Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier: AlVfxEjtV7rHurSLdix2fBvS//R8uIhkLnJxbmH8WHI=
Subject key identifier: AA:B6:25:DA:C0:28:99:B7:8C:45:5C:95:47:E9:72:F3:6C:21:AE:C2
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number: AE
Signing time: Fri 31 Jan 2025 05:12:14 +0000
Manifest this update: Fri 31 Jan 2025 05:12:13 +0000
Manifest next update: Fri 07 Feb 2025 05:12:13 +0000
Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: +J+OmploBpCh/DZtVBVYpV7itwmyPM74km6SVCzn4hQ=)
2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: 7NF0a7gVZb8HkKVv5D+iUAVQYzeaU/GvlIm5srrDqhc=)
3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: iquf1jLmI/5hIALZdOdH20RZr48fjxEqckCcFT9dYVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Validity
Not Before: Jan 31 05:12:13 2025 GMT
Not After : Feb 7 05:12:13 2025 GMT
Subject: CN=679c5bae-6f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:05:a7:b6:90:8d:3f:72:0f:a4:70:1c:c5:
f1:2c:bd:56:13:20:2e:1b:d4:53:5f:fc:d8:8b:94:
c3:4a:c8:60:83:72:6f:df:e5:38:c8:b4:9a:ac:86:
54:10:5c:af:99:1a:c0:78:b2:9e:82:3a:08:82:7d:
30:7c:5e:67:9c:64:3a:49:10:85:ec:9c:da:9c:b0:
1b:18:af:12:78:d9:71:fe:e3:a1:cc:26:19:88:6a:
52:31:be:93:0c:06:db:03:00:6a:da:7a:3d:ac:f1:
fa:9d:9e:45:39:39:78:09:de:ac:c5:53:19:5f:ef:
13:f2:96:65:89:c1:15:ba:51:b4:9c:39:22:77:30:
f3:f8:a4:53:54:b0:33:84:34:7c:73:db:bf:6f:07:
dc:7d:7b:90:a7:61:4d:d8:a0:b2:63:b0:70:6b:89:
aa:86:31:35:67:9b:cb:26:9f:48:ac:cc:dc:ba:01:
4e:5e:c8:01:9f:c0:b6:15:86:de:5c:84:5e:db:24:
1d:f6:9c:cb:06:a2:88:9a:76:46:b4:20:6f:84:fa:
2b:35:b8:87:23:4f:c4:0b:18:f8:9d:e4:9f:11:3d:
a3:c4:8f:b6:f9:7e:74:d4:65:ac:35:b0:a0:be:fe:
d3:59:30:fd:5a:ce:62:bb:69:1a:26:3d:73:2a:89:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:25:DA:C0:28:99:B7:8C:45:5C:95:47:E9:72:F3:6C:21:AE:C2
X509v3 Authority Key Identifier:
keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ad:c6:17:b9:d0:d1:9b:77:90:25:ff:84:d5:e6:25:f1:72:
e0:7d:40:13:19:c9:e7:ce:c5:c2:ef:2e:75:c4:c3:e1:c8:b5:
3d:1a:f9:0f:c8:56:0e:94:c3:2f:d0:40:09:86:11:1e:37:7c:
82:3e:fd:41:0b:70:b6:27:03:f8:23:52:81:97:d2:dd:93:6a:
53:dd:23:f2:06:87:28:68:f3:ad:d7:fd:37:be:76:b0:8f:4b:
5d:b3:02:39:58:89:2c:6e:4a:bc:4f:b6:fa:ef:75:93:9a:86:
c9:2d:51:0e:84:52:eb:9e:4a:76:ce:27:97:16:ba:cf:e6:03:
90:5f:89:6c:98:45:d1:06:f8:08:07:9b:18:9d:18:31:90:a3:
ef:47:45:f9:7b:a9:4f:ea:86:28:9b:a7:60:cd:b6:aa:9e:da:
ac:03:c7:1a:fc:16:44:30:f7:c4:1a:bf:c9:8b:16:82:04:51:
d3:c3:35:67:68:a1:c9:3c:bc:03:56:c0:7a:56:8c:81:17:16:
b3:d0:5b:51:07:55:81:79:1b:ca:46:ea:17:47:78:9e:bd:fd:
21:30:3c:c0:17:f1:71:37:81:12:49:f7:3f:e3:fe:5b:df:08:
d4:0a:86:78:71:88:c9:16:b0:b4:44:28:05:05:7b:df:56:6d:
67:13:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:39:18 2025 by rpki-client