Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier: kJod0cErkQ0isJqmM8QeIS3radmMeDl8beZ3pGXrNO0=
Subject key identifier: 0F:C4:A5:B6:41:BA:5D:68:5E:1B:02:E1:F7:F2:69:FA:B9:B4:70:89
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial: 347D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number: 345D
Signing time: Fri 31 Jan 2025 15:09:17 +0000
Manifest this update: Fri 31 Jan 2025 15:09:17 +0000
Manifest next update: Fri 07 Feb 2025 15:09:17 +0000
Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: KRWcJSrGBdCrrljdqIm9/xbtBqqXWTLSF+rJsPADQBE=)
2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=)
3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=)
4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=)
5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13437 (0x347d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Validity
Not Before: Jan 31 15:09:17 2025 GMT
Not After : Feb 7 15:09:17 2025 GMT
Subject: CN=679ce79d-265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:ed:8b:9c:d8:2a:f6:0f:3a:a7:95:59:82:
16:fb:05:33:75:2f:9c:f1:fe:4b:b2:ee:cd:67:e9:
2a:01:e9:20:02:ea:47:06:35:36:7f:24:2e:9c:3f:
76:76:2d:c5:d0:d7:61:7a:f8:7f:ff:7a:4b:38:0a:
da:f1:f9:93:27:df:4a:36:f9:e1:a0:32:70:19:bf:
e1:76:0a:75:5a:e8:2e:e3:e1:1a:c7:ad:fe:9f:c9:
de:69:42:b3:7d:ed:b8:e5:b1:27:b1:25:30:c2:23:
d8:91:c5:b0:85:eb:73:5a:0f:e4:bb:95:5a:1f:fe:
ff:eb:98:b4:ba:1c:92:ed:1d:2c:a7:48:5a:1b:80:
26:8d:17:76:40:4f:5b:81:db:29:80:56:0f:4f:7b:
b1:3e:09:45:1e:dc:79:aa:ab:84:de:fd:e4:34:71:
fb:c5:ce:26:68:d5:46:ae:d6:f8:55:e9:92:6a:44:
ba:4f:fb:f6:1b:cc:ff:58:f4:39:5c:2e:a4:e9:4d:
2d:70:d7:b1:f9:2a:e0:69:56:29:53:c1:dc:e1:da:
fb:48:b2:91:82:1f:89:2f:2b:4a:94:77:12:f0:30:
93:f7:31:99:ae:0b:b4:26:f0:02:f9:72:4c:92:01:
7e:1a:fc:dc:55:96:23:32:0e:ba:2b:8f:60:23:16:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:A5:B6:41:BA:5D:68:5E:1B:02:E1:F7:F2:69:FA:B9:B4:70:89
X509v3 Authority Key Identifier:
keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:50:2e:fb:bd:50:13:6a:43:71:bc:05:b9:e0:85:c7:44:
75:1d:2a:ce:db:d5:46:1f:73:a8:d8:5e:5a:e1:a7:d2:90:09:
f8:22:30:8e:8f:4e:f0:e2:35:24:d8:2a:53:ed:e7:f7:ec:7e:
1a:f8:ca:58:6a:29:cc:e2:b8:81:ee:f4:56:68:1d:73:17:85:
ee:eb:ec:81:5b:28:e4:74:af:3c:79:a0:80:79:aa:8c:53:02:
91:d6:7f:64:fd:db:f8:d9:17:2a:ef:58:08:2c:10:7e:43:b4:
3e:36:eb:1b:3d:f0:7f:f7:28:ea:17:33:29:d4:92:e2:f4:41:
21:a1:91:57:b8:4c:e6:ab:99:83:c5:df:83:fb:26:4c:c9:d4:
20:ad:e9:e1:f4:19:98:11:3f:8b:4a:1b:33:55:44:04:bc:34:
51:a9:7e:ac:58:38:bc:4f:82:91:46:c2:21:8f:3d:b5:23:0f:
c0:14:8f:70:25:e9:ac:ad:41:ab:57:14:e2:aa:0d:93:3b:14:
29:9c:a7:8c:f3:9a:a2:cd:88:65:d4:ca:bc:8f:6f:01:01:ad:
a5:4b:79:31:94:c9:bd:37:e1:f1:f4:1f:4c:62:55:e3:25:87:
ab:e9:19:cc:40:ca:e2:f8:ec:08:e9:f5:03:d9:fc:9a:a7:f7:
25:b6:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:50 2025 by rpki-client