Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json)
Hash identifier: Fx4ZVOooAomd3ILe0G/jxpuC9sR1XUrYxFTHyKRWUI8=
Subject key identifier: FC:97:E1:A9:74:2B:EB:9E:E2:0A:64:5B:41:D6:1F:3E:74:CD:23:FD
Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 03:25:07 +0000
Manifest this update: Fri 31 Jan 2025 03:25:06 +0000
Manifest next update: Fri 07 Feb 2025 03:25:06 +0000
Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: hydfVclUCQQ/8InQtRPQ77bzpVwgMplgNKyYUMfWrlo=)
2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ZkY0KzzTYIOlfe+QFFr6ughVl7NAzRhvIrPiqzSn17g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Validity
Not Before: Jan 31 03:25:06 2025 GMT
Not After : Feb 7 03:25:06 2025 GMT
Subject: CN=679c4292-283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:f0:c4:eb:1c:8f:66:6b:91:6d:48:44:a0:
ee:2b:75:cf:b7:35:64:12:b0:bc:13:00:a6:48:67:
77:07:ec:63:2e:fe:01:ec:1a:6f:32:75:39:0c:b5:
3d:9b:a9:7a:db:42:3b:a2:ff:cc:07:1c:b3:f9:04:
3e:e7:97:e5:7a:d5:5e:28:bf:87:dc:f4:88:08:3b:
d0:49:5b:85:20:fe:35:fc:39:7c:4b:ab:70:af:98:
0d:91:a9:d6:79:4a:dc:b1:b9:cd:36:0d:7b:7a:53:
0d:ee:24:b5:f9:c8:bc:a7:44:8c:be:f6:1c:17:ca:
4f:a5:a8:75:34:0b:73:c1:6e:a2:75:6f:ce:ba:5a:
c5:fb:53:f7:6e:7f:cc:ec:3a:0e:41:3b:fe:31:9c:
01:f6:00:18:52:68:d0:34:8b:d9:5a:a1:42:2e:68:
ac:44:d0:02:58:10:02:06:b9:0d:fc:db:a7:96:64:
40:51:db:8c:b6:70:ea:1d:06:c3:21:82:cb:07:a8:
d7:6b:0a:64:f0:33:03:38:4d:82:7c:2d:b7:ef:81:
0e:a9:22:98:02:78:f8:f0:87:4b:8f:f6:f7:df:c6:
9a:bc:d5:b5:bb:4f:e6:87:ae:3b:41:b5:37:c9:1c:
51:9b:b3:0e:35:f1:8e:b8:a4:e4:e9:4a:31:52:2a:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:E1:A9:74:2B:EB:9E:E2:0A:64:5B:41:D6:1F:3E:74:CD:23:FD
X509v3 Authority Key Identifier:
keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:1d:7d:02:cb:54:b4:f3:2a:28:33:23:cf:12:e8:2e:aa:
a9:03:28:f4:22:16:da:b5:ee:11:89:6a:38:49:24:9a:5f:b4:
b1:34:87:68:30:eb:74:6f:c5:77:ee:2a:85:94:35:bf:25:b4:
da:af:9c:9d:65:fc:98:10:21:25:b1:82:f8:4f:c2:b3:ae:29:
0c:a2:7c:32:59:74:bd:7c:01:16:64:0e:0c:6f:1c:e1:9d:49:
c8:d4:1b:48:d8:b5:89:48:34:e2:e2:5c:00:bb:f6:95:fb:c9:
60:77:05:4f:62:d9:53:a6:ed:de:85:19:15:4f:c0:0d:bb:c2:
e8:ee:03:44:5b:15:02:5e:0c:0f:86:0d:ff:27:27:5a:00:d2:
1c:43:f3:57:9b:11:1d:a7:85:5d:c9:c4:b4:4b:5b:1e:0b:e8:
2b:d2:b8:14:49:34:82:99:d4:73:dd:d8:d6:e4:7b:28:c8:a6:
47:14:d4:7d:a8:8a:8e:ed:68:a8:1d:f1:99:7c:28:c9:34:8a:
e8:6e:9f:d8:28:bc:6d:23:8c:10:14:d7:37:8b:8d:a7:dd:2c:
f3:69:08:1e:d2:39:cd:5d:35:f2:87:6e:df:c0:90:f4:36:3d:
1e:60:02:78:75:6f:72:88:1e:bb:d8:a6:3e:2b:46:de:41:8b:
df:d0:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:08:07 2025 by rpki-client