Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier: B5VbPoUd38tIuC8nA/3DS/wva2m9qTxbebRHibF65MY=
Subject key identifier: 0E:18:A4:55:ED:56:C0:08:20:8B:FE:F9:DE:93:0B:12:E0:BC:29:08
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 33CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number: 33AD
Signing time: Fri 31 Jan 2025 15:23:54 +0000
Manifest this update: Fri 31 Jan 2025 15:23:54 +0000
Manifest next update: Fri 07 Feb 2025 15:23:54 +0000
Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: hMsOgA+a5wtChbYgFUGdifSk302GTe174rJwskm4tz8=)
2: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: CVWZvuJMAyjtpzrMYgtcHwOIm2n01TzT8z4GiPVYHFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13258 (0x33ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Validity
Not Before: Jan 31 15:23:54 2025 GMT
Not After : Feb 7 15:23:54 2025 GMT
Subject: CN=679ceb0a-741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:73:83:5a:65:55:33:30:db:66:eb:25:47:
9c:d5:6c:73:e2:b2:0c:d1:ed:31:32:a7:46:d9:d5:
3f:38:7c:a9:94:e0:96:71:21:3e:49:5e:d4:b4:ff:
32:e2:c4:40:23:bc:39:4b:06:2c:2a:e6:57:79:aa:
e2:93:0e:4c:46:65:6c:81:8d:94:cf:fa:79:c9:0a:
fc:ed:6b:7e:b0:a9:42:74:02:88:ae:00:47:21:e8:
6c:16:47:69:3e:2a:8c:6f:02:13:9e:90:63:8c:88:
ed:06:86:a8:56:56:05:d8:f4:76:2e:2e:0b:be:1a:
d8:4e:7e:66:d0:9b:21:68:0c:b8:93:21:a1:1c:8b:
04:cf:c6:46:9a:5e:88:11:42:66:26:74:77:4c:af:
da:54:5b:e6:43:d3:c6:4d:3a:e8:56:82:6d:66:d2:
b3:c4:59:b6:37:2a:f0:23:59:f8:eb:7b:9f:9b:58:
a7:d9:bd:90:db:9f:95:3f:7c:db:2c:8d:19:a6:80:
00:81:be:03:82:94:33:e0:62:c3:24:67:3f:b3:34:
16:fe:42:1a:51:e4:08:73:de:3c:1e:b3:11:d2:c5:
30:b1:04:fd:27:83:29:63:44:22:de:24:51:12:e6:
11:44:bb:a6:0f:c6:58:4c:65:91:ce:01:08:79:5c:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:18:A4:55:ED:56:C0:08:20:8B:FE:F9:DE:93:0B:12:E0:BC:29:08
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2e:bb:0c:40:37:52:71:3b:c5:65:67:48:2f:f8:a4:84:a3:
bf:3b:5a:37:36:51:d0:8f:c9:d2:18:a8:9a:64:bd:2e:8e:3d:
67:ef:c0:b0:0b:59:9e:3f:cd:fd:7e:54:ca:50:d7:b2:a3:08:
82:9b:f2:82:8b:9a:bd:fb:12:71:d7:1b:be:0d:f9:73:d5:07:
30:ef:35:ad:0a:37:2d:d4:4a:5c:72:1e:81:2d:f9:28:0d:b7:
41:56:16:23:da:70:64:84:c8:a3:62:cd:36:3e:0f:73:1c:a3:
9e:0c:47:ce:db:33:7f:b5:77:b0:72:a1:1c:a4:12:29:18:be:
cc:e3:a3:50:c6:e8:62:a0:9e:76:11:8e:7d:2d:80:0f:cd:51:
cb:57:26:08:b7:19:b0:48:2b:22:ae:ed:91:02:f7:19:44:63:
a4:9c:07:e6:ad:ee:ed:cf:be:c0:ef:82:82:1a:6a:08:ff:91:
b4:23:e1:59:09:ff:a2:d2:69:be:76:e8:e3:7f:e6:66:2e:1c:
6d:77:e2:31:93:96:b4:f2:6e:4b:3f:84:78:63:a3:0d:a7:32:
6f:07:0c:9b:87:67:b6:a4:1a:eb:da:09:ac:f8:8e:f8:83:98:
7e:08:f8:ae:f4:f4:ed:4f:61:ff:5a:da:9a:11:11:34:d6:87:
52:25:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:16 2025 by rpki-client