Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json)
Hash identifier: koJ2q8DXwD3FOQhFFAvFxKmiLh83gMrcvCurjseLIqs=
Subject key identifier: 92:50:0C:47:BE:56:94:87:4A:D8:00:42:AF:B6:8C:DB:02:95:E6:CD
Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Certificate serial: 1EE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
Manifest number: 1ED5
Signing time: Fri 31 Jan 2025 16:02:39 +0000
Manifest this update: Fri 31 Jan 2025 16:02:38 +0000
Manifest next update: Fri 07 Feb 2025 16:02:38 +0000
Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: k82QA7XxGtJptoEk9U2s4ln2p6MCGk47MebloF4M8rI=)
2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: GAb6VP25Sih6kuMJl/07aQz0S9qS9uziUSigVGvFQjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7905 (0x1ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Validity
Not Before: Jan 31 16:02:38 2025 GMT
Not After : Feb 7 16:02:38 2025 GMT
Subject: CN=679cf41f-25b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:7e:06:5b:37:71:b5:88:06:c0:94:0d:46:
3a:b9:14:e1:24:8e:72:ef:60:0e:c7:cc:83:99:c5:
aa:07:f8:78:b2:d2:cd:c5:84:e1:df:bf:2e:cf:3d:
ae:b8:2e:3e:d5:75:48:14:7d:ed:2a:f2:24:00:a3:
8a:6d:e1:c1:dc:5f:61:f6:9b:b3:30:1d:bf:d4:dd:
0f:e0:71:c0:8a:cb:49:20:09:5c:9b:b2:c7:bf:21:
b7:3f:2c:50:a1:98:c5:59:62:1c:84:af:f5:4a:d1:
80:8f:47:77:e4:97:68:6c:80:a2:3e:97:c9:fb:34:
2c:75:f6:c1:46:25:83:92:c1:e0:85:95:c7:ae:b8:
87:6c:e2:5a:10:67:bb:e6:9b:18:de:03:9a:41:54:
68:f0:70:82:46:d2:2d:a9:65:32:39:53:ff:cd:b6:
df:c3:68:cd:7b:80:ba:82:6b:a7:d0:8e:78:2f:8d:
3d:da:92:94:ce:11:ee:6b:0a:75:4b:ac:42:6d:32:
eb:c9:19:d5:38:b2:5b:20:07:71:05:cb:48:54:cd:
94:84:e7:3a:8e:56:d1:d9:59:ad:5e:15:c4:1c:60:
39:ef:dc:67:cd:f2:f1:06:bf:6a:9a:70:79:03:02:
47:42:69:b3:74:5f:6c:76:dc:08:6a:fc:21:10:ed:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:50:0C:47:BE:56:94:87:4A:D8:00:42:AF:B6:8C:DB:02:95:E6:CD
X509v3 Authority Key Identifier:
keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5c:62:ff:7a:ef:11:39:2e:a1:35:bc:7b:24:11:b2:8f:65:
fa:4b:22:cc:69:da:ee:a5:63:ca:be:62:7d:eb:97:e4:8f:0f:
3b:a5:d2:2d:2e:35:34:bb:36:45:48:8c:f3:f6:70:13:8f:8f:
6c:97:c4:f6:33:18:7c:55:cf:c6:44:5a:ba:4a:30:5e:dd:e5:
f6:64:37:e4:94:7e:4a:e1:8a:9e:a1:24:36:ac:09:0c:b7:dd:
a0:03:4a:5e:6e:44:33:3e:2d:10:fb:4d:dd:42:96:3b:99:bf:
a7:67:6f:a0:af:bf:95:53:65:5e:94:02:44:3e:aa:67:fb:f1:
20:6a:ff:4c:40:af:ab:d6:52:60:40:c1:71:56:b3:f5:8f:ee:
6f:3a:28:99:7f:c6:e0:23:09:d5:e3:5f:3c:3a:15:8b:9e:29:
b9:07:65:bb:05:7f:95:0a:c9:89:ee:6a:90:3c:d6:9c:a4:cf:
39:f8:7a:c5:29:ad:56:6f:08:b3:2c:01:ac:cf:d9:39:cf:53:
81:8f:41:8a:b3:55:d7:ca:aa:e6:8c:4a:41:43:ef:61:75:4f:
b5:a2:1e:9c:1b:38:83:2a:22:47:f9:1e:ac:de:d7:34:a9:67:
75:8b:a6:e3:eb:75:31:92:21:b1:87:16:c4:57:61:24:74:8f:
cd:25:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:58 2025 by rpki-client