Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json)
Hash identifier: SCsXP7yUlzY6oPl5OdewiK510WFaqM9w4KaZrCgqwq4=
Subject key identifier: A9:62:07:5E:4E:FA:BC:FC:34:41:25:CF:19:D8:B2:97:73:F6:7D:31
Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
Manifest number: 0756
Signing time: Thu 30 Jan 2025 21:30:15 +0000
Manifest this update: Thu 30 Jan 2025 21:30:15 +0000
Manifest next update: Thu 06 Feb 2025 21:30:15 +0000
Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: vt+pRWCEMTz35SjCRO4oQAPq49Y58sOQAC21D38Ggyo=)
2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: a5Oqhzfh+WaBH67r7bDw9PUnq0IPn3kK+b8Kc7vybP4=)
3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: wo4sZk/2tDxvhuf03EBqImJmU7Tr8UCXxl6x1i7v+YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Validity
Not Before: Jan 30 21:30:15 2025 GMT
Not After : Feb 6 21:30:15 2025 GMT
Subject: CN=679bef67-8f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:c6:01:29:2d:b5:a9:df:fb:ad:43:52:fe:
37:68:0f:3b:58:5c:ed:5d:a9:b7:bc:3c:7c:de:90:
19:50:74:59:72:a9:2d:c3:de:6f:9a:78:98:73:a1:
8a:2f:75:2f:7e:4d:19:fd:2b:00:f5:ba:9b:e8:5f:
cc:59:39:f2:f2:75:1f:dc:cd:0e:9a:bf:ee:98:f0:
80:fc:df:d5:56:51:18:35:73:88:17:5b:98:c5:0e:
6d:c5:08:fd:b3:5c:eb:a4:bc:64:3c:11:a3:e4:64:
71:70:c0:12:00:8e:dd:1b:b9:20:db:e5:89:d6:65:
71:ac:1d:8a:01:93:2a:b6:be:56:e3:54:85:2a:1c:
af:36:37:20:b2:eb:e7:6e:73:6d:af:c4:0e:6c:c9:
be:e7:77:60:37:54:0d:ab:76:e7:e0:1b:97:54:f3:
5f:48:b6:48:92:52:f9:30:91:fa:29:84:bf:61:8d:
ec:dd:08:f7:e4:91:6b:24:b9:8a:5e:83:df:9b:64:
d8:a2:5d:6b:7d:38:75:a2:be:c7:c0:1b:25:4b:96:
9f:01:d0:ad:e8:15:fd:09:25:a6:77:88:dd:0b:28:
55:96:8e:e4:f3:04:18:0e:3c:0c:6a:57:45:31:60:
ca:61:06:25:90:45:7e:5c:b7:2c:89:54:c1:3d:28:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:07:5E:4E:FA:BC:FC:34:41:25:CF:19:D8:B2:97:73:F6:7D:31
X509v3 Authority Key Identifier:
keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ba:0a:2c:f6:ac:cf:22:07:3d:91:a8:15:94:86:1e:a6:50:
5f:d6:b4:21:6b:06:06:f6:a2:82:74:72:dd:1e:e6:69:ea:79:
8f:15:9d:69:27:83:30:be:73:9e:bb:ec:ad:bd:25:70:d4:20:
3a:aa:cb:17:17:df:4e:f2:81:df:f7:bf:a0:e1:0d:95:d1:ed:
a4:e0:7d:6b:17:7b:13:d3:a2:e9:a4:f6:38:29:42:09:d7:c1:
c5:83:a3:fe:94:85:60:5c:d1:aa:ac:87:27:3d:87:39:05:4d:
f5:2c:f2:b0:8a:4a:f4:87:8d:1c:05:d5:27:24:38:92:b9:06:
4b:d9:df:4b:eb:79:eb:0b:8b:37:49:04:3d:27:38:a0:50:b5:
d1:06:fe:6c:96:f0:0f:8e:5a:70:85:38:ec:72:c9:91:a4:34:
ec:44:e0:3e:42:aa:c6:a5:e0:1b:bf:77:53:c9:51:b7:3e:90:
51:45:fa:91:67:c6:b8:cb:96:88:b8:f2:4e:dc:9b:24:e9:27:
cd:a0:7f:fa:05:06:3f:86:cb:2e:12:a9:ae:64:d7:db:2a:07:
8c:fb:6d:d6:81:34:6a:41:61:d8:e8:81:b1:9e:14:3b:54:ad:
77:b0:69:b8:ea:8d:47:90:45:45:3f:5b:cf:2d:e6:d2:04:23:
76:00:26:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:35 2025 by rpki-client