Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: S4AjqqI0Fo9qeIfcbdTLQ3LkRQaSHjDwYZiJM6yBsEg=
Subject key identifier: FD:B9:9F:B9:FE:A8:25:69:1B:1E:77:4D:A5:74:B5:A2:42:23:F2:51
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 0648
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 063B
Signing time: Thu 30 Jan 2025 22:31:29 +0000
Manifest this update: Thu 30 Jan 2025 22:31:29 +0000
Manifest next update: Thu 06 Feb 2025 22:31:29 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: wM3fwr+9S85rOfV0V0FDj8KQQ56i5HF8XpntrMXjOYQ=)
2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: G+u8mwiapJexmo/rY6P7k5xS6TEMD9oyOlDerwWxLQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Jan 30 22:31:29 2025 GMT
Not After : Feb 6 22:31:29 2025 GMT
Subject: CN=679bfdc1-8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:ea:50:14:5b:03:e5:86:15:60:0c:fc:0c:
40:b2:e0:28:11:c7:d4:1a:13:20:78:3e:11:2c:7a:
61:a4:94:d9:35:f4:6d:ae:d3:db:8b:a0:7b:8e:d2:
9a:50:40:8a:c6:c7:cb:5c:da:20:6f:fb:b0:ff:82:
59:9c:f2:f6:4e:ae:6f:02:1c:9e:11:49:55:ab:46:
87:c6:16:ca:21:b4:b9:1c:c1:c1:ed:06:2b:35:06:
7c:f1:8b:22:f6:b6:32:80:90:96:ac:79:55:3c:39:
ae:16:76:c2:bb:4e:d7:09:ff:c0:89:39:39:80:2a:
da:f7:4c:19:8b:e0:e2:0e:06:33:b4:1d:8c:71:58:
6e:b0:b9:38:23:d4:d7:3f:38:52:8c:bf:c9:b1:2e:
d2:22:49:cd:bb:5d:ae:48:c5:59:d6:a2:00:b0:a4:
b3:3e:43:fa:76:a5:92:11:38:8e:e7:a2:96:8e:ad:
9a:df:c8:1c:87:2c:ba:76:b5:6b:33:5f:50:a3:17:
cc:06:e9:8b:7b:6c:62:02:8e:51:73:02:a0:1b:65:
cc:9c:69:63:73:1c:d8:21:70:ec:87:cd:c1:df:37:
c3:14:25:96:4e:d6:b5:3c:2d:1d:f5:df:ae:e6:67:
cd:3d:bb:1f:b9:71:a8:b6:ce:b9:2f:e6:f1:fd:c2:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:9F:B9:FE:A8:25:69:1B:1E:77:4D:A5:74:B5:A2:42:23:F2:51
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:d8:df:db:80:b3:31:ec:12:3b:f5:f8:a8:1b:c6:65:b3:01:
37:f2:df:97:e5:98:e5:c9:86:63:cb:3e:8f:a0:8f:de:e2:a2:
96:e0:f9:bd:a9:3f:e1:14:43:8f:46:8b:38:0c:2e:26:aa:99:
21:0e:e1:b4:d8:4b:9f:46:73:a1:48:e0:23:e8:a1:2c:a3:1b:
2c:de:23:a8:84:73:06:67:cb:99:ab:8b:6f:4b:d4:a8:ab:fe:
93:7f:93:f4:2c:07:9e:50:19:79:d4:1f:60:18:18:a7:b3:60:
4b:1f:ce:19:03:1e:10:04:f3:e6:c4:e7:24:65:c7:23:a4:ac:
b6:15:b9:82:17:d8:9f:06:3d:aa:61:57:6a:8c:36:42:27:6d:
63:91:f7:73:52:e9:af:da:8f:e6:78:5d:94:0f:17:3a:b5:aa:
14:30:9f:fc:25:85:06:7c:ae:c9:bf:78:5a:01:8d:7e:6d:6f:
1c:69:c1:4a:81:5e:05:3f:fd:f0:64:79:40:12:92:81:67:6b:
13:ce:a6:e4:ff:75:a2:f8:c8:72:2d:64:71:7a:aa:56:89:3d:
fd:d2:c7:01:9d:79:c0:d7:6f:97:0d:ca:ca:35:01:28:4d:12:
44:d4:ac:a8:c9:63:02:c0:33:93:f9:01:a9:e8:aa:a5:ae:f3:
49:62:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:46 2025 by rpki-client