Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier: hAyg/tidQE+8t9oZ9VnDudcYglwr/Zou39Ay/puUBXc=
Subject key identifier: C8:2D:FB:31:D6:12:A2:F7:31:FC:63:42:F7:F1:3F:0F:1A:F0:55:FD
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 02:26:32 +0000
Manifest this update: Fri 31 Jan 2025 02:26:32 +0000
Manifest next update: Fri 07 Feb 2025 02:26:31 +0000
Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: KgWHokAd6nK8e2ydGQ/wZAe5gAN3K3e3gioAuJjbY14=)
2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Validity
Not Before: Jan 31 02:26:32 2025 GMT
Not After : Feb 7 02:26:31 2025 GMT
Subject: CN=679c34d8-eee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:a6:34:ce:ba:73:da:fe:85:03:cd:e0:3b:
bb:28:31:3b:3a:c3:02:74:b1:de:04:24:e9:cc:34:
3b:a1:55:3f:9f:e2:01:5f:93:61:ee:aa:4f:f3:3a:
72:7e:89:10:48:ca:58:68:10:e9:06:2c:12:1d:7c:
9e:8c:06:10:1a:c5:cb:6b:73:e2:58:7e:cd:53:ef:
e1:90:a0:6a:ea:28:6f:74:d5:59:80:55:c5:da:dc:
a3:2f:07:9d:aa:39:40:5b:42:3a:22:89:a8:4e:34:
6f:5b:ed:f0:16:e0:55:9f:81:d3:4a:bf:72:ba:09:
d5:b9:ba:38:d3:3d:3d:7a:3b:e0:b7:74:77:e4:41:
1f:ad:c5:41:12:5c:f8:19:5a:19:59:db:30:66:dc:
81:b0:a7:f6:31:e5:45:f8:c7:6f:45:24:00:fa:1b:
03:ee:16:27:e3:6d:26:a5:e3:cd:af:3f:8a:a2:bf:
80:fa:db:81:d3:b6:88:ef:0e:7f:50:f5:7e:12:7a:
a8:52:58:ae:ae:25:85:fa:de:35:77:80:a8:a6:e8:
47:76:b4:b3:2f:a9:56:06:39:2c:d0:0b:ac:5e:d0:
f6:a6:4a:08:c3:ae:3a:54:88:1a:90:b6:93:54:23:
89:a9:3e:60:04:70:38:c9:8d:9b:bf:db:4f:bd:18:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:FB:31:D6:12:A2:F7:31:FC:63:42:F7:F1:3F:0F:1A:F0:55:FD
X509v3 Authority Key Identifier:
keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:61:4c:f9:9b:f4:47:c8:c4:10:76:a0:04:a3:dc:67:07:5c:
c0:4c:eb:d5:11:75:4e:52:56:f8:1d:40:d1:cc:fb:f2:19:04:
15:0b:36:9d:d4:76:21:29:b0:b1:76:9e:ab:d5:cf:b0:6b:95:
2e:d0:ae:9f:87:68:50:03:1e:0c:50:97:53:02:81:cb:f4:25:
c3:09:03:1a:c1:9e:a2:e4:1c:7b:4e:22:a9:96:8d:c9:07:d7:
8a:a1:b6:7d:cc:d8:69:10:ed:e1:c7:33:a2:2c:34:d6:a3:19:
f5:42:b6:00:67:7e:c0:af:fb:8f:23:c7:a0:31:bd:a7:c2:6a:
63:e7:54:95:71:8d:d6:35:a4:48:3b:e6:d9:5a:ee:38:a2:46:
84:78:d4:93:e2:dc:ae:14:1c:41:51:04:36:15:80:29:c4:ce:
ab:05:fa:5e:24:c0:c9:36:fc:58:a9:8f:35:aa:1a:53:58:16:
86:bc:b0:c2:ae:3c:09:33:e6:a6:d4:f2:b4:cd:92:0b:6f:e5:
b2:62:70:51:ac:61:08:e7:d5:1c:0b:6b:0a:97:7a:8a:07:87:
aa:f4:86:ee:73:cf:36:c9:53:46:bc:f2:d3:03:ea:32:2e:83:
93:1e:1e:03:a8:4c:f4:70:7a:05:1e:80:f0:5f:3f:a8:ec:a8:
2a:2e:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:10:57 2025 by rpki-client