Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft
File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json)
Hash identifier: N8uiARQyxxUytW3WsdqeaD8CFWY3upre5Qgg3BW2qaA=
Subject key identifier: 30:44:C0:0B:8C:81:0E:42:8F:0D:3E:E0:8E:DA:E0:8B:6A:7A:BF:CA
Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28
Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228
Certificate serial: 09C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft
Manifest number: 09BB
Signing time: Thu 30 Jan 2025 20:05:36 +0000
Manifest this update: Thu 30 Jan 2025 20:05:35 +0000
Manifest next update: Thu 06 Feb 2025 20:05:35 +0000
Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: Q2p57vm1EZnU3+WvmDvdmPWOdhQdGCv+YZHqHbgMjGE=)
2: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: 1ZNHVVO60NViwnNr302mpP5jDT8su+zYi69HimFkoic=)
3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: XIqQJTy7dTxA5gKIZ4WEkQ1HDOZ4ukIBJQ8ua1/vbI4=)
4: C8A0E422831611EA95762453C4F9AE02.roa (hash: sDxyWDjxy3FFVai72/RKSzm5kH6Wl/u3rzH8bUHmbvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2505 (0x9c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228
Validity
Not Before: Jan 30 20:05:35 2025 GMT
Not After : Feb 6 20:05:35 2025 GMT
Subject: CN=679bdb90-3186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:45:b8:50:dc:ff:1d:c1:c9:a5:87:49:39:
41:ff:3f:ea:4a:65:72:b7:b9:79:d1:6e:70:b9:87:
ab:2a:4c:70:69:fa:31:bf:15:a5:82:c4:b8:22:94:
f5:4b:5f:91:bf:b7:15:53:4a:07:c6:93:a4:d2:12:
3a:39:8f:47:19:a3:a2:cd:d2:a5:97:10:07:ab:57:
13:45:21:f1:78:52:02:47:86:39:eb:49:92:bb:db:
b8:99:c6:48:72:1c:40:f3:a2:64:43:b9:4c:95:26:
49:72:84:fd:b4:91:38:0f:e7:52:a4:9f:ee:8a:42:
0b:f1:cd:f5:b2:d4:95:49:16:8a:96:24:cb:b3:99:
f5:f7:b2:40:4c:e9:3d:4e:b5:68:b1:cf:bf:8e:bb:
5b:08:44:d9:e4:cb:7c:af:22:21:84:03:3e:0b:af:
6a:5f:80:c4:18:5e:7e:13:a6:4a:37:2d:61:b5:ab:
cd:a0:1b:1b:92:e5:d0:d7:31:bc:b1:a1:3c:28:18:
74:43:a0:a7:19:84:37:cc:3f:b6:50:33:77:6d:b7:
4a:6e:39:3b:4f:2f:a7:ec:2c:ad:bc:f8:e9:9d:37:
e4:0c:dd:a4:e4:f5:3b:34:ee:93:32:54:45:a3:09:
8d:46:9b:6b:cc:f3:98:7d:5e:1f:29:4d:a1:3d:b0:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:C0:0B:8C:81:0E:42:8F:0D:3E:E0:8E:DA:E0:8B:6A:7A:BF:CA
X509v3 Authority Key Identifier:
keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d2:8f:90:78:59:b3:0d:df:9d:b7:d6:03:b2:e9:48:c4:56:
98:48:a3:32:63:85:11:0c:e9:83:d8:24:03:c1:4b:c2:d5:d5:
aa:49:9c:8d:85:97:bb:06:92:c1:63:0d:e0:e3:5b:39:04:89:
b6:a4:5c:91:0d:b0:5b:f8:a1:09:28:ab:a3:a2:de:e3:62:e5:
1b:61:82:23:ec:9e:bf:76:91:0a:c9:04:bd:2b:d4:0f:ce:01:
d9:9a:69:a3:e9:b8:c6:13:fd:3b:c3:21:a7:0c:27:a0:84:94:
3e:39:e8:25:cc:c7:db:57:b8:46:eb:cb:5c:a7:ed:7e:e4:13:
14:ca:46:ba:eb:da:b3:fa:c4:1e:86:c9:af:5d:8a:99:19:95:
52:c4:96:f4:16:9c:82:1f:54:b9:24:d4:f1:a0:7d:7f:c0:d5:
10:d4:18:d8:5f:93:9e:65:fd:4f:6d:e0:66:e2:2b:57:b0:4d:
91:41:bc:ae:61:b7:ad:21:2b:c3:fa:ce:7a:6a:8a:e4:39:02:
ad:fe:ed:8e:26:57:76:94:7e:e2:ed:72:a2:cc:52:39:75:94:
6f:b8:1c:27:fa:1e:a3:24:2e:ef:5f:e0:f1:40:47:be:d1:53:
ca:a4:bf:7b:1c:86:f0:2c:a4:f1:e5:8b:55:de:1d:fd:a9:6b:
33:04:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:22:36 2025 by rpki-client