Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json)
Hash identifier: wXidreZM+oUbK/DbVyRsR8gSnRX8CFL6hm/CSvQf2rY=
Subject key identifier: 64:10:3E:73:3B:62:5E:E0:6A:63:CE:8A:BF:6A:C4:FE:07:9A:B7:62
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
Manifest number: 02DB
Signing time: Fri 31 Jan 2025 01:27:03 +0000
Manifest this update: Fri 31 Jan 2025 01:27:02 +0000
Manifest next update: Fri 07 Feb 2025 01:27:02 +0000
Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: 53N6kPvIXE9VDQjUvOjLAtx/+PQ9BNR8TzKV8kKsGXs=)
2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: ATHtpOo5iB32fJStBSLmEkpBLzW5yPkGZ3s+RacPoK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Validity
Not Before: Jan 31 01:27:02 2025 GMT
Not After : Feb 7 01:27:02 2025 GMT
Subject: CN=679c26e7-c379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:d1:24:2d:63:f5:b7:95:ec:4f:48:1b:c4:
a0:ef:8e:94:86:d1:21:9d:a1:4c:f7:78:1e:ba:b6:
f2:2f:36:55:0d:97:7a:c9:b6:cf:49:35:8d:d6:d3:
5a:47:be:18:8a:d2:0d:a3:e0:fb:91:e7:91:2c:6a:
dd:e3:4a:20:5c:cd:28:02:f9:b7:8c:9a:91:5f:03:
a2:f2:63:a6:25:c3:e5:81:83:e4:73:b9:fb:0a:a5:
08:f5:22:43:72:f2:89:20:e3:d6:f7:0c:7b:07:a5:
39:e7:7f:0b:f7:58:ee:c1:74:98:b1:5c:06:e3:06:
ad:13:c9:58:5b:5f:cc:ad:89:2c:fb:59:2e:41:ec:
2d:7e:43:1d:cd:79:d5:ce:fd:08:d7:6f:66:22:99:
12:f7:c6:4c:e4:1b:b6:ad:64:54:fe:1d:62:a9:62:
9a:a1:f4:36:04:7c:a8:ea:ea:47:1e:0c:48:fe:60:
e5:89:cb:65:00:91:3a:6f:9f:22:24:62:08:13:97:
9c:82:13:b3:71:a6:79:24:58:15:f5:b7:17:6f:a0:
9d:7f:ca:42:4a:37:40:ce:4c:7f:7e:e1:95:34:ff:
24:8f:53:cf:f1:99:1c:98:23:83:91:5e:49:ad:4c:
34:51:60:44:9f:8b:aa:34:29:73:19:81:9d:c2:ff:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:3E:73:3B:62:5E:E0:6A:63:CE:8A:BF:6A:C4:FE:07:9A:B7:62
X509v3 Authority Key Identifier:
keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1d:d7:2a:a1:e2:36:8d:fb:4d:3b:93:b6:f0:85:0f:44:da:
6f:9e:74:ce:45:27:66:18:a4:26:11:ee:23:39:ea:47:a4:02:
b3:20:c3:93:f5:af:a9:65:72:c9:c1:47:32:2a:9e:95:9e:45:
e3:a8:d8:b5:ce:83:72:d8:51:51:6b:88:18:91:68:74:5d:f0:
17:80:4e:ca:e3:b6:92:76:da:6e:2b:b7:67:aa:0b:f7:d2:70:
67:8f:e7:b0:7b:85:fe:39:ff:ce:8e:93:d3:bc:76:c4:a5:3a:
22:03:a7:cc:22:c7:eb:43:33:93:dc:41:f4:df:be:2a:96:20:
c8:b5:a4:eb:25:9c:28:32:d7:57:81:47:6a:90:5c:9c:1d:e5:
3c:98:fa:37:44:76:ac:c3:47:03:5f:ee:73:94:eb:b6:2f:39:
79:ca:97:2c:d9:9d:c6:2d:e3:d9:eb:dd:68:05:3c:69:e2:28:
86:1a:cf:ae:2a:c5:fd:1b:d5:76:d2:b5:e5:8e:3c:26:b6:f0:
f4:84:39:1b:ec:3f:b1:80:24:33:3c:69:4e:2e:7e:2e:4a:e6:
9e:83:2e:f0:49:66:23:7c:09:13:99:26:0b:a7:c9:83:0e:37:
b3:02:a4:7d:e3:09:72:1d:df:54:91:9d:0b:6c:5a:11:ee:6a:
d2:14:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:22:19 2025 by rpki-client