Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json)
Hash identifier: +V2fetAR9ZBSyRkcvMxaraohVVlSyoSU4vkU8Zp8Zzg=
Subject key identifier: CB:F3:AB:3F:90:4A:33:8D:05:5F:C3:E4:DD:69:09:C5:34:37:47:AF
Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F
Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
Manifest number: 0102
Signing time: Fri 31 Jan 2025 04:18:10 +0000
Manifest this update: Fri 31 Jan 2025 04:18:08 +0000
Manifest next update: Fri 07 Feb 2025 04:18:08 +0000
Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: x6MAnHV4iuVcRSY+WAnEqtt1VZaSdS/jta7od5eAp8c=)
2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=)
3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F
Validity
Not Before: Jan 31 04:18:08 2025 GMT
Not After : Feb 7 04:18:08 2025 GMT
Subject: CN=679c4f01-a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:78:be:ba:00:a6:69:94:38:ce:9d:95:d0:
08:c8:5d:fd:59:5d:d6:da:6d:10:6f:d8:22:c3:36:
ae:58:de:33:66:85:eb:5d:61:f1:94:81:27:9a:e9:
63:02:ba:95:a1:29:50:f2:d7:62:2e:98:07:2d:27:
19:e6:23:80:10:18:70:3b:c0:49:62:6a:c3:59:60:
31:a0:7b:52:11:c1:91:5c:c8:df:f6:4d:4a:35:7c:
ff:bb:34:3f:f2:85:3c:76:f2:35:c7:73:9e:3d:fa:
4b:a0:31:b6:67:cf:59:5e:69:c9:aa:a3:16:29:b3:
cb:72:3c:5b:41:01:ff:f8:d3:96:73:2d:21:61:b7:
53:ed:23:3d:a4:12:c5:56:c9:fc:de:ae:07:2b:a3:
27:91:ca:23:e5:40:0d:a7:8f:62:1c:49:45:a2:cd:
c7:ca:17:20:b5:42:e6:63:5d:dd:9e:de:22:26:14:
a7:1b:9a:47:48:6c:bb:88:36:c7:21:d2:ce:94:a1:
ec:d2:3f:5f:ab:29:fa:5f:f9:5b:0c:5e:57:73:a7:
09:5d:04:79:17:0e:dc:ec:4c:45:42:63:19:49:d7:
11:2c:00:2a:38:25:78:d1:76:c9:e6:9f:91:db:51:
dd:45:16:30:92:9d:51:27:34:72:bd:b2:66:18:33:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:AB:3F:90:4A:33:8D:05:5F:C3:E4:DD:69:09:C5:34:37:47:AF
X509v3 Authority Key Identifier:
keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:69:ee:81:08:ae:50:72:05:a9:d9:19:65:30:12:09:4a:c4:
b7:e1:97:5c:1b:93:d3:84:24:bc:82:22:b1:3e:a1:5a:c3:c6:
de:4a:cf:b7:25:0a:23:28:5b:82:e6:c0:4a:2b:e5:32:c4:bc:
79:d8:3b:5e:88:5a:1b:71:11:a8:5c:62:e1:28:f2:a9:93:06:
b7:70:ec:06:ae:8f:81:72:b0:38:7f:e4:81:5e:e7:39:a8:e4:
2e:2e:9f:66:6e:31:6d:b4:41:3f:6c:a6:88:a4:ff:6f:2f:53:
83:69:b5:38:3b:9a:80:0e:11:ac:3d:e2:11:ab:c1:f8:06:79:
d7:61:53:63:d3:82:3f:aa:3c:f8:e4:13:51:89:0c:42:a5:a7:
e5:b7:11:db:8f:df:a2:6d:d3:38:6e:ea:4f:dc:a1:ba:17:8a:
c6:51:be:7e:43:a9:ad:72:ee:25:57:26:6d:fa:0d:5c:81:b3:
91:52:50:08:13:90:8e:33:ce:68:63:97:2c:69:5e:40:c1:f0:
02:ae:62:86:a7:cd:3a:08:5e:ff:f8:4a:80:a6:25:09:79:7a:
e6:4b:63:e5:78:a1:fc:8f:98:ef:c1:36:11:40:f3:89:47:67:
c6:28:02:05:81:d9:4e:6b:37:a0:77:d8:87:49:b2:16:d9:2f:
77:ac:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:07 2025 by rpki-client