Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json)
Hash identifier: 9C0invHs2ma+wRDdo5I7ebwDLUQKpr9VoDOREsbelzI=
Subject key identifier: E0:0C:8A:58:26:D9:D9:73:84:6F:19:3A:DE:4C:27:AE:F6:50:6F:2E
Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5
Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5
Certificate serial: 129A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
Manifest number: 1289
Signing time: Fri 31 Jan 2025 17:05:36 +0000
Manifest this update: Fri 31 Jan 2025 17:05:35 +0000
Manifest next update: Fri 07 Feb 2025 17:05:35 +0000
Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: EJ6YdlERzFrP023QOsnuIuHEdHJ1wGSeIJfaPBMDW+M=)
2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: SUqha04b2ntyDAUGFXYiqHZijUV69AXBCBCtIkXQ4as=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4762 (0x129a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5
Validity
Not Before: Jan 31 17:05:35 2025 GMT
Not After : Feb 7 17:05:35 2025 GMT
Subject: CN=679d02e0-b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:da:72:9a:18:ac:d6:cb:24:2d:6a:bd:09:
dc:49:75:58:87:eb:63:55:b8:59:f1:a2:87:e7:8c:
8b:f8:39:5c:37:a0:70:7f:95:cc:56:90:b6:e5:1e:
05:fd:1a:92:ce:df:8b:4b:e7:b8:78:64:65:85:ba:
d0:33:8e:0e:f0:4a:b9:13:f6:29:3d:9f:64:3d:b3:
3b:eb:fd:aa:3a:29:5f:f5:ce:6f:3b:01:21:57:68:
16:25:5f:8d:e6:d7:c1:08:5d:72:fc:59:5f:1c:ec:
0c:9c:6d:c1:89:ad:62:d1:83:f0:25:86:4c:38:40:
8f:71:85:84:74:6b:49:52:70:c6:4c:f9:c4:85:e6:
14:85:1b:ff:e5:86:8a:b8:13:8e:23:11:d1:09:9b:
b5:9b:2d:e0:46:3c:ae:33:27:12:52:4f:59:40:b6:
d9:28:40:f3:57:3f:54:d9:aa:3f:1b:0e:e5:5c:36:
e2:30:fe:e7:ac:f3:bb:68:40:12:9a:10:b4:c7:4f:
ba:c3:40:1e:6f:c0:34:8a:3d:3f:98:15:de:0f:ed:
cb:a1:12:9b:29:30:3e:b8:e0:07:3e:93:ae:03:64:
66:77:ec:0f:94:33:52:62:74:dc:bc:ed:ec:8d:4c:
c7:4c:1f:31:e8:45:b0:b8:24:9a:d1:45:33:7f:e2:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:8A:58:26:D9:D9:73:84:6F:19:3A:DE:4C:27:AE:F6:50:6F:2E
X509v3 Authority Key Identifier:
keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1e:53:73:87:0b:d1:e6:55:b4:25:b6:8b:d7:dd:e8:83:3a:
48:47:a0:b6:a1:ce:f3:3b:ee:83:e0:16:d0:32:b3:c5:6e:42:
03:bc:df:4d:6f:98:e6:3c:dd:11:c9:8f:4c:1f:1e:fa:14:71:
1b:bb:38:25:88:61:49:35:fe:70:c9:55:f2:58:a3:48:1c:20:
d6:f7:d5:e1:4f:06:f7:3a:33:2a:fc:a7:47:46:22:31:08:cf:
f8:4a:55:49:82:d8:59:c3:e4:36:34:35:3b:e5:de:ee:6b:78:
f9:87:37:ed:b1:d7:6b:f8:82:3e:27:ec:62:6f:28:0c:44:0a:
14:d3:2d:38:48:72:cf:57:40:af:36:c7:ae:c6:e1:a9:7f:9a:
8d:9d:64:a1:0b:d5:73:a2:18:29:29:e8:73:20:ac:92:12:e5:
11:c3:38:8a:d2:8b:80:67:4b:11:70:6b:c2:7f:5b:53:87:8b:
cb:ea:e7:10:77:91:5c:d2:7a:b9:07:c9:04:04:35:8a:87:79:
95:a1:da:a6:79:22:cd:36:1e:8c:79:a5:89:81:c8:e9:01:02:
9c:f5:44:ba:00:b3:fa:5a:be:e8:97:ee:e9:3e:d4:c5:8f:91:
48:55:fb:5a:f5:4b:59:6c:75:72:c7:3d:d5:2a:25:4d:ff:98:
73:0d:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:57 2025 by rpki-client