Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft
File: 1AI0WEr2BZHzfdP7on68uFzHZWo.mft (raw, json)
Hash identifier: ZgViMt0s6K/QynUSmHdimyWN6nPf7eJ9KxqkL5kNKUI=
Subject key identifier: 4C:9E:C2:0F:69:94:08:B3:01:BE:4C:F6:9A:F5:DF:97:8B:53:DB:91
Authority key identifier: D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A
Certificate issuer: /CN=A91E27F3/serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A
Certificate serial: 3458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft
Manifest number: 3453
Signing time: Fri 31 Jan 2025 15:09:24 +0000
Manifest this update: Fri 31 Jan 2025 15:09:24 +0000
Manifest next update: Fri 07 Feb 2025 15:09:24 +0000
Files and hashes: 1: 1AI0WEr2BZHzfdP7on68uFzHZWo.crl (hash: TWjzyXU9VtYLFZhsJbzInmdx3RkM4lMrq/MDyQY1txc=)
2: 1B4B4FC2152F11ECB72E546FC4F9AE02.roa (hash: 08icoQFu/lUzJ7/49iluwBG/IFFfyhiQgRTkubc2rPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13400 (0x3458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E27F3/serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A
Validity
Not Before: Jan 31 15:09:24 2025 GMT
Not After : Feb 7 15:09:24 2025 GMT
Subject: CN=679ce7a4-8fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:85:d3:50:76:7e:d9:7d:77:d0:b0:03:36:
87:49:50:45:61:0e:b2:6c:96:9a:19:ad:25:ad:89:
72:c7:d7:8c:f0:7c:4a:e1:ce:ee:d0:cf:cd:18:54:
82:8d:de:38:e9:4c:46:42:32:4b:e1:04:4a:ba:d8:
36:90:c3:36:57:a0:4b:66:07:08:dc:78:5f:11:09:
21:98:01:00:f5:42:96:2b:9b:88:e0:51:28:13:18:
15:d5:72:bd:d0:77:ab:99:62:95:17:39:7a:a4:fe:
2c:69:a5:42:f3:2b:0e:38:21:43:4d:6a:c9:c5:1e:
19:89:c5:01:29:59:8c:77:60:95:79:46:2b:ab:f7:
56:85:e6:38:16:2d:ac:51:e0:2f:1c:cc:24:19:ad:
79:0b:1a:3b:f5:fe:dc:03:86:bf:b9:15:0e:6c:f1:
6e:dc:88:c8:ab:57:21:14:da:97:d9:18:fc:9e:42:
07:52:38:9c:be:f2:07:f7:0e:cd:51:e5:b7:16:cf:
2d:e7:ec:d8:9a:30:9d:1d:f5:37:29:f5:4b:0c:60:
e9:6e:21:e0:18:08:ce:d3:2c:f8:ff:6d:80:46:7b:
8c:f1:a5:35:b7:f5:13:c1:cc:e6:c5:cd:2b:a0:9d:
95:06:01:4e:ea:9d:bf:89:64:66:e4:f0:81:09:5a:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:C2:0F:69:94:08:B3:01:BE:4C:F6:9A:F5:DF:97:8B:53:DB:91
X509v3 Authority Key Identifier:
keyid:D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:c9:c6:87:10:4a:ea:ad:d1:d7:2d:da:6d:00:bf:99:46:02:
37:e3:0f:6b:ca:dc:69:a1:60:6e:90:d2:0f:a5:ee:a6:c7:a4:
fd:eb:75:29:4b:52:d1:7e:f4:c5:91:bb:8d:17:1e:30:9a:24:
cc:e4:76:e4:97:2d:6f:5d:dc:71:71:13:e6:72:3b:87:3a:f0:
a2:6b:94:13:c4:58:cb:8b:98:3b:81:89:c3:72:d7:5b:16:e5:
b2:73:e5:f7:59:b5:a3:e6:da:59:0c:b2:8b:c0:8b:be:74:5a:
83:02:ee:ff:06:10:ed:9b:3a:82:ed:94:a6:6a:ca:94:3c:c2:
b9:a7:7c:85:28:23:af:9a:c4:54:ac:1f:21:96:04:2d:40:fb:
c2:31:93:d3:f3:d2:63:3d:46:e7:25:b6:0a:c1:af:21:ac:84:
a8:a5:7c:1a:be:d0:33:9d:9b:4d:89:9d:9c:5e:17:c9:2a:d7:
07:e2:95:94:e0:01:17:c3:af:fd:a9:a1:d8:73:4b:9b:e4:25:
14:44:1d:9e:25:38:ee:2a:28:08:90:4f:cd:a1:6a:56:7d:1a:
9d:43:81:7f:05:43:0b:a1:19:13:21:34:b9:5b:02:f3:42:b7:
04:a3:67:54:50:c3:64:a1:9c:cd:6c:e3:a9:30:41:c0:15:b7:
08:23:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:01 2025 by rpki-client