Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier: D14/xcy2DssZXbGb+ZX4pg+1N2zMpQ0LHrByXfjO2yw=
Subject key identifier: 34:40:9B:70:EA:05:33:46:D9:1F:DB:98:A2:2B:B7:4C:F0:6D:C4:59
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number: 04C5
Signing time: Fri 31 Jan 2025 00:55:29 +0000
Manifest this update: Fri 31 Jan 2025 00:55:29 +0000
Manifest next update: Fri 07 Feb 2025 00:55:29 +0000
Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: 2/ynlPVPJXCRGpnwgVbiDKWyS8RQNFvJ2vQpsuMNv/c=)
2: AB292A3C96B011EF8A9EC651C4F9AE02.roa (hash: eUzKOnzodRDzVFKWz6xcp7yYmMqJ1ARfEQqiiBmISOA=)
3: 0DA17368C04611EF88E47357C4F9AE02.roa (hash: I/BJGM7p2pC/isjlezgIMmM4DcBeILkqp7Dz3CQKVuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Jan 31 00:55:29 2025 GMT
Not After : Feb 7 00:55:29 2025 GMT
Subject: CN=679c1f81-56e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:ff:52:65:ce:d9:dc:9c:38:56:43:8d:e2:
2b:f4:51:5b:f9:6b:65:13:d7:a5:1c:92:a7:80:2f:
f4:d1:58:78:b2:1d:af:c2:13:57:2c:ad:36:47:a0:
a4:6b:b1:3d:bb:74:6e:fe:a6:f0:75:5c:0f:2e:4a:
ef:bc:48:02:1e:3e:c1:dd:38:98:e9:29:c6:c4:f0:
e7:5b:06:97:06:be:f1:8d:cc:dc:4c:4b:4a:e3:54:
46:0f:60:25:dc:87:aa:f4:fe:04:28:60:44:30:90:
0d:13:6c:7d:9d:3c:90:3c:e1:a7:d2:8d:3b:af:58:
4c:32:8a:de:31:30:2e:b9:c0:8a:d3:cc:8a:70:c5:
41:0a:86:dd:c0:29:7a:81:9c:76:14:3e:b4:b2:28:
27:e9:54:96:63:56:e5:83:9c:8a:46:84:34:e8:17:
2e:e3:7b:af:4e:17:0e:3e:e9:97:53:84:35:15:b4:
6c:97:e6:31:ad:b2:c9:d8:2c:74:5a:f4:d0:56:40:
67:c3:d2:a4:21:56:0d:e7:85:d1:4d:99:5c:2f:62:
00:3c:5c:bc:bc:6f:f9:bc:2c:a6:4b:7f:36:29:08:
6c:6a:c8:c2:18:bc:3a:20:c2:fd:ad:2e:a9:93:c6:
cf:82:a7:c4:de:e7:48:bf:c8:b7:9e:6b:20:e2:a4:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:9B:70:EA:05:33:46:D9:1F:DB:98:A2:2B:B7:4C:F0:6D:C4:59
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0d:39:89:b3:e9:f3:b7:9e:0a:21:4b:05:93:4c:77:28:b7:
3c:31:c7:87:80:d0:ba:bc:a0:57:44:e9:6e:53:8c:5e:88:45:
d0:a6:f2:3a:55:a4:43:97:7c:33:46:a0:06:4b:72:e4:17:cf:
e8:5d:af:bb:49:48:53:22:f5:fe:b1:43:0d:83:07:17:ce:77:
cc:98:ce:6f:e0:88:49:cd:27:e9:f4:ab:50:1e:5b:10:4d:c5:
8c:68:f1:2b:7f:57:6f:a8:9a:ee:4d:fd:04:bc:d9:ee:8f:a6:
ca:ba:b2:bb:ec:f5:b3:d9:e5:29:7f:eb:99:02:8c:0d:ea:e4:
68:be:67:ac:61:59:a5:ad:bd:2c:7e:ba:d0:a0:bb:46:22:c2:
1b:1e:23:e8:7a:60:1c:73:21:e1:54:d1:62:2e:cc:20:36:4a:
b5:b4:c5:d5:6d:e9:8e:b9:29:34:1d:1e:18:76:80:32:b8:cb:
3d:a1:39:78:d9:43:07:6e:bc:35:aa:33:4d:77:00:75:02:e6:
1e:08:fc:23:78:d7:1a:b4:a1:9f:85:6a:18:a4:7e:6e:27:b7:
fd:3f:fb:23:17:d1:ca:d1:7b:2b:50:47:b5:0e:d2:df:5a:e3:
b1:22:c6:53:be:1e:50:f3:df:31:84:3c:99:53:ce:43:39:4b:
1a:9d:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:50 2025 by rpki-client