Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
File: raiu0ysVuH5hElLSnR4dW95YFkY.mft (raw, json)
Hash identifier: w6BlHKiACXAZScWgEzLriun9PAZAxu5jeaSOh2IMAbU=
Subject key identifier: EE:F7:9F:23:38:EF:31:BE:80:7D:A2:6B:44:35:06:5A:26:83:1A:83
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial: 3538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
Manifest number: 34B4
Signing time: Fri 31 Jan 2025 14:16:21 +0000
Manifest this update: Fri 31 Jan 2025 14:16:20 +0000
Manifest next update: Fri 07 Feb 2025 14:16:20 +0000
Files and hashes: 1: raiu0ysVuH5hElLSnR4dW95YFkY.crl (hash: PGWrlaAPUuqdTiCGmKAKnenuI7naaokTS8b+Ie0iA/s=)
2: C9B8A270483411ECA6C7C085C4F9AE02.roa (hash: nJvnNt0eJsmGuLUjItzV/NgJ7+2UZ1r5MhffEQ8w0sk=)
3: AF560BA2B1CC11EF80C4BE44C4F9AE02.roa (hash: JKOX2Bnk1obdJWD/11GK8Zj49w+PdYErgulVkpa2rdU=)
4: 7C836BA46C8E11EEA38B9554C4F9AE02.roa (hash: aQYfeFSthN9oof4UX3Yota3Vi8A1Xibnwm7ZRxMjljY=)
5: 539CC922366C11EEBEBBBE1DC4F9AE02.roa (hash: TrayTHMiKb+Dm5posHRv3ZfOvi01WiwhoUD8use0rkY=)
6: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (hash: iJ1kB8ujNY3bRF9sFR+ioHj2q77p/d9prgJ8hOEg/Tw=)
7: E2446DD228AA11E79582F36BC4F9AE02.roa (hash: ZJSRmEu8ZSRqTlcPEDfX6hYX2fzOC+1QV4+V6A/VckU=)
8: 662A2F2286B411E6BAEB2614C4F9AE02.roa (hash: MRkFXSabw9acLO92YltXC7hoPQwJsDF6DX+Xsg12tnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13624 (0x3538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Validity
Not Before: Jan 31 14:16:20 2025 GMT
Not After : Feb 7 14:16:20 2025 GMT
Subject: CN=679cdb35-11d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:75:d7:b2:93:61:89:a7:08:fa:d6:c6:a1:
33:04:7b:50:07:c4:49:05:c9:1f:86:e5:db:3a:73:
24:f6:de:fd:08:79:46:74:45:80:3c:3c:18:7c:e4:
3a:88:01:3a:bc:dc:eb:d8:15:e6:37:1c:fe:ea:33:
a8:00:26:b8:7b:df:4f:60:01:dd:62:56:76:65:aa:
84:10:7c:d5:dc:7a:b3:84:7f:a6:1f:9e:6d:68:46:
66:84:59:b1:8c:ab:e4:07:75:f0:af:37:40:71:1a:
66:48:3b:cb:42:e4:ff:59:3f:d0:53:d4:51:8f:24:
b7:2a:71:69:a6:5b:e3:5d:04:a2:45:b9:92:7d:e4:
2e:cd:be:d7:9f:eb:af:f5:47:5c:37:c8:97:9a:30:
4d:17:9a:06:cd:66:91:57:ca:f3:8f:04:63:1a:d1:
1c:4d:e5:9b:f6:b6:32:5e:56:70:f8:ba:60:0c:90:
3f:f9:bd:36:d5:63:37:e2:f0:43:a5:5f:35:7a:e2:
60:b3:96:9b:c1:ee:4f:94:8a:8d:52:67:cc:29:b1:
dc:83:16:85:54:cf:1c:8a:2a:f6:a2:ad:4a:1b:a5:
e7:62:fd:4e:25:cf:d5:32:d6:ea:ab:1c:25:45:68:
1c:c8:ff:2e:5d:0c:15:23:be:76:85:a5:79:ee:f6:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:9F:23:38:EF:31:BE:80:7D:A2:6B:44:35:06:5A:26:83:1A:83
X509v3 Authority Key Identifier:
keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5b:cd:3d:79:a7:1e:49:6f:f9:a2:33:f5:c5:6b:f0:1e:88:
65:9f:b6:57:3e:2f:d7:fa:29:12:8e:d3:d7:20:55:f6:11:bd:
2f:17:99:2c:0b:33:a6:5a:28:ed:18:65:a6:14:0c:04:97:d9:
7c:fd:69:1c:81:42:5e:76:00:51:0b:85:8d:f8:cd:4e:f9:21:
75:54:77:6f:b4:ec:96:e8:43:da:26:27:65:d9:40:c5:be:ba:
16:56:72:74:20:56:15:0d:c4:8b:82:8a:94:44:7e:d8:1e:ce:
e7:9b:36:86:0e:8c:cc:39:cd:68:1f:85:9d:7b:7c:9a:33:ef:
45:ca:ef:1c:0b:a5:a4:76:30:62:f5:e2:75:a5:49:a9:7f:cc:
6c:cf:45:42:8b:30:92:e1:29:00:90:66:e5:4a:51:81:56:0b:
04:83:99:d4:9d:bd:9f:c5:2b:a4:92:a1:fb:b0:a4:35:7c:ca:
12:71:60:d1:9f:f0:0e:6f:64:5e:15:bd:e8:0d:f8:c1:1e:ff:
16:98:6b:d4:6a:2a:4b:b6:5e:c9:b3:7a:37:95:cd:45:bd:8c:
e9:4e:f7:65:42:d8:21:8e:ba:12:bc:5f:c3:f8:ef:7a:1f:5f:
a7:3f:7a:47:70:57:1c:fc:e4:3e:60:59:54:7e:99:1a:3b:ac:
3f:1f:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:57 2025 by rpki-client