Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier: HYDO6elBdWN7Ch8hoT6JmZpNv/VFpQQFtaNnDxLcqLU=
Subject key identifier: 99:9A:04:64:E0:CB:C6:E6:8E:DA:13:31:2D:7F:3F:15:B4:EC:89:73
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial: 0326
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number: 031C
Signing time: Fri 31 Jan 2025 01:14:36 +0000
Manifest this update: Fri 31 Jan 2025 01:14:36 +0000
Manifest next update: Fri 07 Feb 2025 01:14:36 +0000
Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: 6wuIraGKw0X3xE9S1vBYaa7ocUs8xouR4TEIawnIqOQ=)
2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: 3ltUc1MRVqJi3SEeMGw79iaqCBtkg84cqJVUr/o1VYA=)
3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: Amk0fNoLVyq/V0Aumz+LOy4QbvlRWTIXw8dCA9q0zmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Validity
Not Before: Jan 31 01:14:36 2025 GMT
Not After : Feb 7 01:14:36 2025 GMT
Subject: CN=679c23fc-6f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:d8:a5:82:18:4c:d3:b8:56:5e:0d:af:01:
51:6c:f4:d5:0b:41:4b:b8:84:c3:d8:b7:04:18:ff:
d7:75:b5:4b:17:b3:9d:49:28:48:71:1d:00:0f:f2:
22:f5:b7:a8:5f:86:3e:a5:c1:79:ee:c0:f0:47:91:
ae:59:46:dc:18:48:43:d0:67:ca:21:1b:49:5e:6f:
cc:77:d6:65:80:02:18:ae:19:df:5c:70:8b:6b:4d:
d5:2f:70:31:f5:86:e9:a4:32:54:12:54:b0:d8:98:
1e:b1:7f:4c:49:a3:ed:e2:b4:90:da:3b:c4:a7:9a:
04:57:fa:01:17:e6:83:b8:30:77:50:e6:b8:93:95:
fa:ea:61:48:0c:6a:b8:3d:4b:59:72:55:3d:2c:c1:
49:82:26:fb:1f:f5:13:b3:ad:ed:8b:4c:bd:6e:3e:
cb:93:c1:c1:6c:a9:2b:3f:14:3e:9d:cb:75:d4:54:
e7:89:5b:c4:be:e3:e2:de:b2:60:89:1c:02:b9:f5:
0f:7e:d7:16:14:cb:c6:c4:c7:c6:f8:7a:a4:5f:ed:
da:b4:c9:37:ca:82:26:06:c0:b9:0b:4d:36:c5:23:
cc:bb:51:7a:f1:24:e1:97:64:fc:2b:80:25:12:b5:
f2:b1:76:d0:24:13:e1:f3:b7:e4:e2:12:54:5b:75:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:04:64:E0:CB:C6:E6:8E:DA:13:31:2D:7F:3F:15:B4:EC:89:73
X509v3 Authority Key Identifier:
keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:dc:ca:6f:fc:e3:d6:1c:fd:af:b6:ed:5d:73:24:b0:60:af:
5e:aa:2f:40:d4:ad:5e:be:18:11:79:9e:88:e1:2f:93:3f:b7:
57:cc:01:a7:fa:c3:1c:08:03:9f:26:a5:fe:1e:32:ba:0f:21:
e9:4c:c5:19:d2:49:58:8a:20:e9:05:7b:ad:7a:6d:75:c8:15:
2e:52:0f:f0:48:62:57:3c:20:70:9d:6e:cd:ca:67:b8:47:15:
dd:f0:9e:5b:97:4b:bb:a5:9f:70:53:28:34:be:aa:48:c6:50:
ac:26:d7:75:39:9d:e1:b4:a4:bd:b6:08:0f:8c:9d:f0:eb:ae:
7b:3d:d8:4e:e9:3e:8b:e9:d6:6d:14:11:f8:74:1b:06:17:3a:
c7:57:25:87:91:3b:f2:90:27:c5:fe:2e:2a:e0:5b:30:2c:e1:
96:3c:4a:01:34:d2:76:9f:ff:ad:47:5e:d7:bf:de:e5:33:bb:
3e:d0:09:f0:49:fc:eb:e1:c0:af:1b:4c:0a:7a:01:62:25:ca:
7c:42:f4:f0:88:3e:5e:ae:ea:32:dc:b6:83:46:5a:8e:90:94:
db:f8:6a:50:ad:ff:32:5d:16:f8:7a:14:d9:17:97:c6:a9:39:
93:c7:eb:2d:10:85:b3:49:8d:c1:66:21:02:7e:4d:33:73:1d:
20:4d:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:28 2025 by rpki-client