Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: NLT+mYn2ESFHxR6uAC1AuvHf8LFmM4no9fXunM72aw8=
Subject key identifier: 4E:1F:22:0B:87:74:56:74:20:41:87:DD:88:92:D8:78:84:DC:EC:49
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0B67
Signing time: Thu 30 Jan 2025 19:34:53 +0000
Manifest this update: Thu 30 Jan 2025 19:34:52 +0000
Manifest next update: Thu 06 Feb 2025 19:34:52 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: sQ/Rs21VPoxrH6pnMv/4hrk5lpeDjMWTc1vO7gKuluY=)
2: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: 5alAYtTxlTPz7H9FR7DrZV0C+EIeEapBMkQZSRp1vSw=)
3: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: BjCzz0QqHwxbtkMEhbZLyg/cdwLlVBOLsCIkoIImbyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Jan 30 19:34:52 2025 GMT
Not After : Feb 6 19:34:52 2025 GMT
Subject: CN=679bd45c-a63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:dc:50:04:eb:70:c6:00:13:da:20:03:aa:
d9:0b:30:cd:df:74:de:8f:56:cd:2c:c9:3e:8b:4f:
ee:cb:ca:95:56:1a:cc:99:d9:1c:f0:40:56:27:cb:
29:14:e8:97:a7:9a:9e:02:69:47:20:ac:13:3a:ac:
72:1e:83:0d:e5:92:0f:97:11:7b:ad:95:dc:20:f9:
8d:41:bc:70:03:07:b9:fa:98:be:ab:2d:7e:72:79:
a1:e5:17:41:d0:60:ce:bf:23:4b:41:01:50:54:02:
66:a8:a0:cf:74:45:33:3a:c8:44:6c:e0:2d:30:fa:
c2:60:90:6e:07:32:a8:01:97:c5:12:d8:4c:9e:24:
7d:03:2e:13:c2:8d:e7:de:22:d9:21:f7:ef:33:12:
48:b0:89:75:51:ba:27:f9:23:08:12:1d:dc:3b:ef:
7d:a2:6c:15:c7:4d:f2:69:03:44:d3:20:a5:2a:fe:
da:01:58:b8:f9:cc:27:6f:2d:f1:76:73:89:c5:42:
cc:28:eb:ad:b5:a4:c7:42:98:fc:0c:73:f2:b5:1d:
53:a0:58:d1:9a:89:3d:b2:8c:91:c5:30:76:b2:32:
b1:3d:42:15:60:72:55:32:da:6f:b7:fc:10:a8:fe:
70:d1:6c:0a:4c:8a:a4:4c:9a:8f:2f:79:cc:6e:58:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:22:0B:87:74:56:74:20:41:87:DD:88:92:D8:78:84:DC:EC:49
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:59:a8:34:95:65:23:ff:44:22:4f:f1:05:a4:e4:53:0a:30:
08:50:9a:a2:c3:a8:2c:66:d9:1d:4b:70:2f:9d:da:18:b6:cd:
14:7f:51:b4:cd:94:2e:85:5a:a2:01:c8:0e:71:78:f0:5a:4b:
4c:1e:ee:f3:6e:d6:6f:f5:d4:4b:56:79:51:4b:48:11:4e:a5:
fe:fb:e0:3e:a6:cb:30:a7:bc:61:a9:f8:e9:86:db:b7:6c:04:
c5:cf:3c:28:32:11:df:8d:68:7c:9b:16:39:e3:78:d4:2d:aa:
52:6d:34:12:b1:2b:bf:00:ac:92:07:49:a9:b6:58:71:4b:81:
cb:2e:ca:bf:78:c4:07:45:67:99:1a:e8:7c:e6:3e:84:ed:ae:
1c:47:cd:89:03:3b:e3:33:8b:f5:46:be:cb:a0:85:d1:36:b1:
6b:3a:3b:63:05:54:ce:77:2c:e5:58:ce:88:52:b2:e9:d4:fe:
7f:db:6c:ef:76:44:ae:db:6e:10:63:67:62:f7:9c:ea:36:6d:
60:41:93:05:fd:c9:f2:bd:1d:56:89:ed:50:f7:a6:9a:eb:c6:
db:b2:bb:74:94:9a:6b:dc:58:5d:f0:97:71:4f:41:a7:b8:ca:
94:81:bd:85:4c:5c:41:e8:a6:cc:53:2e:94:bc:d0:d6:9e:70:
2e:02:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:06 2025 by rpki-client