Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier: u9I8OGTT1i/jgIoMzYx78gk1XrBN5La/7sFD0Rlc4kg=
Subject key identifier: 27:0B:14:2E:DC:1C:3A:07:45:25:F7:3B:F8:AC:79:44:A5:A2:03:81
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 08BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number: 08B6
Signing time: Thu 30 Jan 2025 20:33:01 +0000
Manifest this update: Thu 30 Jan 2025 20:33:00 +0000
Manifest next update: Thu 06 Feb 2025 20:33:00 +0000
Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: PpP9WIzrZRtYqV+swCXm0gI2WkcN9psG4k6zIIUbndo=)
2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: 3Ir1IuKRfOTCPGTcqkNhUsK0tdvw53ia+7U41pr4LNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: Jan 30 20:33:00 2025 GMT
Not After : Feb 6 20:33:00 2025 GMT
Subject: CN=679be1fc-4526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cc:09:15:e4:0e:63:06:75:be:70:86:c2:f6:
88:aa:df:c1:76:7d:11:2b:18:8c:99:02:31:77:49:
ca:4e:01:68:39:4e:11:99:33:70:e7:7d:29:19:68:
36:3e:97:60:c5:b8:95:cf:ef:71:52:63:5f:25:45:
5e:d8:4b:f9:c3:70:f2:a4:eb:b2:c5:9a:c1:41:38:
65:8e:d4:56:6f:aa:83:a2:6b:d9:b1:bf:c4:6b:c3:
31:95:51:78:9c:88:d4:4a:48:47:97:82:7d:d5:70:
a4:ab:33:92:6c:96:bb:5d:29:c7:df:90:35:1d:8e:
c6:f3:2d:4e:e8:84:e0:62:9c:de:6f:9d:88:4e:0e:
9a:61:53:5e:e5:56:99:d4:2b:90:dd:1f:c4:9a:47:
55:a8:a8:49:ae:87:bf:90:af:f5:b1:a3:97:36:7c:
2a:36:de:52:d4:40:2f:41:c8:8a:a9:a6:a0:7b:be:
01:84:62:4d:43:4e:35:da:e1:79:a4:88:a0:5f:ce:
17:07:94:92:cd:6e:0c:8a:8d:a6:fe:1a:b6:39:cf:
40:48:c4:26:c0:af:86:ec:b8:d7:33:8b:b0:9b:18:
26:4a:dd:88:81:1d:da:ee:b2:b6:d1:e4:03:bd:5a:
c1:7f:a0:db:2f:a6:b0:13:06:b4:c5:2d:3d:01:11:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:14:2E:DC:1C:3A:07:45:25:F7:3B:F8:AC:79:44:A5:A2:03:81
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ea:2e:39:1f:52:01:11:25:1c:bf:4b:45:08:1c:bf:44:93:
86:75:6a:f8:5c:38:3a:e7:65:f2:3e:ce:00:95:01:f5:8e:6b:
3a:92:80:c9:0e:25:4f:5d:7a:b7:f9:c9:7b:c4:54:69:fa:8b:
6a:92:2f:f7:ea:2f:66:e5:82:e3:45:6c:44:40:4b:72:72:ff:
c8:66:3f:54:9f:94:25:94:cd:8f:aa:e0:b8:0d:a6:93:55:d3:
22:d4:53:6f:d0:67:e0:0d:4e:5d:35:a2:3d:86:29:84:7a:32:
92:26:2b:58:79:25:89:b2:46:4d:67:72:c6:25:e8:62:bb:73:
9e:8e:10:06:3c:c3:02:f6:3d:4e:6f:4d:55:84:8a:45:61:6a:
32:d5:b9:7d:83:16:63:af:ba:87:c6:55:5c:a9:1d:3e:f0:f9:
3f:c2:92:2f:95:5d:4b:eb:17:32:59:a8:08:36:8a:ee:9b:e1:
07:a0:2a:5d:04:00:36:f2:ce:9c:af:bf:aa:ce:2d:ae:f8:54:
9c:11:40:d0:f4:4e:e3:b0:e0:5e:ac:06:24:48:ec:7f:1a:72:
b1:2f:ed:fb:c0:a5:ca:36:54:5d:27:1e:28:a6:b7:43:3b:cb:
56:b2:2d:15:51:f8:bc:a2:50:cd:92:d0:4c:b6:07:07:56:2c:
c3:64:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:27 2025 by rpki-client