Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json)
Hash identifier: tH1zp2xuKqpgJMvoMDoW/RvYvL8VwLDdlxnqrDHvJxM=
Subject key identifier: D4:5C:93:CA:11:98:63:DC:8A:3D:F9:DA:D8:45:C0:A3:9E:C9:14:22
Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
Manifest number: F9
Signing time: Fri 31 Jan 2025 04:18:00 +0000
Manifest this update: Fri 31 Jan 2025 04:18:00 +0000
Manifest next update: Fri 07 Feb 2025 04:18:00 +0000
Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: lY1+TCf0rCsjDe+u/M9sg+8YkL+i2f3vryT9oA1bONk=)
2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: g/Vp4JxPAnFvSE7br/vqo4Gmy4ZBC5/7hAk3ouH5N3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Validity
Not Before: Jan 31 04:18:00 2025 GMT
Not After : Feb 7 04:18:00 2025 GMT
Subject: CN=679c4ef8-f346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:22:b6:69:86:34:19:bd:c8:2c:02:2a:8f:
25:4a:b4:b6:72:fe:48:38:a3:50:27:a4:b1:29:8b:
b6:09:ee:8e:a8:aa:f9:c2:5e:02:8f:db:2d:ca:c2:
41:72:ae:d4:6e:47:df:90:e1:50:b7:9a:c8:9c:b8:
4c:fb:c6:db:28:46:b6:ed:97:b1:d8:9f:6a:21:60:
96:d7:8b:4a:df:f0:ff:67:28:ed:f2:c1:4c:18:d6:
1c:93:b1:36:50:70:73:98:77:e1:9b:65:68:15:df:
8a:a8:18:3b:56:9c:ee:05:ef:f1:4f:22:2e:45:36:
f4:b9:42:af:43:8f:72:b5:62:84:9c:64:51:b8:30:
c5:23:bf:90:3c:d2:45:d8:3c:2c:a7:f6:92:6d:32:
22:eb:36:08:bc:b8:de:6e:69:31:de:bc:a2:d9:1f:
6a:b0:71:ef:0b:ab:c8:85:d8:f1:c2:2a:d0:d5:bb:
c1:5a:50:b2:0b:f8:ed:79:2d:9f:44:bc:0f:73:48:
0b:d0:12:a3:c9:af:e4:e7:e9:95:9c:1c:ce:66:b6:
29:59:b8:a5:cf:f5:da:62:14:d4:0f:20:04:9d:91:
61:6e:f4:a1:90:00:3c:0c:1c:5f:d5:eb:60:33:c2:
6c:81:b4:bd:0f:f1:9d:56:b5:01:a7:93:23:86:2a:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:93:CA:11:98:63:DC:8A:3D:F9:DA:D8:45:C0:A3:9E:C9:14:22
X509v3 Authority Key Identifier:
keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:07:1f:66:2a:27:38:af:bb:2f:32:e9:98:0d:64:f5:69:
81:12:d8:07:08:61:5b:86:47:9e:75:b0:5c:3f:50:30:81:a3:
fc:74:b5:1b:be:cb:87:29:e0:6d:a7:ba:54:36:92:0d:f0:f4:
dc:71:61:0b:95:f4:c2:91:7a:1d:fd:01:5f:93:ee:7f:4f:85:
db:8c:ce:af:0e:19:83:08:6a:87:c8:ba:32:73:db:88:0a:36:
29:e5:af:b0:2d:a7:3f:8a:3d:5e:b7:81:9d:da:4f:b6:32:15:
bd:bb:78:45:9a:d0:5e:41:ce:22:96:c6:f6:17:34:96:a6:00:
eb:b5:a4:12:85:99:9b:e8:6a:f4:21:96:98:c5:6b:b4:fe:76:
1d:89:8d:23:23:85:1c:4e:f1:f8:b4:21:e8:8e:30:98:98:65:
0a:b8:ca:c7:c9:d7:41:c8:c3:43:69:86:04:50:c5:99:af:af:
37:0f:6d:56:2b:ce:f5:72:db:04:e3:c8:29:de:9a:2f:42:d2:
1a:d4:03:00:09:4e:cf:d4:24:1b:42:8d:8a:3b:0a:09:2c:de:
95:f5:70:9c:26:ff:37:91:16:bc:64:fc:3c:6d:5e:06:5b:69:
ae:3b:33:6d:f2:f0:d8:4f:02:94:04:84:79:ee:83:fd:ee:fa:
1e:b3:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:36 2025 by rpki-client