Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier: FZkmwdRW0g9v/8CMF+p+8sfGitL/ibnzPbYoLA2wzbQ=
Subject key identifier: C9:1F:2E:FA:BF:83:4F:4E:78:2D:EF:97:7A:AF:76:60:24:7C:8D:87
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number: 26
Signing time: Fri 31 Jan 2025 06:51:36 +0000
Manifest this update: Fri 31 Jan 2025 06:51:35 +0000
Manifest next update: Fri 07 Feb 2025 06:51:35 +0000
Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: bUEtKaEFagZdy1yy/3b5SL3QqACJZsJ9/Dsx5khFSZE=)
2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: 5t/9vRDX7bOXj/AudhNlmGxZtmB+Rx0Lf8bwk6wLjkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Validity
Not Before: Jan 31 06:51:35 2025 GMT
Not After : Feb 7 06:51:35 2025 GMT
Subject: CN=679c72f7-12a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:05:39:cb:6e:86:d5:3c:1e:80:a9:ad:a1:
b4:bc:39:2a:0d:cc:0d:f8:1f:42:2a:dd:a7:77:47:
47:dc:a7:01:bf:80:1f:ce:c8:e9:9d:0a:ce:26:08:
af:87:8c:bf:cd:7c:76:78:a0:84:f0:2b:0a:2d:79:
de:ad:6c:4e:39:35:8e:d3:79:f1:28:49:f0:11:46:
81:59:26:b0:69:5b:1a:91:dd:37:9e:a1:93:82:b7:
05:44:36:4b:9b:33:c0:4a:7c:1b:72:fe:7f:9d:73:
01:80:6f:e8:13:db:de:48:95:e6:c8:c2:5f:04:e2:
50:e9:97:e0:fb:45:6d:a3:bb:bb:1f:af:d2:a2:e5:
ff:3b:91:64:47:03:3b:92:0b:6a:cb:f1:62:78:d7:
1b:3e:e0:06:9c:7f:f9:45:12:9e:90:de:48:ac:e6:
27:47:a8:da:a5:42:30:3d:d3:e4:13:3a:cf:4e:00:
0d:90:a7:4f:bc:ed:45:d9:c0:f4:6b:f9:10:45:e6:
ed:37:eb:be:45:0b:40:af:cf:bf:cf:03:d9:f0:1f:
70:4e:0a:16:79:03:dc:2e:5a:d5:a9:ed:6a:8b:15:
20:2e:c1:5b:4c:5c:92:c2:c6:ad:b6:83:5e:89:21:
59:b9:21:58:ff:85:59:b8:90:5f:7a:35:e5:f0:87:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:2E:FA:BF:83:4F:4E:78:2D:EF:97:7A:AF:76:60:24:7C:8D:87
X509v3 Authority Key Identifier:
keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:06:68:6e:d9:c1:6b:9f:d5:2e:06:a5:24:f1:01:46:68:65:
6b:a7:76:9c:36:4d:bd:0c:91:4b:02:d5:9e:c3:87:54:49:4b:
37:33:da:ff:07:6b:b0:a5:7e:db:74:30:2d:32:00:7a:bb:42:
36:fe:61:4b:7e:f5:de:1f:55:4b:a2:44:02:4b:fc:f3:8a:9c:
b6:84:00:2b:86:d3:4b:f7:73:d2:4f:56:31:bd:fe:a9:71:6f:
2d:24:17:6c:ee:fb:1c:b1:57:66:ff:64:a7:34:66:99:ab:50:
12:88:5a:54:20:60:27:0b:8a:62:59:4c:02:a9:bf:73:74:72:
3b:ef:86:a6:a2:41:80:cc:74:db:44:76:36:8d:7f:ce:ed:a7:
41:01:b2:cd:95:67:28:af:1f:ed:2a:67:68:ff:1a:86:a0:5f:
0f:1f:36:90:a8:56:95:44:80:b6:be:bb:98:65:66:c4:f7:37:
bc:9b:48:8c:42:d5:8f:6f:e5:50:45:94:97:67:15:8b:6f:93:
b3:4b:a5:38:68:73:72:74:74:50:47:3d:28:bc:ba:ed:ec:16:
a5:45:df:50:d0:e8:10:b1:07:de:36:4f:0c:ed:c5:b8:97:96:
63:6e:f2:40:dd:27:dc:9a:42:58:b7:a8:1f:9a:f4:63:08:71:
4c:35:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:06 2025 by rpki-client