Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier: v3BH/IWQIo8q2Y556UExrV0zyuGacGH7iXCOh1DB8RE=
Subject key identifier: 87:D3:C4:99:78:A9:6E:6B:7E:F1:12:FD:F8:77:80:C6:B6:1D:6A:12
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number: 019C
Signing time: Fri 31 Jan 2025 02:36:46 +0000
Manifest this update: Fri 31 Jan 2025 02:36:45 +0000
Manifest next update: Fri 07 Feb 2025 02:36:45 +0000
Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: yYH2+t7ypdtgbvnzORHYNnC35yLOatmPD/Irt7erIyc=)
2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Validity
Not Before: Jan 31 02:36:45 2025 GMT
Not After : Feb 7 02:36:45 2025 GMT
Subject: CN=679c373e-424e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:d0:b2:99:ad:28:2e:16:f0:8e:cf:31:7c:
1d:75:11:07:90:1d:c2:7c:25:f8:65:18:27:7b:1c:
5c:6b:57:52:e5:45:04:83:41:3d:0a:03:34:41:a3:
33:4b:22:37:a6:88:1a:e6:6f:6e:ac:65:40:d8:d4:
fe:8f:c0:66:b8:12:4f:68:53:24:93:9d:b2:f6:50:
73:85:8d:bb:02:8a:42:e5:c3:2b:13:50:fc:a6:f0:
a8:0c:2d:1e:54:5a:15:4b:f6:d0:ca:70:8f:3b:1b:
0c:3d:58:e3:1e:28:43:84:bb:bd:50:ed:5c:f0:67:
74:f2:4b:25:15:9a:f2:76:c5:51:45:5a:6b:40:7b:
26:c4:42:51:58:cd:c7:f7:cc:1e:b3:74:3a:e8:92:
95:2d:62:ea:09:ed:f5:d9:c1:c8:78:ff:72:03:4c:
1e:fa:4c:5e:ca:a5:c7:e1:f0:ed:36:de:7f:c5:ff:
1f:b3:07:4b:29:7f:9e:01:a1:8c:61:19:f5:da:48:
89:52:d3:7d:b5:fb:68:dc:bf:8a:a6:5f:47:97:20:
8b:3c:04:67:72:f9:bc:da:e7:7b:09:b6:d4:5b:f7:
d5:fe:c2:9b:2a:77:cb:c4:22:51:80:e6:a4:53:16:
4e:5e:76:61:74:26:bf:1c:18:9d:f4:fd:c1:82:92:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:C4:99:78:A9:6E:6B:7E:F1:12:FD:F8:77:80:C6:B6:1D:6A:12
X509v3 Authority Key Identifier:
keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:03:1a:d4:3e:25:3f:9a:8f:2e:85:eb:65:a0:18:b8:ec:01:
79:9f:b5:56:39:d4:1b:dd:ab:63:f2:af:bc:9a:74:b0:b1:8d:
f2:c0:37:d0:a8:bd:25:f5:f1:a5:78:5b:b5:fb:91:70:8c:21:
ed:8a:c9:0a:bb:3a:1c:0c:86:20:0a:44:3f:25:19:db:52:12:
22:09:d7:46:78:a8:09:6a:ba:94:27:df:61:c4:a0:0e:ef:4b:
65:a7:bb:18:c7:a9:97:bb:cf:76:10:6f:62:87:0b:c1:0a:07:
60:1d:ad:7a:b3:1c:43:94:31:e7:6a:36:41:9e:a8:a4:97:9e:
90:e9:cf:94:28:e6:92:36:68:c5:f4:a3:92:7a:c2:59:f9:26:
6e:31:5f:2b:8a:00:a8:02:40:29:23:84:26:e5:b1:ac:d8:48:
83:11:38:c1:12:45:22:e0:09:3d:29:8a:20:4f:be:22:7b:5f:
f1:c8:b9:24:c5:c4:a0:cc:ca:71:d2:57:e0:0d:62:22:05:8d:
4f:fc:f1:2a:61:2c:52:b0:9d:66:67:f5:bd:a1:e9:0f:7c:db:
7e:55:cb:86:92:6a:16:22:46:3a:75:d8:e3:b3:99:21:d7:ef:
81:0b:25:80:10:eb:f6:ea:80:1b:98:ff:50:59:9f:bb:a7:d1:
9e:c5:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:26 2025 by rpki-client