Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
File: MoI4D1fWFw9Fz1IOeywaPNovyq0.mft (raw, json)
Hash identifier: yMVZVJV7Gllh0cpj63QojoGgq76WZjHEEX0lK/6Bv68=
Subject key identifier: F1:4A:AA:06:AA:8C:D9:CC:33:79:B5:08:B3:59:BA:A5:6E:CD:99:6C
Authority key identifier: 32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
Certificate issuer: /CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
Manifest number: 0283
Signing time: Fri 31 Jan 2025 01:41:11 +0000
Manifest this update: Fri 31 Jan 2025 01:41:10 +0000
Manifest next update: Fri 07 Feb 2025 01:41:10 +0000
Files and hashes: 1: MoI4D1fWFw9Fz1IOeywaPNovyq0.crl (hash: c5myNU6PkiHCxNpzOG3BF/XZrOFEvUbLxLn09GjLLqY=)
2: 7D857A30F11811EC86D3AD4BC4F9AE02.roa (hash: RY7IQ05ThI/6GtkKfLwI0St2mmRdLcPJ0ecThYjAydU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Validity
Not Before: Jan 31 01:41:10 2025 GMT
Not After : Feb 7 01:41:10 2025 GMT
Subject: CN=679c2a36-32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:a2:97:8c:2a:bb:66:4e:5b:0e:68:56:f7:
eb:58:74:fb:51:d3:70:6f:ed:3b:3b:70:c8:ca:f6:
e8:16:17:d8:d9:0a:8c:0e:09:af:f5:ad:58:ba:e6:
3e:59:59:43:36:75:48:d2:e2:44:74:26:f5:c5:8d:
52:9e:b1:65:70:4a:88:57:fe:5d:6f:21:a8:a4:83:
5d:76:47:21:65:70:31:95:f6:7b:79:59:95:f9:d0:
48:d8:d5:83:d4:f2:07:d2:14:7e:3e:1d:15:f6:e0:
d1:21:05:a5:c1:34:2d:9a:4b:61:48:62:0b:1f:b8:
e0:22:2e:03:57:44:08:f3:4a:65:9b:a5:9c:c2:11:
fb:91:ca:99:10:1f:88:40:40:23:5b:10:46:4b:00:
ef:f9:9b:b9:72:b4:7a:44:d5:c0:78:1f:2a:09:ca:
0a:91:bb:90:be:ee:21:fb:48:5f:6d:66:88:fb:f0:
77:52:72:90:e0:1d:00:be:12:91:cf:fb:eb:ce:45:
d1:1c:25:fe:67:bd:58:3f:9b:fd:99:4f:ec:3e:25:
4b:d8:73:8d:71:50:1a:a4:80:65:e7:63:b1:b8:2e:
c3:1b:ea:56:70:cb:a7:18:97:96:d7:1d:f7:d6:e5:
79:03:b0:94:bb:ce:fe:96:d5:fd:87:c3:10:6c:ea:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:AA:06:AA:8C:D9:CC:33:79:B5:08:B3:59:BA:A5:6E:CD:99:6C
X509v3 Authority Key Identifier:
keyid:32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e6:88:73:02:14:92:64:89:57:d9:72:af:31:6d:47:7b:e1:
bd:1f:43:4e:df:2d:00:40:51:ed:6f:9f:25:b0:b6:d3:ca:fd:
8a:75:2b:18:27:54:16:4b:dc:dc:1e:61:e7:f6:63:f7:db:5c:
6d:cc:6e:23:75:62:6c:aa:2c:5e:de:d2:e1:38:ec:1d:6d:7b:
81:bd:54:01:02:01:98:3c:d7:cb:d7:2b:19:77:fe:fb:6a:a7:
42:34:3b:fe:d4:69:74:14:9b:b1:db:62:f8:44:65:32:86:d0:
1d:cc:c6:35:09:f4:b4:af:7d:06:59:a0:a8:1a:0b:7c:91:e3:
fd:b0:fd:3c:b5:26:cb:44:bf:f2:65:3c:1d:f2:18:fc:57:4a:
74:67:4d:ab:23:23:81:cc:1c:c8:3f:bf:b2:0d:23:21:6b:ba:
19:74:69:3c:50:1c:27:83:ef:c9:9b:44:88:56:74:de:a3:65:
a6:06:2a:27:ee:f0:07:ab:bd:5d:bc:61:72:fc:71:e0:f4:37:
3c:13:09:fd:85:9d:63:f3:19:4b:c6:ab:b0:eb:e9:e1:da:51:
28:c0:f6:aa:72:19:d4:e0:e1:c7:9a:b3:4c:22:95:9f:b7:33:
43:59:c3:ee:89:19:a4:b2:6e:a0:ff:b1:31:94:a9:8b:d8:83:
35:37:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:15 2025 by rpki-client