Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json)
Hash identifier: nkczYyYSL5WvEOD0T0ZfT82dKoz4+4YQ+21NLbSHJA8=
Subject key identifier: AA:0E:DC:67:5F:5A:BD:E1:1C:87:E1:7A:C5:99:DA:B6:2F:97:10:02
Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Certificate serial: 0791
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
Manifest number: 078B
Signing time: Thu 30 Jan 2025 21:15:32 +0000
Manifest this update: Thu 30 Jan 2025 21:15:31 +0000
Manifest next update: Thu 06 Feb 2025 21:15:31 +0000
Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: uzl4y0gO3cDi+3SlkqVAVj+4XoB4VBOVm+0XT0Nrwqc=)
2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: AWPlkT/VPOlTrND3SaqX87pYECk2GQcIiP0u70mzoFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Validity
Not Before: Jan 30 21:15:31 2025 GMT
Not After : Feb 6 21:15:31 2025 GMT
Subject: CN=679bebf3-a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:96:f8:b1:a2:f6:f4:55:24:d8:5c:cb:50:
d8:01:91:81:b8:0b:a8:75:b5:89:49:e3:55:15:cf:
73:be:10:98:67:00:0a:80:b8:70:c6:5b:35:31:42:
ec:fa:a7:ae:0e:06:bd:4d:a9:31:16:69:a4:c6:d0:
0c:ef:e6:6b:a4:8b:78:2f:60:ac:c9:c9:e6:42:a6:
55:32:c4:05:81:f8:01:01:bb:e6:c8:ab:76:33:cf:
83:13:ca:39:c7:20:7e:c8:95:bb:9b:a6:91:b5:2f:
56:e2:5f:93:d6:68:7d:31:f6:ab:9f:cb:63:2d:a9:
4e:16:b6:c6:4d:06:71:08:88:39:a0:61:55:ee:a1:
b0:7a:66:b8:8e:6d:1a:4b:e0:62:97:c2:a1:c6:79:
5c:ef:87:c1:3e:ea:90:32:44:91:71:7d:e2:9d:10:
34:fe:a0:4b:ee:e0:06:be:1f:ed:f0:8d:3b:d8:8b:
ae:3a:ce:3d:75:ec:60:c9:4b:f3:90:e3:99:f4:36:
87:fa:62:0f:d0:27:fd:17:91:39:21:4f:e7:b7:7b:
b9:85:cc:7a:e4:37:1b:b0:65:ff:e6:58:0a:d4:13:
97:6f:d2:3b:dd:da:a8:08:18:1b:17:da:ab:61:4b:
48:cf:09:30:61:db:70:47:96:c8:80:17:97:ae:bc:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:DC:67:5F:5A:BD:E1:1C:87:E1:7A:C5:99:DA:B6:2F:97:10:02
X509v3 Authority Key Identifier:
keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:cb:a7:23:cc:95:12:33:68:4d:ee:a4:25:ad:74:e5:0b:
d8:5c:32:f1:34:83:5b:d0:0f:bd:60:fa:62:b8:4e:35:27:18:
10:00:07:da:7a:68:a3:e5:35:eb:f7:a5:bd:42:f0:bb:a9:56:
e8:3c:14:5e:74:34:19:61:a7:bb:31:f8:09:00:31:46:a2:63:
c6:be:41:c3:bb:c3:c2:4e:f7:95:62:75:ab:c2:75:a2:4e:c5:
ef:f3:6c:7d:d7:10:1f:dc:03:5f:d0:b8:31:1d:ed:16:e8:5b:
5f:d0:8f:dc:88:48:c0:9e:96:0d:9f:c1:60:94:26:3d:28:67:
a5:7e:55:0a:a1:3d:64:bf:dc:93:fd:6d:65:1f:f2:61:13:3a:
cb:21:b6:4d:45:a3:8e:7e:50:ef:80:f5:1e:b4:0b:93:59:19:
dd:9c:42:09:3d:1f:8b:50:c1:11:8a:6f:9e:ce:6e:fe:35:63:
e2:d6:09:cd:dd:28:bb:68:f3:5b:45:f6:a6:cb:2a:a1:89:0e:
ce:f1:c9:1e:05:5d:f9:17:4b:5b:2d:8b:60:20:05:75:f7:56:
de:1c:d7:16:a9:e5:82:90:4b:48:cd:47:88:0e:ae:68:f9:48:
7a:eb:8f:6d:00:84:73:66:71:08:88:f0:4b:05:d4:07:4c:05:
91:ba:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:17 2025 by rpki-client