Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json)
Hash identifier: yxSxB+PoJG4T9/wp/HeuxSU4um1fNuZryCEQrfdH9/4=
Subject key identifier: 69:97:03:28:F6:FC:68:E3:C5:61:6A:23:BD:2F:B8:79:56:E4:54:D8
Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 03:57:26 +0000
Manifest this update: Fri 31 Jan 2025 03:57:26 +0000
Manifest next update: Fri 07 Feb 2025 03:57:26 +0000
Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: QAzwQKIPYGsKvh7XRbdYKy5eSVRFlOpLB6Qqueo7oSg=)
2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: AICX9y8wbsNvicm9cDH6zrAHQD3slGc0I+Lc9CGXhmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Validity
Not Before: Jan 31 03:57:26 2025 GMT
Not After : Feb 7 03:57:26 2025 GMT
Subject: CN=679c4a26-69a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:59:a3:6e:91:85:c5:6c:ba:36:fd:31:cc:
09:a9:09:4e:c4:b5:34:13:ff:be:93:17:b2:df:9f:
bd:41:0d:97:3a:14:56:a0:dc:17:ae:ff:e8:2d:22:
65:59:da:ed:fb:b2:70:53:9d:f3:5b:3b:fa:71:30:
97:23:c1:3a:97:59:b1:fd:92:bf:15:f5:3a:1a:bb:
b7:95:4c:f9:26:24:2e:7d:66:8f:25:41:47:c6:e0:
9a:a8:ab:53:74:e3:f5:58:bd:e7:e9:1c:d6:be:b1:
d0:bb:e7:01:e1:54:2d:88:e2:ff:71:9c:3c:00:4b:
49:14:a4:af:e6:61:8e:de:e3:b9:a8:6f:9b:6e:b2:
32:f0:7e:9e:35:fd:47:89:eb:24:e5:53:0f:c8:43:
b1:40:f9:a7:90:64:a4:50:cc:fe:af:c6:84:cb:7d:
48:76:dd:f0:32:b7:10:e1:e5:80:ed:38:a9:cb:68:
69:c1:b0:1c:a1:75:bd:b2:a7:da:5f:34:fc:38:e5:
15:36:e2:63:d9:ed:d0:ad:90:20:df:60:75:b1:f7:
17:0e:a9:d2:27:c5:d4:b0:90:da:a6:84:bd:6b:f7:
d3:2d:29:52:0e:a1:97:7e:99:c9:64:36:2a:d6:4f:
ea:82:52:8d:63:fc:75:b3:de:73:59:92:ee:af:4f:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:03:28:F6:FC:68:E3:C5:61:6A:23:BD:2F:B8:79:56:E4:54:D8
X509v3 Authority Key Identifier:
keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:b0:fc:f7:fa:c1:a6:0e:b8:23:1b:df:ca:a4:ee:11:52:a4:
31:48:c0:82:26:11:d6:ec:e1:d3:6e:27:12:8d:b3:70:9a:e7:
58:f9:d3:2f:2b:f9:71:9b:26:7b:5f:17:fd:82:bb:ab:67:fa:
2e:bf:0d:24:44:49:bf:50:6b:58:7c:a4:26:b5:c4:bc:66:93:
92:17:eb:59:e1:ff:36:af:80:42:62:23:77:63:61:f2:72:62:
f1:3e:c8:4c:fe:de:e7:5f:f0:08:96:4e:a7:8a:4f:3e:ba:80:
15:aa:70:f5:03:bb:92:5c:49:fb:e0:1c:d2:3a:cc:1e:66:05:
c3:53:5d:75:b9:80:97:1b:5e:71:9b:2d:cd:3a:f3:e8:b5:86:
ee:43:a4:48:ea:aa:fb:89:06:11:69:47:13:58:78:e8:dc:2d:
6e:21:a1:7f:6d:80:ef:52:b2:d6:e6:5d:c4:22:15:30:e7:68:
50:95:f9:74:f6:67:6f:ba:76:98:9f:3a:a3:9a:5a:77:44:e6:
ba:19:c6:ca:59:21:22:d2:9b:d2:fa:12:27:5c:78:40:cd:02:
57:7a:f8:71:11:31:c5:41:f4:af:be:72:05:3d:31:7a:cb:06:
43:8e:be:62:dd:ac:26:c8:5a:35:1a:83:6c:13:f5:44:ac:46:
dd:a8:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:50 2025 by rpki-client