Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier: P9Lbh+N/nS9nxjzrhPuuAu8/DptM2712MXYTCvBIcCA=
Subject key identifier: 14:20:D2:F8:31:2C:D8:FC:43:89:75:B8:4D:1A:3B:E0:9D:7D:05:E9
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial: 0AA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number: 0A97
Signing time: Thu 30 Jan 2025 19:40:09 +0000
Manifest this update: Thu 30 Jan 2025 19:40:09 +0000
Manifest next update: Thu 06 Feb 2025 19:40:09 +0000
Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: N7zTXVyDjtJItgTcIzbRtnU6LpfYXwZ6jFQ0pXlleRw=)
2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=)
3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Validity
Not Before: Jan 30 19:40:09 2025 GMT
Not After : Feb 6 19:40:09 2025 GMT
Subject: CN=679bd599-f543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:f1:25:2a:7a:5e:a3:44:be:28:16:93:9b:
ab:9b:85:9e:bd:ac:6a:ae:ff:6b:dd:67:d5:44:8a:
15:ee:d4:59:7b:18:ff:f5:df:a6:8e:23:16:48:c9:
8e:41:1a:cd:67:33:7c:39:7d:80:59:73:11:e6:28:
bd:af:bc:95:ad:7a:3b:84:33:74:72:47:6c:07:d0:
86:ae:b3:a0:fa:ea:14:a3:65:ad:8f:ee:12:c4:ed:
56:f6:50:c7:e2:30:a2:f0:60:db:4d:d0:d7:38:66:
67:36:8a:d2:37:0f:77:89:0e:1e:c8:8d:07:6f:21:
44:fc:de:3e:17:7d:0b:b8:b7:13:66:6b:9c:15:ae:
2e:b1:e3:22:fb:01:11:7f:78:cf:2c:fe:bf:e8:0f:
13:5a:6f:b4:56:bb:d9:fe:11:a9:77:53:6e:90:6c:
49:ad:98:ed:ef:2e:f9:53:eb:8a:09:91:f7:d6:53:
39:19:f1:f5:40:c9:bc:a8:43:ad:6c:86:03:73:89:
da:54:fa:3b:f3:d4:31:37:2e:16:30:99:a6:5d:27:
25:92:ea:6a:15:61:ca:42:c8:f2:ec:f1:1c:8d:a5:
d5:0f:f7:68:11:83:2f:25:b4:0c:3e:43:f9:a9:1e:
49:5e:a2:b0:3f:cd:49:50:bb:b3:c5:55:ff:b0:ca:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:D2:F8:31:2C:D8:FC:43:89:75:B8:4D:1A:3B:E0:9D:7D:05:E9
X509v3 Authority Key Identifier:
keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:99:c9:f6:bd:2c:3a:7a:58:0c:7f:79:2c:b4:bf:d8:60:39:
30:84:eb:e9:69:47:4d:a8:da:4e:09:a8:65:9c:f1:38:10:4d:
c8:8b:bf:02:b6:63:86:6a:f1:69:cf:96:2a:73:c7:86:82:0c:
b4:ca:1a:0d:9c:2a:e9:23:5b:8c:a1:f5:d3:55:03:2a:64:31:
e8:ed:bf:26:de:59:1d:b9:31:82:7f:e3:d6:1f:74:33:56:13:
d7:a1:11:59:28:a9:68:49:bd:c8:87:8c:d3:c1:18:3b:dc:e6:
4b:58:95:ce:3d:9a:b8:56:70:b0:aa:e8:94:7a:6c:d7:d9:a2:
d4:b2:f6:2a:3c:6b:52:d3:37:5d:5f:f1:18:e1:a6:bc:50:21:
b4:ff:0a:36:a9:75:0a:31:16:8b:f0:be:69:bf:77:ce:7d:be:
f5:91:04:2e:05:4d:59:cf:e8:4a:dc:ff:a7:dc:f4:4c:79:5f:
71:c2:4f:1d:31:dc:be:b4:e4:cc:c8:4e:ec:73:88:3f:8c:39:
bf:e6:75:f7:8f:9f:25:51:9a:45:6d:9f:ea:fb:b8:42:fc:81:
91:d9:f9:08:82:84:5f:bf:30:ec:b7:89:33:0e:10:4c:2d:85:
2d:85:d6:07:fd:19:f2:64:ab:4c:6f:a5:35:d2:5b:d1:d2:ba:
75:37:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:28 2025 by rpki-client