Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json)
Hash identifier: xwYFwqiMLL2z5o1WXXy+kE19/HRCuAvNM/yIvF7bf+c=
Subject key identifier: 78:5D:88:BC:42:F2:68:64:86:0A:55:11:1C:2E:B1:39:9A:CE:09:87
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial: 08BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
Manifest number: 08A9
Signing time: Thu 30 Jan 2025 20:36:41 +0000
Manifest this update: Thu 30 Jan 2025 20:36:40 +0000
Manifest next update: Thu 06 Feb 2025 20:36:40 +0000
Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: hSIwYj+1rVZROPJdTIgMKrewX+2uQFYyrRRjlF7Rw/Q=)
2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: yfWpHkNEQh2G2/td7i4AwoD5izJRxTmfi2zYrBb7ip0=)
3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: LXbUGEX0BzxPJTGdu8cpn4olWR+ALKon9w0YiyjSIgs=)
4: 03706138786411EC8624EB12C4F9AE02.roa (hash: v1LJQRKcSsr5fZtI1cfsXADOOD23gM5W/71UiLOuA2g=)
5: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: 9K+/QIvWHuZSt1H4NN5SMc8oOUogkYlKWodRdIYoXcE=)
6: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: hGMtMKEqwODOU8waS4uGb4bFguPGRuvaBHiKMUVPICY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Validity
Not Before: Jan 30 20:36:40 2025 GMT
Not After : Feb 6 20:36:40 2025 GMT
Subject: CN=679be2d8-7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:97:42:2f:5b:49:26:9a:ee:5f:52:87:d9:
e4:b3:71:34:dc:8c:78:07:a7:c2:c1:9f:e2:10:96:
e5:fc:48:2c:42:df:da:7a:a6:4d:df:21:c0:a3:e1:
79:26:ee:8a:9c:3f:1d:0c:b4:46:fa:a1:f6:d0:63:
2c:c9:21:71:e8:58:a1:32:8e:27:55:0f:99:f0:58:
94:63:44:02:27:34:bc:b4:d3:e1:05:60:20:5a:dd:
a3:bc:7f:60:40:5b:60:f9:d8:8f:80:2b:fc:9a:70:
be:5b:70:de:48:02:8e:5e:04:53:08:91:2b:65:fb:
a9:b9:6a:1e:93:39:d8:28:f3:e7:8c:a4:02:57:e2:
4c:9f:ba:72:d9:d6:77:a3:f9:e4:d6:21:1c:3d:d5:
8d:0a:7f:8a:04:61:b4:81:52:8f:7a:d8:fe:ce:1a:
15:bd:13:59:eb:7e:2b:24:2d:c4:16:3c:3d:11:ef:
2f:dc:ba:c3:2a:b5:8a:62:3d:2a:e6:f2:75:1a:e0:
17:bd:35:c8:6e:f0:6f:45:87:a5:1e:0b:30:96:45:
fb:cf:19:4e:11:d3:e4:e4:1c:55:0d:6d:55:61:de:
61:de:68:67:8c:89:f0:6a:7e:c8:2d:d4:a1:7a:36:
5e:84:ee:f8:06:b7:17:ac:00:cf:f4:58:2a:69:c5:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5D:88:BC:42:F2:68:64:86:0A:55:11:1C:2E:B1:39:9A:CE:09:87
X509v3 Authority Key Identifier:
keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:ae:f3:6d:15:d6:52:2e:88:4c:5f:17:90:02:fd:c3:51:
db:96:7e:af:30:16:29:65:9a:f4:c4:8a:21:85:f5:e2:5f:08:
e7:db:02:a5:1b:b9:63:0a:bb:e4:97:2e:6f:b3:41:e0:d1:9a:
9a:92:2f:69:a9:ee:23:64:f6:04:32:4d:f1:82:0b:ce:59:0f:
00:b2:0d:79:a9:21:47:db:39:a8:c4:5f:0b:9e:2e:d1:7f:e6:
55:e3:d9:17:fe:d9:65:ea:21:e0:ed:f6:bd:32:86:0d:0b:68:
b9:13:90:e6:e9:f7:2e:5e:95:68:8a:ac:b6:6b:b3:1b:43:7e:
96:29:0f:78:3e:12:a8:66:1f:c8:cf:fe:80:f0:06:67:29:9e:
31:3d:86:08:0a:9d:c7:56:fe:2b:d6:04:97:6c:46:b2:dd:7c:
ab:c1:cc:9f:9a:aa:5f:7e:ce:90:2d:a0:7e:0d:be:98:ef:de:
85:e1:7f:2f:2e:cd:0f:9f:a9:cc:b8:0c:d7:9b:45:ff:7b:7e:
a5:63:0e:51:4c:65:fd:98:d6:8a:cd:6b:68:39:c5:78:6a:b6:
1c:37:f3:73:35:f2:09:60:c5:bc:a5:83:69:29:33:26:1f:41:
fc:78:ab:e8:33:48:d7:c2:4d:60:8c:c9:c0:2f:71:47:fa:b9:
ea:97:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:25:58 2025 by rpki-client