Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json)
Hash identifier: EJWd4Emnc9Brzxl/KUL2VfXZPi0nHr/og1PnCkpqWVc=
Subject key identifier: 77:5B:42:93:E0:0C:90:88:D7:5C:60:1B:74:C1:F4:F0:0C:52:97:01
Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Certificate serial: 0DF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
Manifest number: 0DEF
Signing time: Fri 31 Jan 2025 17:49:33 +0000
Manifest this update: Fri 31 Jan 2025 17:49:32 +0000
Manifest next update: Fri 07 Feb 2025 17:49:32 +0000
Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: 03kB/BGOsFENd2hZIdScgEcpdobjUBRSh6sClJu4Lvk=)
2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 9CcirKqxpdNHPxtXI8/MHTjJYP2t94IiPdFAh8Rx4sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3576 (0xdf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Validity
Not Before: Jan 31 17:49:32 2025 GMT
Not After : Feb 7 17:49:32 2025 GMT
Subject: CN=679d0d2d-bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:47:bd:c0:a5:0b:af:de:3e:aa:c0:78:09:
bb:e1:12:85:d4:56:cf:67:3d:8a:e0:33:7d:c1:cf:
3b:8c:e2:a1:03:d9:8f:89:42:39:f0:d5:2e:66:10:
6c:7c:03:af:5a:39:1b:94:28:ff:9c:1c:c5:48:32:
76:83:d9:b9:ad:45:63:8b:3d:b9:c6:a2:9a:32:86:
3c:75:bc:60:93:6f:de:82:20:3f:00:a3:ea:76:4f:
b8:e9:d0:01:f0:07:9e:a5:24:73:09:ac:e8:10:fa:
9a:3d:14:c6:cd:43:f9:90:a1:d3:83:07:c0:87:8a:
a6:f7:59:aa:9f:e6:32:4a:19:8b:55:ad:74:0e:5c:
7f:17:88:a2:30:20:79:20:f3:d7:1e:46:60:cf:76:
bf:de:73:ce:88:e6:9b:88:bc:46:61:1d:75:f7:2f:
8c:8e:58:7f:b6:7c:11:86:aa:d2:4f:76:ab:86:9c:
43:e2:41:2f:be:35:c3:af:88:f1:60:f3:e8:ee:94:
72:0e:22:75:c6:96:ee:71:70:0f:3e:d3:23:09:f3:
7f:ce:e6:7c:f8:1f:e8:6e:d8:23:b9:10:7f:99:4c:
6e:38:4e:e6:25:71:f8:57:a6:c5:fb:d7:b2:56:48:
a9:1c:20:18:a3:35:52:92:ef:92:b9:87:aa:1c:56:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:42:93:E0:0C:90:88:D7:5C:60:1B:74:C1:F4:F0:0C:52:97:01
X509v3 Authority Key Identifier:
keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:d0:22:f2:ab:9a:d5:88:ed:f1:65:11:bf:41:74:a7:8e:90:
2e:1d:14:df:11:50:6e:59:fd:d0:44:33:91:59:fb:19:d1:f5:
76:2d:c7:69:5c:e5:7a:ed:63:53:47:f0:6c:78:b8:a0:59:1d:
f7:8d:30:1c:95:28:9f:0a:fa:0e:67:4c:d2:d7:bf:12:9d:a0:
18:20:e1:7b:d7:98:3c:12:1b:89:98:8b:ac:e2:ab:3e:ca:a3:
78:df:91:d2:32:94:78:bc:8d:4c:a1:73:c3:67:e0:2d:11:a6:
f0:e9:57:a8:db:cf:80:3e:bc:0a:08:72:a8:cd:43:29:13:3f:
21:53:17:cb:e8:b7:6a:00:5a:a0:89:15:26:ef:f6:f3:fb:82:
09:47:60:62:e5:47:b6:b0:e6:8d:8a:d2:0e:94:1e:60:8c:bd:
8e:9f:91:97:0e:8f:44:9c:9c:29:0f:da:11:8c:4f:10:f0:7e:
3b:b2:46:39:67:65:ad:9f:24:bc:45:25:6e:b2:e0:1f:b9:b8:
aa:56:0f:d7:c6:13:0b:4d:43:61:3d:74:fb:7c:1b:fb:9e:da:
57:0b:8d:28:e0:9f:94:70:2b:8c:99:a8:41:a8:8f:05:71:2c:
c1:94:06:d9:c4:0a:d0:0e:1a:98:f9:ea:f6:7b:cd:d8:c7:de:
88:d8:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:48:22 2025 by rpki-client