Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier: JXFY03w+9euBOxr4zWcBgBvJDgEv//B9mGv4da80OoI=
Subject key identifier: 96:0D:B6:C3:FF:2E:87:D9:5B:A0:3D:AB:7C:C7:FF:BD:27:97:94:05
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number: 0C
Signing time: Fri 31 Jan 2025 07:13:02 +0000
Manifest this update: Fri 31 Jan 2025 07:13:02 +0000
Manifest next update: Fri 07 Feb 2025 07:13:02 +0000
Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: KUGmNU8cch8/KhEG383nwxrYbb1RVDfoG6qkTRMw+6M=)
2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Validity
Not Before: Jan 31 07:13:02 2025 GMT
Not After : Feb 7 07:13:02 2025 GMT
Subject: CN=679c77fe-e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:bd:59:9c:97:62:e7:46:80:4d:38:4f:de:
b5:9d:b0:6a:7d:63:4f:cb:79:c4:64:61:f1:dc:e7:
db:d4:d6:cc:27:e4:90:dd:c2:bd:34:ce:e1:f3:f1:
7b:42:89:e4:81:99:a8:f9:a9:af:2b:4d:11:b7:1d:
40:d3:e4:32:62:68:2f:89:fc:55:96:d3:bd:1f:0c:
20:60:29:26:b4:a3:f5:a3:18:83:72:84:f8:0f:7e:
1a:18:b0:ac:e2:21:5d:4d:96:00:ed:c8:f1:85:fa:
dd:5a:13:45:28:4c:67:b5:aa:73:e7:c5:a2:e1:25:
e4:8d:a7:c6:c7:42:0c:45:af:2a:dc:59:26:a4:82:
8f:66:45:4a:6b:27:4a:d1:0b:60:f5:f1:10:5b:da:
d3:99:41:4d:6f:17:8b:21:0a:a8:d1:23:47:21:cb:
d8:06:58:56:b8:31:09:44:a8:87:e2:84:6c:c0:4e:
6e:6a:ad:8c:82:0c:71:fb:b3:1c:6c:a6:b0:d4:51:
6f:fe:60:d2:ac:82:1f:6d:ba:26:d2:13:8a:5f:cf:
93:d9:25:36:79:eb:03:f6:b8:03:55:2c:bc:90:c2:
e6:83:40:7c:4c:72:73:43:d3:9c:f6:5e:f6:53:50:
24:2c:60:0f:98:f7:f1:0d:20:af:4f:78:58:a8:91:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:B6:C3:FF:2E:87:D9:5B:A0:3D:AB:7C:C7:FF:BD:27:97:94:05
X509v3 Authority Key Identifier:
keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:82:18:a8:21:27:b3:33:5c:ab:08:79:cf:06:2a:f9:b7:3e:
25:75:15:49:6b:11:3a:0f:ee:dd:b5:4d:9b:51:d6:77:3c:e4:
d8:de:e3:df:b1:ff:fc:68:46:a4:17:32:3b:5e:12:7c:ab:b8:
b3:33:8f:6d:29:9d:6b:df:78:a1:eb:08:71:bb:44:7a:a4:54:
d5:79:44:a4:88:13:73:be:e1:a9:19:5e:4d:46:ff:e7:dd:84:
3d:54:c7:99:51:8f:ca:08:70:78:c9:0a:1e:e2:8b:fb:a3:0c:
f3:36:96:25:54:2a:13:68:d9:71:35:5c:89:4f:c1:1c:fc:29:
cb:8d:36:93:8b:7f:07:ec:ae:a3:d1:a5:1e:7d:25:27:de:41:
3e:8d:d1:7c:d1:e8:9d:49:9c:a0:94:d4:a2:b7:a0:8c:37:64:
30:40:29:5e:7b:4d:e7:68:f1:e9:73:5d:f6:64:22:71:f5:cc:
98:e3:e4:81:a3:3a:6d:53:0a:82:2f:57:79:f9:08:b4:b2:77:
c3:e3:95:2c:e7:81:c2:b0:e1:2b:4c:eb:b5:66:41:92:d6:13:
3a:42:9a:52:06:ce:88:85:e4:43:a2:49:0b:15:04:cd:85:e3:
87:fa:61:a5:1d:e5:bc:be:5e:88:db:00:f4:60:be:a5:9f:f3:
2b:70:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:06 2025 by rpki-client