Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier: cM+Smnse+L/X0M8pfjce39nXAzuBSM7iCoczK6uLFBk=
Subject key identifier: 0F:92:3D:1B:27:FB:DE:05:66:A6:49:2E:F7:8C:A0:9D:08:0E:32:1F
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number: 016E
Signing time: Fri 31 Jan 2025 03:07:37 +0000
Manifest this update: Fri 31 Jan 2025 03:07:36 +0000
Manifest next update: Fri 07 Feb 2025 03:07:36 +0000
Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: /suS/wqZzk1UR1gUulE5piawEXsH1ECSAitnQXHnYaU=)
2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Validity
Not Before: Jan 31 03:07:36 2025 GMT
Not After : Feb 7 03:07:36 2025 GMT
Subject: CN=679c3e78-17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:8e:89:00:8c:59:f6:d2:93:e8:9a:60:d5:
75:68:4a:bc:6d:87:63:42:54:4b:40:9e:40:9a:15:
74:86:fb:9f:5e:64:c9:a8:e1:6b:49:5c:05:3a:fb:
c5:3c:5a:95:d3:00:57:9b:35:c6:9b:69:5c:68:f8:
7d:60:ce:2a:c7:c2:88:01:d7:9c:62:f1:e1:85:ae:
80:53:66:a3:bf:da:b4:4c:e4:21:f0:c5:19:8f:e3:
31:2e:57:6e:5e:e3:a0:4f:76:a8:bb:85:13:b6:c1:
e8:33:ca:9f:f7:e8:23:1c:48:f2:9f:d7:1f:0c:d0:
b2:6c:0c:e2:99:6d:84:ab:71:a9:2e:67:a4:ea:76:
e2:7a:93:75:39:8a:a3:9c:5d:7a:45:dc:a4:c2:2c:
67:74:a6:9d:98:3d:f5:c0:89:1d:5c:ab:da:f4:af:
02:0d:16:1c:22:aa:e8:a8:c7:54:56:37:8a:c2:58:
47:b5:84:fa:8b:f9:c6:15:a1:1d:a7:c8:ad:9c:3f:
f2:94:a3:ac:5b:6d:fa:71:e7:2c:64:11:b0:77:6d:
b5:04:62:97:77:af:6a:85:09:0f:90:0c:36:16:61:
1a:5b:17:16:56:7b:18:cb:26:f8:07:58:2e:be:30:
98:96:56:3d:51:b5:47:07:4b:84:76:54:3d:27:25:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:3D:1B:27:FB:DE:05:66:A6:49:2E:F7:8C:A0:9D:08:0E:32:1F
X509v3 Authority Key Identifier:
keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:15:c3:2e:95:92:b1:3c:d3:a5:a0:17:13:a5:61:62:88:fe:
40:14:70:7c:51:8b:b9:1f:1f:94:b2:48:ff:84:08:12:81:55:
82:43:25:d9:f1:b5:fb:06:94:5e:c4:95:17:75:96:4f:75:a2:
5f:3e:d8:4e:0d:fe:63:b9:b9:a5:fe:37:b1:83:40:03:d5:38:
25:21:09:54:bc:e0:3e:dd:39:8b:a2:7b:80:54:56:4b:ef:eb:
b9:04:d6:c8:7b:50:93:c0:e3:15:3c:bb:3f:fc:17:20:b5:84:
f9:cf:df:90:75:8a:39:bf:a2:d1:05:ba:01:77:75:3d:71:bb:
29:6a:b2:4f:67:77:69:66:06:5d:91:5d:14:d3:1a:89:2b:46:
4a:4d:b4:a5:12:c3:c1:dd:d8:56:9a:82:ab:70:ef:f9:d5:4c:
95:a6:12:11:e2:49:02:c8:37:1c:fe:0a:92:f9:ac:c9:38:a5:
04:d5:f5:90:8a:a7:18:10:77:10:da:6e:de:6b:2c:77:03:35:
31:b8:b8:9c:27:7b:ab:e2:3d:64:3b:a1:ef:d0:68:0d:9b:f6:
6d:c5:64:ab:29:99:ee:9a:65:18:24:8e:ae:ab:aa:ac:73:62:
0b:57:69:d5:d7:63:b6:14:10:7c:66:4a:aa:ed:aa:3d:b3:a7:
95:12:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:20 2025 by rpki-client