Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier: ZQbIYj/Y3rM7s6FGTSWIxD+HjhBxACimWaLmfXF1EFw=
Subject key identifier: 95:01:AC:40:81:9F:90:14:FE:3C:E6:C4:85:17:A9:A1:AF:2C:87:3A
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number: 0476
Signing time: Fri 31 Jan 2025 00:10:47 +0000
Manifest this update: Fri 31 Jan 2025 00:10:47 +0000
Manifest next update: Fri 07 Feb 2025 00:10:47 +0000
Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: udXDjhxrkaEtgaUIHkspQucHhJUboap6fnH0igkNFWw=)
2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: +VGbXPgEMjbM44YtRZVvhAgjfsY3HNt2pKC/SE+Bb2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Validity
Not Before: Jan 31 00:10:47 2025 GMT
Not After : Feb 7 00:10:47 2025 GMT
Subject: CN=679c1507-064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:1e:29:20:d3:7c:bc:ed:ee:be:c0:1b:fe:
e6:b1:b0:86:df:2e:12:77:47:ed:ba:7d:a4:03:5c:
c6:21:34:c5:41:87:3b:85:ad:7b:57:a7:b4:9a:01:
2d:4f:7c:d8:36:d5:a8:38:12:96:4f:2a:e4:9b:71:
e4:e6:77:cb:fd:9b:a2:0c:24:c9:31:80:2a:2e:a1:
e8:c6:34:06:45:f9:12:45:e3:8e:1e:a6:3e:53:4e:
df:c6:94:74:be:3b:fe:f6:26:0e:70:7a:b1:d2:42:
9d:21:a7:ae:b0:6f:d5:93:a2:90:d0:26:5e:5f:8e:
5f:76:c0:e3:90:41:5c:7b:f8:2a:fd:35:a2:21:4f:
7e:52:78:df:ba:0a:d8:d7:71:d5:e2:aa:59:85:a6:
c9:98:93:a7:35:ec:3f:ea:79:5c:db:76:ed:cf:00:
71:87:1f:71:15:a2:62:cc:f5:47:46:b4:19:4f:55:
5d:5e:c8:d4:d3:a4:be:c2:ae:0e:4d:0e:88:0d:3e:
89:50:4e:44:e0:93:20:d0:5e:bb:ff:54:15:06:e9:
83:fc:f7:43:d5:bc:ac:f9:c0:50:73:bb:7a:eb:83:
f1:05:b0:c6:b3:b0:2f:bd:d5:6d:7e:63:63:22:e1:
b1:2d:5d:7f:80:51:cb:a6:59:cf:b9:ea:53:38:f3:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:AC:40:81:9F:90:14:FE:3C:E6:C4:85:17:A9:A1:AF:2C:87:3A
X509v3 Authority Key Identifier:
keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:b2:d8:fc:11:53:a5:10:be:b1:6f:5d:8a:a2:05:2f:07:
34:a7:7e:71:c6:24:6d:c0:47:da:8b:48:9f:eb:dc:71:25:cb:
59:da:ad:7f:91:e7:74:e5:c8:cd:5f:dd:79:26:36:09:56:75:
b0:a9:60:68:99:af:47:5b:96:9c:8f:8d:54:30:da:d0:3c:6d:
40:02:9e:fd:bd:dd:2f:f4:5a:a6:d9:4e:f5:f6:38:7c:f6:47:
17:2a:9c:7b:2f:5b:43:cd:df:f1:5f:4a:c6:b6:0a:7c:6b:28:
2a:37:a4:33:31:b6:d7:09:8c:f3:a4:33:eb:2e:9d:c8:6b:e4:
7f:dc:aa:02:27:c5:ac:ab:35:d9:40:03:f6:d5:9b:c4:c8:49:
26:6d:9f:4f:da:0c:4d:ad:23:c4:8d:c7:18:1a:93:e2:a8:03:
63:55:37:c4:1d:76:8b:c1:c3:1a:0d:40:ce:6b:a7:91:47:7a:
84:20:e7:18:f8:9a:37:07:b9:37:c0:19:5e:80:47:fa:f7:73:
3e:06:17:6e:d6:ab:ff:65:29:43:9f:78:f3:58:d1:d2:06:4d:
a4:17:89:41:d2:93:3e:06:0f:9d:38:b1:90:c8:ad:fe:9b:bb:
fa:ce:43:d2:e4:02:f9:f0:91:5f:49:5b:f8:7f:00:57:9a:76:
e5:f7:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:31 2025 by rpki-client