Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json)
Hash identifier: iiYzvIInm4B5/jO64IfDsVc8QyPHEHfXdFZS0YpzFK0=
Subject key identifier: 75:6A:B6:8E:08:EB:6E:3D:A6:BC:30:3F:8C:00:4D:1F:68:87:F4:1C
Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Certificate serial: 1386
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
Manifest number: 136C
Signing time: Fri 31 Jan 2025 16:59:14 +0000
Manifest this update: Fri 31 Jan 2025 16:59:13 +0000
Manifest next update: Fri 07 Feb 2025 16:59:13 +0000
Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: +Xny7NHHPOVRimc4AIOs5b9aMkUiA1wbqpH3+0+qFgg=)
2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: 4Bdu5c7KiVJ8qwTifJfb8PRfm9Z4srlRbM1n/IceWaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4998 (0x1386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Validity
Not Before: Jan 31 16:59:13 2025 GMT
Not After : Feb 7 16:59:13 2025 GMT
Subject: CN=679d0162-1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:db:64:9a:9f:f4:6b:43:38:ca:39:78:6a:
77:3f:29:34:ba:3d:81:bf:f0:cc:36:1e:d9:10:89:
aa:43:08:b5:16:19:f6:fd:e3:72:da:84:3a:8c:08:
44:47:91:39:ca:a7:8b:94:33:20:8c:1e:09:d8:42:
a5:51:f4:d1:7e:cf:0b:4b:03:8f:40:f9:31:c8:cc:
4f:22:6f:fc:49:08:c8:28:33:06:35:43:c3:e5:16:
2d:41:3c:1c:50:98:98:0a:f3:d5:9e:95:6b:04:8d:
45:07:d6:e4:14:65:d5:03:28:90:a4:bb:8b:b9:4d:
5d:07:09:81:15:af:0e:85:d9:06:04:b8:e0:09:58:
7c:44:3b:4c:4f:ac:e0:58:b8:be:ef:35:f0:50:ee:
a5:e0:2e:28:3f:61:1c:f0:00:48:a5:a9:83:51:65:
0b:99:93:03:7c:85:db:33:df:9c:bc:e4:23:b4:22:
ff:f5:1a:77:ab:dc:e9:85:b3:76:34:46:34:75:55:
a9:3d:55:b3:1c:78:96:5d:ae:91:0c:7b:6b:fa:cc:
ac:7d:4a:13:8c:25:e6:84:de:17:e3:b9:e4:a4:69:
4d:63:1c:08:69:60:6d:34:4c:1b:01:fb:80:ac:bc:
8c:07:19:67:ab:2f:f3:b1:db:6e:a1:94:af:99:ce:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:B6:8E:08:EB:6E:3D:A6:BC:30:3F:8C:00:4D:1F:68:87:F4:1C
X509v3 Authority Key Identifier:
keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6d:0d:24:61:ea:3f:26:68:7f:12:54:0c:2d:78:2b:9c:dc:
bc:9f:19:4d:30:6f:90:99:36:df:60:c6:a4:f6:84:d8:8d:97:
e2:94:0e:52:ef:a6:5f:4d:e8:89:74:e1:ca:1b:6c:8f:f2:f1:
5f:e1:1c:d7:88:ce:ac:16:15:15:35:26:33:3f:c4:d8:cb:93:
ee:04:41:06:71:32:c1:14:94:1c:66:bf:a5:6a:cf:ff:98:4a:
91:74:79:b3:3c:96:9b:1c:57:01:b7:36:d6:15:1c:1b:d9:16:
de:3c:59:b0:1b:dc:a8:f1:67:b1:24:63:18:a9:81:1b:68:7a:
27:fa:a4:59:dc:eb:dc:81:b5:4f:20:01:22:ee:49:ae:20:f1:
b7:95:28:48:73:3f:45:6e:80:39:d2:6e:df:41:c9:d8:54:93:
5c:64:bf:cf:51:27:8e:d4:b7:11:da:1a:c0:5e:d8:52:ce:de:
a2:32:99:39:12:35:08:62:70:f4:e6:45:6e:60:ba:b8:7b:53:
8a:4b:f7:00:7c:c3:e4:6d:61:d0:59:a1:8e:78:91:37:cf:fd:
33:f8:99:83:17:b2:df:b8:31:b7:42:e0:f5:4f:14:de:3d:72:
aa:54:50:5a:35:5f:3c:99:b5:a6:8d:c6:35:cd:dc:73:96:62:
97:98:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:15 2025 by rpki-client