Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier: neTydPJKVJHnTNZVHkMz+VI5jxUQIrbDJQkyVQqQu0Q=
Subject key identifier: 16:C5:FF:FB:A9:FB:1E:2C:7F:67:48:3C:BF:8D:FA:5D:0D:FD:98:03
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number: 0252
Signing time: Fri 31 Jan 2025 01:53:37 +0000
Manifest this update: Fri 31 Jan 2025 01:53:37 +0000
Manifest next update: Fri 07 Feb 2025 01:53:37 +0000
Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: O5DiNAAoc2cGJafDBFYfgjBfksiYn4ki1zCamK/AWJc=)
2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: UwAW7kcH5nr3Ub6tH3UV078TuKNxa/duHi/yChGrK6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Validity
Not Before: Jan 31 01:53:37 2025 GMT
Not After : Feb 7 01:53:37 2025 GMT
Subject: CN=679c2d21-5318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:a1:ea:b5:5d:f8:00:ba:91:4e:ea:03:97:
2a:d3:69:6e:d2:5b:f8:0c:6a:b8:07:78:93:dd:ff:
ac:9d:d0:59:7f:10:ff:ad:c5:40:d2:4d:a6:2b:97:
48:5e:8a:75:b4:ed:d0:6c:ef:34:72:00:05:57:e9:
3b:fb:a4:04:56:42:ad:77:27:7f:38:17:0f:37:11:
b9:05:95:77:72:10:2b:63:13:ee:9a:b4:4e:a8:9f:
14:67:ff:47:f8:0f:84:51:93:2e:67:7e:a1:f9:3e:
4e:4d:fd:0d:97:f5:d5:a3:0f:05:31:83:db:53:23:
41:7b:e6:db:09:29:bb:79:cf:74:44:49:75:3e:c6:
ca:3e:17:85:16:35:1b:a7:0c:dd:46:05:a7:ff:98:
b3:a9:78:66:c6:60:86:32:61:c5:6a:a6:6a:a0:8a:
c3:cf:59:b6:1b:95:9f:92:39:1d:f7:8c:03:b3:50:
1d:a1:5c:14:9d:f6:19:9f:90:e0:05:38:e4:9f:02:
44:aa:6c:89:82:f5:fa:43:c7:b6:3c:bf:bc:3e:94:
4b:9d:67:f7:46:bb:91:23:86:0e:3d:23:74:9e:92:
72:66:66:86:cc:4f:7a:18:87:ac:c2:14:1a:29:b5:
b7:4c:25:cc:55:d7:61:8c:a3:f6:01:6f:06:b3:94:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:FF:FB:A9:FB:1E:2C:7F:67:48:3C:BF:8D:FA:5D:0D:FD:98:03
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:01:72:a9:68:b0:d1:cc:19:ca:23:66:fa:f8:f6:33:1b:
8a:d0:8a:49:41:f8:6b:4f:53:9c:99:f9:fa:b5:4e:c3:ba:8f:
f7:f2:83:df:87:be:ba:c9:d4:34:91:ae:bf:24:17:a6:53:db:
0c:e0:d3:9f:20:0a:29:88:9b:be:f7:89:f2:4a:f7:00:47:28:
4f:ea:87:e3:37:35:8e:8b:aa:11:ea:a4:0f:47:0c:33:58:b5:
08:d3:cb:07:87:ee:dd:7f:98:dc:3d:0b:bb:84:46:ff:e1:b4:
6c:e1:d1:f5:96:8c:a5:8a:33:94:ce:e5:d4:ce:09:08:99:10:
69:8e:47:cb:4d:22:58:6d:1f:ea:d8:e6:f7:34:89:2b:64:8f:
d4:8e:69:34:97:fa:ec:3c:ae:56:ef:24:4b:e9:20:04:ff:ab:
ff:96:16:09:bc:f9:cc:c1:fb:73:bf:31:d2:95:87:8b:8b:0a:
c6:5e:d8:de:c1:bc:23:9e:43:d3:f8:df:0c:f5:04:58:1b:ec:
93:4c:a9:bd:b2:fa:ef:be:2c:38:63:66:22:51:46:0a:22:af:
7b:04:e5:63:13:c7:bf:e2:09:65:15:e5:fb:3b:02:bc:d3:39:
19:74:bc:44:b0:ae:25:3b:56:1c:f4:fe:44:e5:99:de:4e:c6:
78:82:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:40:37 2025 by rpki-client