Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json)
Hash identifier: yWQ3aYtk/1RZPxZxR3Dib3npx1/AjK0OA/D7z1/Q3zY=
Subject key identifier: B0:86:B8:31:A8:8C:61:CD:F0:F8:57:17:8E:9F:DD:D5:C4:3D:10:04
Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Certificate serial: 0AD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
Manifest number: 0ACC
Signing time: Thu 30 Jan 2025 19:29:21 +0000
Manifest this update: Thu 30 Jan 2025 19:29:20 +0000
Manifest next update: Thu 06 Feb 2025 19:29:20 +0000
Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: 10HYxDPVNyQ/bi1EWv3aERMITQcHBPNno9I3d2NGDnk=)
2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: 4gX6ptBwddfrFYLEAkZCoulGBfjSY3z6D4r2Ab8w1lI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Validity
Not Before: Jan 30 19:29:20 2025 GMT
Not After : Feb 6 19:29:20 2025 GMT
Subject: CN=679bd310-bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:3f:de:3b:1e:69:ae:42:de:bc:62:56:2c:
b8:d3:0a:b7:0e:48:f6:ec:ff:3a:a4:b0:8d:e8:76:
55:2d:58:b8:fe:43:7e:f9:0b:00:ef:0b:6b:c1:43:
b7:d5:61:fa:9c:c9:4e:ea:8b:60:bd:6f:0e:38:7b:
9b:2d:36:92:f0:e7:3b:8f:b4:8d:1e:8f:73:b6:bc:
80:c1:17:8a:43:03:f7:27:72:ab:f8:d9:6b:01:3d:
8f:65:67:b1:6f:e4:f1:a3:35:03:e6:6c:d8:a4:b9:
3c:11:0f:92:21:ec:df:29:0b:74:89:98:77:ec:45:
9d:8e:42:5a:6e:15:d4:7a:36:ea:e4:1a:a1:c0:3b:
4e:42:ea:b2:d4:38:e5:3b:08:8c:da:20:e3:c7:01:
31:72:0a:27:34:3f:94:07:11:3c:fd:05:3b:b3:a0:
bc:85:a1:cb:2f:f1:6a:9c:d4:f9:74:56:97:bc:66:
27:79:9b:f4:e8:9b:eb:1f:b2:02:a0:34:0c:b8:98:
aa:d2:0a:f9:f1:b8:4a:54:86:e7:b7:2a:62:3b:7c:
60:7d:55:5f:e0:37:e7:9b:7c:ea:70:a0:f4:c7:bf:
b6:0c:8c:2e:be:54:6c:68:21:89:d0:cc:94:58:93:
f9:e5:1e:83:76:9c:9d:7f:8f:0b:41:9b:0a:eb:42:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:B8:31:A8:8C:61:CD:F0:F8:57:17:8E:9F:DD:D5:C4:3D:10:04
X509v3 Authority Key Identifier:
keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b4:0d:62:91:f4:0a:52:5b:6c:7e:33:73:e8:75:75:a3:12:
f8:51:85:3d:af:bc:20:57:c6:c3:30:22:16:b3:46:5b:70:09:
19:4f:a0:13:fa:fa:97:46:31:ba:f4:ea:8f:ad:cb:c2:96:76:
41:66:e5:5d:fd:fe:bc:f2:19:cc:14:f6:8c:a0:04:50:77:db:
84:78:36:2f:0c:96:a7:ae:47:cc:33:09:d0:04:78:47:e0:30:
1c:cd:14:8a:e5:52:8d:98:03:37:0a:e5:64:60:40:67:51:dc:
fa:d2:59:33:0d:3a:55:9b:0d:66:69:3b:84:f4:3a:6d:6f:f0:
fe:47:38:cf:e4:9a:a4:11:ce:b3:78:bd:d5:d9:98:52:4f:d0:
25:63:c1:58:4c:aa:a2:2d:0d:64:2e:5b:2f:3b:ec:a1:fd:56:
67:1a:8b:e3:ff:e2:77:b6:83:9f:18:32:7d:c1:23:ca:52:e7:
3d:b0:5e:94:0f:ae:a0:8e:2c:2a:f5:03:e7:d4:48:53:46:12:
f8:59:67:f6:4e:a4:14:50:4d:cd:ab:94:24:33:c6:c0:34:26:
6b:a0:81:27:13:08:1f:3f:c7:2d:30:4c:b5:6b:a9:a7:67:f8:
3e:39:43:7b:5c:48:9e:b4:07:9b:47:22:04:29:fe:df:a6:57:
a1:52:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:21 2025 by rpki-client