Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier: 2IX3JFnQCXkmpsLhATBq4zpDDgrv5vfk/LnezhY2j5k=
Subject key identifier: E8:5E:F1:5A:41:18:75:32:85:B4:00:5D:E1:D1:38:4A:B8:3C:1E:4D
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number: 2F
Signing time: Fri 31 Jan 2025 06:45:08 +0000
Manifest this update: Fri 31 Jan 2025 06:45:08 +0000
Manifest next update: Fri 07 Feb 2025 06:45:08 +0000
Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: e+XiLwC8a06XiEOJ0jH/Gy602ehtWSUSRBKcMbJ/+OI=)
2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: VX9a5YBUtpdceZGelu87X/+pVqEvBk+THvAi7CH5Z+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Validity
Not Before: Jan 31 06:45:08 2025 GMT
Not After : Feb 7 06:45:08 2025 GMT
Subject: CN=679c7174-19d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:99:53:4b:47:45:fd:16:a5:b8:c3:f7:bb:
85:f5:36:09:df:09:d6:42:b6:19:3c:97:1c:ca:98:
51:97:68:65:d3:87:f7:32:ab:29:08:5a:85:41:5f:
ef:01:c1:55:fb:75:44:e6:2c:de:f5:c6:e8:82:87:
0f:1e:2f:86:d2:da:7d:da:c4:b1:20:d6:df:f9:a5:
38:e0:7a:d2:67:a9:1d:3d:e9:26:f7:59:f6:cb:94:
08:c0:08:dc:ab:80:40:31:09:da:86:d6:24:0d:a5:
2c:74:1b:73:d5:cd:1f:32:19:8c:e9:73:e9:b6:c6:
55:50:5f:4d:b6:7e:f6:4e:20:07:2c:74:5a:d7:02:
18:85:75:e7:51:a2:a6:54:11:f1:5b:02:0d:19:cb:
4a:98:51:8b:91:6d:cc:73:7d:b3:ab:63:3c:c1:87:
88:78:45:ce:26:16:32:ba:88:46:0f:ce:c1:88:01:
82:9d:83:cc:85:a2:00:19:3d:86:83:a6:29:91:23:
2a:f6:f2:b4:7d:e1:3d:2c:45:f8:66:28:db:58:5b:
58:03:44:87:8a:53:fa:4b:cf:08:c8:d0:dd:08:c3:
03:48:91:2f:7a:9b:41:60:fa:30:8c:2a:25:c7:71:
f1:45:91:96:90:34:6b:99:92:0e:c2:36:25:e2:9f:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:F1:5A:41:18:75:32:85:B4:00:5D:E1:D1:38:4A:B8:3C:1E:4D
X509v3 Authority Key Identifier:
keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:07:57:da:83:27:ef:59:6f:15:a9:b2:9f:35:32:21:41:cb:
c2:72:88:1f:d3:a1:bf:53:7d:80:2c:0a:e7:62:c7:bd:69:2f:
a8:74:29:fc:d9:cd:89:21:06:f9:4f:59:f0:41:3f:a1:2a:45:
0f:05:23:f7:1e:81:60:af:a6:b5:cf:a3:a6:bd:d2:65:38:9b:
e9:59:05:57:12:b0:3c:3e:ad:e0:3b:98:01:ef:06:80:b1:99:
85:bc:72:32:08:d0:4a:cf:71:41:17:6a:4e:37:5f:97:b7:22:
b3:88:12:3c:03:f2:7d:13:71:b9:d1:4a:24:ca:53:c4:9e:84:
75:79:bc:00:83:f1:1e:3e:0e:d2:ec:b8:3b:ed:bf:47:09:63:
e7:75:9d:22:95:17:88:13:5c:35:96:4a:01:62:09:12:6c:84:
e1:49:11:0a:ab:7c:72:8b:0f:3c:d5:25:c6:39:2e:4e:5a:f3:
97:57:b8:92:19:0a:7b:f9:9c:27:f1:6e:b8:2c:04:c2:d8:21:
e6:06:8a:70:5d:7a:d1:4b:3e:4f:9e:ea:40:87:5a:43:99:02:
b2:11:2a:ba:eb:99:f5:2f:c4:d8:ed:fc:90:7c:80:86:14:e5:
5d:fc:05:f8:e7:f4:c2:55:fc:35:31:f4:96:82:3b:fc:fd:c7:
de:a0:79:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:06 2025 by rpki-client