Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier: hgj/l4+1nZ6JD6imbgr8v/pQMaRXdBh81g9RZaY/i00=
Subject key identifier: 77:B4:D1:10:E2:76:72:AB:3A:8D:6D:DF:D5:17:AB:A2:D8:B4:7F:0F
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial: 0436
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number: 042A
Signing time: Fri 31 Jan 2025 00:23:36 +0000
Manifest this update: Fri 31 Jan 2025 00:23:35 +0000
Manifest next update: Fri 07 Feb 2025 00:23:35 +0000
Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: DpZi1B/SD2w29/NwjhBnbpGr5NmOt+ErwV6qABmivx0=)
2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=)
3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=)
4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Validity
Not Before: Jan 31 00:23:35 2025 GMT
Not After : Feb 7 00:23:35 2025 GMT
Subject: CN=679c1807-bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:ca:bb:9b:4f:08:7c:f1:a8:c3:74:39:e4:
21:2b:04:8f:cb:b9:88:4c:a1:66:5e:f4:ff:af:0a:
61:0c:39:ac:81:5e:53:9d:d6:5d:fa:dd:62:4e:aa:
8e:98:70:83:9d:65:a4:75:a5:b8:8c:1d:5a:fe:e2:
c1:ed:27:07:14:0a:99:80:13:47:e4:98:92:c8:bf:
6d:a1:81:33:fc:fb:11:45:ec:0d:e3:ea:5e:b5:af:
9f:c6:2d:db:0a:79:58:68:88:e6:ff:87:02:61:c8:
41:57:14:d0:77:94:d6:a1:c9:a9:ed:f4:e0:1d:0e:
d6:bc:4d:73:4c:1d:06:20:03:1b:93:16:d2:f5:b6:
96:52:70:73:88:42:a0:23:20:36:d6:1d:ed:e4:e4:
2c:19:05:fe:d5:fb:90:fc:95:18:af:bd:89:cd:3d:
d1:6f:c6:96:c9:03:ca:12:83:d7:f1:2f:ea:b7:a9:
08:bc:6b:46:ca:a1:cd:17:43:ba:82:9f:54:34:a9:
4b:07:ef:7a:1d:6e:e7:7b:95:d9:be:2c:39:28:d5:
53:35:b4:3c:17:40:10:91:04:c9:42:56:20:7e:6b:
2e:56:ff:7f:68:4f:99:29:af:cc:b7:16:31:94:ab:
08:1f:91:03:44:4f:2c:de:8b:ca:80:35:55:e7:e1:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:D1:10:E2:76:72:AB:3A:8D:6D:DF:D5:17:AB:A2:D8:B4:7F:0F
X509v3 Authority Key Identifier:
keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e9:5f:f0:84:62:a1:d9:02:44:51:15:72:8b:f0:a6:88:3e:
ec:69:ab:52:54:d3:c3:bc:f4:1c:0e:66:71:39:4e:96:df:70:
eb:e5:ef:8d:5f:11:77:87:4b:02:c4:44:d0:c1:b9:66:d2:6c:
ee:c2:c7:02:23:06:fa:f5:4e:ab:47:97:e1:63:bc:41:78:ba:
49:a9:a0:57:37:62:f9:fb:cd:41:5f:88:4e:6f:a4:b3:ba:e4:
67:61:2c:1b:c5:59:7c:f3:3b:5d:cd:1a:68:3a:88:4e:0d:64:
0b:97:72:bc:e6:58:5d:74:3c:1f:93:a0:21:8c:74:4d:55:42:
11:c1:e6:f0:35:ad:6a:6a:bb:ae:04:4e:9b:bb:d3:8e:4f:81:
ec:06:b2:ad:f2:6c:91:35:36:28:3f:8c:de:8c:b2:3a:73:b5:
9f:3b:89:95:ff:05:e7:35:b9:c3:1d:d7:78:1b:4a:9c:73:43:
bb:38:33:40:9d:e8:f2:93:b6:36:2b:71:c1:8e:a8:ef:80:5e:
49:2a:4c:9c:09:70:32:5f:95:86:6f:fd:1b:93:00:bd:5f:12:
fd:1b:e0:e2:a5:e1:2a:e2:83:30:3c:59:a6:6e:ff:96:ff:93:
8b:06:4b:00:ba:ce:1d:4e:b5:4b:c2:33:95:13:7e:a0:a0:0d:
8c:99:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:27 2025 by rpki-client