Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier: jsmRn45d+LI+G6Ok1AM7elvpbnNOXiRjhg4q1XEr0VA=
Subject key identifier: A8:6B:BF:6A:66:18:DD:7E:F6:7E:DA:75:04:E3:B5:B9:4B:95:0F:52
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial: 0307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number: 02F8
Signing time: Fri 31 Jan 2025 01:21:38 +0000
Manifest this update: Fri 31 Jan 2025 01:21:37 +0000
Manifest next update: Fri 07 Feb 2025 01:21:37 +0000
Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: wKZyvUUxQNFAjK0VEKzl/FoBIYixL6lX2w2w6i+6QwE=)
2: D6A35008C53811ECB4EAFD1AC4F9AE02.roa (hash: DXRFMF8bdI+xEZhxHyoxiCthhYzE370aKSk/PxBbVCU=)
3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=)
4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Validity
Not Before: Jan 31 01:21:37 2025 GMT
Not After : Feb 7 01:21:37 2025 GMT
Subject: CN=679c25a2-c84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:e0:8e:40:2a:6e:ee:58:36:69:ca:57:22:
44:39:6c:8d:17:7c:3c:f6:ac:e6:a1:bd:70:c0:41:
c4:ed:1f:d5:3f:bb:ca:cd:8a:79:65:61:96:53:f9:
40:e4:9c:4f:95:69:0d:df:d0:bc:1e:b3:57:ea:14:
df:a2:20:31:49:bd:0e:95:22:31:d9:21:8b:96:a4:
9a:91:c9:43:20:80:fc:34:93:5e:1a:02:3f:e0:7b:
1d:88:42:85:32:da:96:d6:3a:5b:81:c4:0f:0e:6c:
7e:69:28:74:1f:25:0f:fe:92:0a:87:92:6b:dd:d2:
7f:fa:07:13:24:cc:da:ff:f9:d4:af:4d:d4:3e:78:
fa:77:bd:8d:9f:c7:bb:d7:98:e3:09:4c:5e:3c:66:
6d:c8:ce:77:d7:79:09:3f:89:7f:0a:cb:8b:64:2e:
7f:1d:a3:d0:64:d3:ca:51:f3:c5:64:fa:64:5e:8d:
3b:1a:05:5e:8a:76:78:5a:3b:b7:cb:47:ea:24:73:
b9:d7:f0:10:0a:ca:00:c2:7d:d7:e5:c3:f0:dc:a1:
00:d1:d6:89:b0:51:66:eb:69:e3:4c:d8:cc:d5:4b:
f8:d3:74:39:9f:c4:d1:3a:94:9a:73:d9:b8:ed:bf:
5b:e8:b0:47:78:e1:01:fc:77:ca:23:1e:9e:de:14:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:BF:6A:66:18:DD:7E:F6:7E:DA:75:04:E3:B5:B9:4B:95:0F:52
X509v3 Authority Key Identifier:
keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:41:d5:d6:d7:a6:9a:05:81:b5:f6:ad:ec:2e:5a:5d:0d:0d:
9a:b3:71:fb:7b:80:fc:7d:8f:1b:e4:3a:42:36:94:36:a7:ac:
3a:b9:51:9f:31:ea:cc:26:17:0b:a7:15:5e:83:cc:99:e7:08:
41:6d:d2:5c:6b:79:69:28:2f:dc:6e:82:69:de:7b:f2:42:6f:
e7:6d:b1:2e:bb:56:6f:b9:93:c7:1d:f2:76:a6:50:6b:82:2c:
78:35:3b:71:08:c5:50:53:f0:ee:74:64:83:7a:dc:0e:0a:20:
bf:18:17:03:2d:c3:2a:c8:df:7b:4e:30:c9:2b:72:9f:d4:3f:
88:e9:17:7d:de:cd:1a:d9:20:2a:38:f3:ff:a0:d4:7f:f3:60:
78:67:eb:3f:11:bf:d4:d3:57:05:86:e3:3a:79:c4:fa:28:c3:
b6:b2:b2:e5:63:86:81:f9:78:22:4a:52:89:32:a1:39:ca:23:
4e:19:b0:fc:0b:23:ee:5b:04:e1:88:11:85:90:3c:ba:b6:0c:
a3:7f:94:f9:0b:df:96:ed:0b:f0:04:91:2b:1c:a7:8f:97:55:
b9:5e:10:d8:d9:86:29:40:44:79:a1:6f:49:58:b9:9f:48:9f:
8d:70:90:9b:ff:1a:d8:b6:dd:d9:74:eb:ec:83:83:fe:b9:5f:
6a:e4:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:30 2025 by rpki-client