Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier: XdrHlVIk8ntmuq9hp5OqX82DIYisZIWZtKu2cJP8Xv8=
Subject key identifier: 81:92:EF:DA:A0:FF:B4:E7:5E:BC:AF:04:72:01:54:35:7B:E0:FD:09
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number: 58
Signing time: Fri 31 Jan 2025 06:09:56 +0000
Manifest this update: Fri 31 Jan 2025 06:09:56 +0000
Manifest next update: Fri 07 Feb 2025 06:09:56 +0000
Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: Hh5Nw9v6nbJgy20Oa00JEL5MHmTMy1AVzgqton+HFLU=)
2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: tNd1A1Pa4JpDSAJTUxSzKVvWvdR5TDXaWTiFNabeiYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Validity
Not Before: Jan 31 06:09:56 2025 GMT
Not After : Feb 7 06:09:56 2025 GMT
Subject: CN=679c6934-51fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:b6:b8:1d:6a:bb:e7:91:d8:92:15:79:a7:
8e:b1:9c:89:3a:c1:b4:01:65:c3:a6:a6:7b:50:a0:
c3:8f:41:df:a3:2d:a8:93:cf:70:ec:69:42:61:d4:
9c:0b:da:cf:56:3e:71:ab:2c:83:27:1c:3f:5b:75:
0c:8c:97:00:7a:81:c7:14:f4:29:f4:e0:a0:84:52:
e2:5a:f3:67:fd:ab:1a:c4:46:ca:e5:84:71:96:3d:
8c:4b:a9:77:94:ed:33:98:46:3d:78:fe:6c:21:cd:
43:4a:78:76:80:b2:bb:9e:8d:71:c5:34:b5:34:9a:
99:db:32:0c:91:80:79:29:d2:4c:01:16:07:91:be:
c4:7e:5b:5d:08:55:a3:96:46:ec:6a:97:9b:46:97:
a2:72:1a:8f:89:2d:aa:55:0e:f1:26:0c:3c:b5:07:
22:b5:48:8f:83:10:8d:d3:2b:57:00:ce:f8:90:43:
87:8b:97:58:ed:fd:71:f9:e5:9f:98:26:c7:a8:86:
e7:d5:00:14:4d:2d:6b:f7:e6:ba:90:fa:04:6d:32:
c1:e7:03:6c:38:3b:16:2e:6e:c5:4c:21:82:78:1e:
f0:56:66:1a:b0:eb:9f:27:34:42:a2:d3:7b:2e:b9:
5b:0d:e1:0f:78:a5:5f:34:78:a4:fe:50:e0:27:e5:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:EF:DA:A0:FF:B4:E7:5E:BC:AF:04:72:01:54:35:7B:E0:FD:09
X509v3 Authority Key Identifier:
keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ae:1d:aa:41:5a:1e:f0:3d:da:de:83:25:ae:e3:56:9f:a6:
9a:63:3f:6c:d5:20:e0:da:6c:7a:62:25:08:76:9e:d7:4e:5a:
3e:75:c2:fd:f7:39:22:1c:dc:17:0b:3d:d4:0c:f6:fa:a8:c1:
e1:6f:b6:12:95:40:86:e4:74:5c:fc:d7:80:68:25:ab:ba:71:
9f:d6:b9:bb:c1:cd:0e:ce:90:a9:e1:84:28:6b:24:bb:d5:89:
98:19:5d:c3:df:44:9d:a7:60:3e:70:b0:35:df:e6:d7:9e:d6:
ee:c7:00:c5:34:aa:5a:b1:c9:f6:0d:20:87:26:54:61:c3:2d:
15:a2:72:e5:b1:8c:d9:30:61:32:b3:ee:62:e4:ea:73:e0:cf:
cf:d1:03:08:6b:5c:3e:ae:16:58:b6:e5:8e:38:77:4b:36:97:
6c:d8:d2:cb:43:a4:05:c8:80:42:21:9c:4e:44:79:25:25:f6:
25:97:35:f7:a6:f0:b6:30:a6:61:9c:f4:58:6f:48:20:f0:e0:
d9:7c:fb:21:70:5f:d4:db:f5:36:6e:de:bd:44:42:e4:10:d0:
ee:dc:cc:3c:37:6c:2e:bb:f7:7b:c1:5f:51:fa:7c:18:8f:b5:
2e:92:05:08:08:21:bf:41:29:f4:25:cd:b1:35:42:d9:60:69:
42:85:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:03:13 2025 by rpki-client