Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier: kSR3QBvX0UXG6nq8ErTDmBwjNdca2gePrWXNhDJ0Ijw=
Subject key identifier: 1B:4A:9E:48:CC:3A:CE:2E:6A:19:58:26:FD:D5:7B:3B:94:B8:64:29
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial: 08E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number: 08E3
Signing time: Thu 30 Jan 2025 20:28:47 +0000
Manifest this update: Thu 30 Jan 2025 20:28:46 +0000
Manifest next update: Thu 06 Feb 2025 20:28:46 +0000
Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: A04cjAl0TSrzUQ//UED6KkiiuZemNlp8wid/yF1CeX8=)
2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: jfGEyrs8irz34ZW5qDRzJ5sduiRp3kjnfVg2NZqBN9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Validity
Not Before: Jan 30 20:28:46 2025 GMT
Not After : Feb 6 20:28:46 2025 GMT
Subject: CN=679be0fe-57b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:c6:8e:f0:5e:f6:fe:bf:16:1e:1a:e1:a0:
e8:40:4c:c7:7d:23:75:85:5d:8a:d4:70:cf:f7:86:
31:24:a0:97:34:f0:59:0d:df:75:b6:ed:f2:63:ba:
3a:79:40:99:8b:75:af:c5:5a:20:84:3f:5e:f5:50:
4d:b5:fe:c1:74:d0:30:b2:65:75:b8:ed:be:23:a0:
3f:e1:9c:4b:9f:5c:31:ee:37:c4:5e:b2:02:ca:73:
bc:68:13:82:67:a5:35:d9:eb:35:6c:d6:53:91:e1:
04:f9:1d:1a:86:db:ac:16:41:35:7a:38:32:39:26:
9c:a0:29:7f:29:a0:e1:b7:e8:09:2e:3f:e0:e1:49:
1a:78:51:a7:b7:4b:72:97:c4:b0:7e:fb:6a:f2:42:
e3:ed:69:26:c6:c9:c5:e7:d9:5e:c7:35:af:c8:14:
c1:e5:a2:b9:20:90:25:1c:2a:8a:1d:08:d3:66:84:
28:69:6e:34:87:1c:cd:18:96:88:cc:a3:c7:a1:35:
3a:20:5e:7a:9c:ab:85:dd:c5:36:bd:36:30:85:b2:
1a:33:a8:0e:85:90:27:68:d8:0a:be:b3:b8:f3:31:
d8:ce:7b:fe:6a:57:5e:1e:5b:8d:b6:c5:18:36:4c:
f3:0e:d4:a5:27:bf:1f:78:7e:cd:78:df:92:a3:95:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:9E:48:CC:3A:CE:2E:6A:19:58:26:FD:D5:7B:3B:94:B8:64:29
X509v3 Authority Key Identifier:
keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:a4:a7:a6:5f:05:4f:34:21:13:e4:ea:f0:85:02:47:36:
13:3a:82:ca:78:8d:2e:c8:e8:79:36:19:9a:18:32:96:ee:1a:
e6:cc:e5:da:e6:44:2d:f1:af:7e:86:ad:c4:91:dd:92:5c:5b:
21:40:54:36:99:7c:c4:ad:56:25:4e:42:89:a7:d4:23:63:65:
27:0c:b7:76:9d:20:29:c6:32:99:a0:29:8a:d5:26:99:8a:5c:
47:9b:ba:cc:82:49:47:c2:3e:de:26:df:0f:ac:03:7e:b4:59:
79:8a:64:88:bf:fd:2f:f8:89:e4:74:03:b7:60:4c:c6:07:87:
66:e2:e4:f4:eb:81:9f:38:5d:fc:da:3f:03:08:2f:91:a3:6d:
e6:08:1a:2e:1d:83:90:96:95:a2:bb:b2:8c:b4:96:4f:00:98:
80:aa:fd:37:ef:de:69:40:83:39:c3:64:20:97:59:2c:88:e4:
54:c0:05:c4:ca:3d:3f:45:a7:13:ea:5e:2f:eb:c8:52:b2:cd:
6a:3e:d6:5e:bb:ef:87:20:be:80:4b:d3:02:96:0b:3c:f9:3a:
22:86:0c:4b:b9:88:05:ed:92:16:17:96:e4:b4:48:1a:e3:eb:
49:12:e3:4e:d3:4d:e6:0c:39:7f:46:b0:fb:58:db:2d:7d:d4:
19:2e:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:37 2025 by rpki-client