Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier: Sr9kCmx68dcpmY6Hh3jJYl17g/luyn78ATyemxMXIDk=
Subject key identifier: 87:73:39:7F:F5:47:84:11:F3:AA:7F:E4:A3:8A:3A:14:4C:14:53:71
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial: 0F01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number: 0EF9
Signing time: Fri 31 Jan 2025 17:36:46 +0000
Manifest this update: Fri 31 Jan 2025 17:36:46 +0000
Manifest next update: Fri 07 Feb 2025 17:36:46 +0000
Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: +S4Tc06W4w7Hq2Tbcup5u8XveANTm/DU+y+OR0TSM/g=)
2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: e6+7qu7EadcH2IZ/urcCvzozlBAhJqsvI1fPogc1Gmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3841 (0xf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Validity
Not Before: Jan 31 17:36:46 2025 GMT
Not After : Feb 7 17:36:46 2025 GMT
Subject: CN=679d0a2e-889a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:21:4e:df:48:3f:48:1a:c3:c0:7f:51:35:
d6:b1:50:e0:b7:4c:7a:c5:8d:f7:c3:fd:73:e6:44:
1c:1e:32:5c:c8:21:cc:26:cd:f4:76:20:23:43:e9:
42:2c:fb:e5:ea:30:9c:5b:90:f0:58:80:ba:54:58:
a3:a7:35:61:e8:5d:0a:2c:ac:8a:53:28:54:d1:5c:
0a:c9:fb:e8:a1:3b:40:88:2c:3b:27:60:81:2b:8a:
7d:07:30:27:28:5f:bf:1b:26:5c:65:79:2d:ab:b1:
d1:c8:fb:84:69:c4:a2:68:d5:55:c1:68:68:a5:52:
2b:10:04:42:d7:d6:a6:22:4b:8f:f7:dc:a4:3f:99:
a3:e8:e8:63:f1:1f:53:30:11:76:67:b6:45:b3:74:
9a:64:7c:41:ae:7e:09:e8:3f:b2:f7:e8:4b:f8:af:
4f:aa:17:6b:f9:bd:59:85:d5:db:22:54:f9:5c:9e:
05:2f:c0:da:75:c3:af:17:68:e5:ae:52:bc:8a:a5:
57:96:78:9c:5b:70:21:9e:1d:a5:26:ef:cd:8b:b1:
a6:92:e2:93:fc:67:6e:5c:8c:82:05:8b:17:30:7a:
07:31:f8:a6:8d:6a:63:e8:e1:ec:b8:05:4d:43:f8:
a7:06:c6:c3:b5:3c:df:d7:4d:ca:00:f3:9d:6a:ee:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:39:7F:F5:47:84:11:F3:AA:7F:E4:A3:8A:3A:14:4C:14:53:71
X509v3 Authority Key Identifier:
keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:75:22:e0:96:e2:bb:eb:ad:d8:2d:90:96:26:cf:c8:cf:
9a:f0:1d:15:29:ed:a1:b3:2e:59:1a:fb:23:70:36:2e:59:fe:
b3:4b:42:ce:91:b8:b0:27:28:31:f3:ae:13:70:b0:c0:e4:60:
d2:29:5a:86:4b:e7:e5:53:88:bc:8c:c9:b1:b1:81:39:24:6b:
51:2b:01:73:9d:e0:8a:0c:0f:42:f9:92:f7:60:c2:8a:ad:0f:
0c:87:95:1b:22:11:a1:5a:a2:5b:2f:29:b4:11:67:3f:fb:0a:
e9:5b:35:87:39:3d:ad:0d:1e:dc:4b:c7:e8:f2:ec:37:4c:d7:
fc:18:d9:60:bf:e5:09:ed:5e:df:26:cb:7b:61:c7:d8:aa:98:
b4:36:26:d2:c9:8e:4c:b9:1d:e2:d1:6a:21:c2:e1:af:6d:76:
63:8c:6c:95:e7:f6:19:30:61:da:d6:ea:d2:1d:03:9f:63:ae:
1c:f2:ac:e5:7c:8d:e7:e8:ff:ad:fe:78:13:9a:0f:82:73:53:
a3:e1:f5:1a:ab:79:d8:b4:b3:7e:08:69:55:54:3f:3b:25:22:
87:fc:c6:fd:76:32:1d:7a:5e:fc:24:59:6c:fb:49:42:e7:57:
db:fe:f3:08:05:e8:b4:2d:51:a7:c2:49:8c:e3:43:2f:72:b2:
18:91:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:25 2025 by rpki-client