc:82:eb:27:ba:e3:95:2d:a0:7d:eb:a3:c0:
4f:39:ce:54:9c:3c:75:17:84:1f:7e:6a:80:e8:bf:b0:47:5d:
c5:19:b9:08:38:43:3b:99:63:cf:92:47:f8:8a:ad:b7:51:7a:
6d:2e:09:f5:70:e9:a3:6d:f7:1e:05:e7:ba:e9:3d:80:71:d1:
74:d2:69:c0:ea:ec:69:68:1c:1f:c7:6e:bf:51:4c:dc:e9:fa:
fd:8e:e0:2a:c5:d3:41:0a:5c:35:8f:a4:71:5e:d4:08:6d:2f:
a0:5c:f6:6a:f0:e6:f7:51:13:17:07:99:1a:f3:1d:f1:41:07:
5b:cb:bb:ee:25:3d:b0:0c:3f:e4:40:76:07:d8:c2:ae:a9:15:
c8:fc:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:14:03 2025 by rpki-client