Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json)
Hash identifier: yYzsdhwgZ7hKPzKBd9PcisdlhlVILOQy4bP4EhajgXs=
Subject key identifier: A3:FF:A4:9A:54:E5:5C:22:98:C8:12:1A:5D:80:2E:AB:EF:36:82:56
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial: 080B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
Manifest number: 0801
Signing time: Thu 30 Jan 2025 20:54:58 +0000
Manifest this update: Thu 30 Jan 2025 20:54:57 +0000
Manifest next update: Thu 06 Feb 2025 20:54:57 +0000
Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: /jC1Sg+n3FJaO/vUyEfjvh0mgi99vPRznQLrei/lqrU=)
2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: 2uyPyTnKA5Zwl2pBoHO39thl2FFHLVE7fFoHDqNgHC8=)
3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: jgTYi57dnGXhFEZx8F96LVtuauTCfgLefdSP5U2KTns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Validity
Not Before: Jan 30 20:54:57 2025 GMT
Not After : Feb 6 20:54:57 2025 GMT
Subject: CN=679be721-8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:cb:d4:8a:5d:e1:43:03:bc:b8:91:8c:4f:
3c:64:5c:6e:1d:fa:06:b9:62:ed:d8:65:96:e1:83:
74:83:03:92:6d:cd:e2:eb:ee:a1:d7:d9:10:a4:44:
d2:d0:df:8d:c3:b6:ef:31:78:2c:c3:f2:9e:c4:ce:
e2:bf:07:0e:75:59:82:8e:ff:80:ec:13:cd:8b:78:
86:cb:d3:51:35:60:3d:03:7c:f9:8f:06:13:1e:d0:
c7:1f:a3:36:9f:b9:6f:8c:f7:97:24:49:db:34:8c:
fb:f5:a4:74:37:96:3f:ad:bb:df:25:0d:91:44:85:
42:29:db:64:6f:60:0e:d1:91:82:de:83:03:33:d2:
b6:da:fe:12:73:26:9d:10:19:21:eb:71:21:2f:d3:
aa:7e:47:76:63:da:85:10:f4:b2:be:ca:f5:1a:50:
da:c7:44:12:96:cf:37:a6:f1:3e:11:53:20:25:6b:
17:51:7e:e5:99:f8:44:39:76:7b:b6:25:15:b5:94:
8c:b2:12:8c:f7:38:9d:09:bf:f9:c2:93:6b:b5:41:
25:3d:23:19:bd:fc:e0:4e:7c:86:c7:3a:05:36:10:
c4:86:f0:e3:08:da:2d:7e:5b:c1:19:31:25:07:37:
0d:24:8f:32:f5:71:5c:86:fb:be:1f:4f:d6:10:76:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:A4:9A:54:E5:5C:22:98:C8:12:1A:5D:80:2E:AB:EF:36:82:56
X509v3 Authority Key Identifier:
keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:10:f6:5d:cb:99:d4:a1:18:dc:71:9b:87:eb:ff:be:5f:aa:
21:40:94:bd:c9:93:a5:b4:75:ff:a1:1c:82:1e:47:84:02:cd:
f4:e5:4d:50:fd:5e:7f:1e:e5:8e:ea:26:a4:7d:77:68:cb:49:
c0:62:c3:43:f4:f1:bc:9e:d6:66:64:f4:be:7d:74:b6:72:a4:
03:5f:5a:ed:bf:88:75:1f:1d:8e:c8:4f:75:ad:5b:98:86:74:
91:99:49:2d:a2:f8:ef:b1:9b:34:f3:8f:26:50:b9:dc:be:f0:
17:d7:38:24:fc:66:74:57:72:1d:62:d8:e6:5f:93:d5:f4:75:
e6:88:78:76:26:04:63:6c:c2:15:ef:6a:b1:4e:1f:17:91:06:
54:86:e5:6a:5e:e7:cd:a8:63:3a:63:db:29:5b:65:17:69:93:
14:ea:db:e9:94:73:e6:ae:c3:02:43:b4:08:e7:f1:50:5a:ba:
d6:f0:c7:5c:e5:65:d8:0c:ce:6d:b1:d6:50:aa:f3:94:00:46:
5b:1f:a5:aa:09:e4:44:ea:4b:1d:cd:2a:67:5a:b7:dd:f9:ab:
0f:de:15:35:80:48:8b:0c:1d:75:72:a4:d2:c3:06:fe:a0:c8:
5c:9b:c3:0d:02:9c:5d:9b:2c:00:e1:66:e0:80:4b:79:27:1c:
86:91:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:04 2025 by rpki-client