Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json)
Hash identifier: U0QHqRuasLM8i6AOAydPP+3EmMsO1snWYeeuY/vshbk=
Subject key identifier: 0D:07:0A:71:30:B0:4E:77:09:49:B8:38:77:71:A7:CD:8A:92:18:00
Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 06:37:10 +0000
Manifest this update: Fri 31 Jan 2025 06:37:09 +0000
Manifest next update: Fri 07 Feb 2025 06:37:09 +0000
Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: w2IpOdc9wvEbHqP3ooEYLVHvo1e7WygJbDrYS+mTx7Q=)
2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Validity
Not Before: Jan 31 06:37:09 2025 GMT
Not After : Feb 7 06:37:09 2025 GMT
Subject: CN=679c6f95-9334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:03:33:bc:a2:ec:5b:dc:bc:00:c2:12:5b:
74:8b:b3:7c:a3:fc:dd:2b:c6:a8:25:a8:ef:3a:b4:
05:2b:b1:70:6c:99:b3:cc:b0:d8:42:a0:67:38:c5:
8f:22:da:2a:48:65:7e:32:fb:79:62:af:dd:49:b4:
dc:a1:40:c6:b7:18:2b:c2:93:61:bf:40:a5:d8:5b:
6e:23:66:41:e1:d0:58:19:09:2c:b0:d9:84:1a:d2:
83:75:58:0d:25:eb:25:b7:2f:1a:b5:e3:fe:ee:d0:
ac:54:9d:d0:43:c3:c5:92:5c:ac:38:8b:f7:a5:08:
68:99:29:9b:fd:19:f4:7d:ab:e2:5c:3b:f2:23:d7:
da:6b:65:8a:c8:d8:1b:82:17:03:1c:49:e0:2c:98:
35:e3:0b:0d:66:bd:04:40:84:a9:96:47:6d:7b:df:
51:fb:d7:a4:b4:f6:78:57:dc:04:38:6a:84:8c:66:
56:19:81:a9:e5:d2:19:b2:31:e9:62:fd:5d:b9:3f:
08:16:6d:50:85:91:be:52:19:ea:29:98:46:c1:cb:
5a:2d:ee:4f:24:a9:9a:c9:75:e3:8c:6d:cf:d8:72:
2c:ac:71:f7:fb:16:f0:ec:0a:94:c0:62:28:63:db:
67:c8:40:45:9f:a7:df:45:40:74:d3:dd:aa:57:db:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:0A:71:30:B0:4E:77:09:49:B8:38:77:71:A7:CD:8A:92:18:00
X509v3 Authority Key Identifier:
keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:ca:bc:93:d1:e0:cf:cc:a0:f3:05:58:e1:a6:3d:04:07:
ea:82:72:18:08:22:fe:ab:36:19:7f:2a:ae:fe:db:73:2f:89:
df:e6:80:72:f3:10:35:08:b5:a4:70:e8:c8:d5:ff:44:ae:af:
c9:52:fa:55:3b:25:17:4e:2f:df:26:45:e7:28:6a:9c:8d:3d:
cf:e2:a1:c9:b7:a8:c7:e5:b9:9f:e4:89:a1:6a:b1:89:a7:da:
4c:12:32:bd:b1:64:df:6f:9f:0b:3f:5f:0c:87:d2:6e:4a:01:
4d:99:1b:c0:a8:bc:7f:48:bd:a9:a4:57:f5:28:04:94:96:50:
b7:b5:60:bc:ea:0f:a7:f0:56:74:90:5e:51:69:7b:0f:f1:e3:
13:5e:22:21:12:fe:c0:97:f0:d5:35:d0:fe:f1:43:4e:32:35:
07:ef:b5:7f:a5:56:4b:41:53:06:11:61:9a:3f:48:43:c0:b9:
f9:ce:a3:a7:a2:b4:ec:29:8b:4a:18:de:fe:19:9f:bc:a9:44:
a0:0a:c3:e6:35:e8:20:81:3a:ee:0f:0c:83:67:78:ab:11:ad:
17:89:c4:92:d4:9b:6f:2b:5e:2d:ee:de:4f:a4:9c:d0:49:1f:
60:42:42:14:d8:03:29:45:e6:da:eb:62:7e:9b:d2:8b:f6:67:
54:e1:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:38:38 2025 by rpki-client