Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json)
Hash identifier: JWNIy0jXgiW92NGq2xWVXPZkKA7ZpxV+y3j+K5cARVw=
Subject key identifier: 9E:98:43:10:63:F4:FC:4A:CB:81:C1:27:D0:63:38:8E:95:D0:B1:28
Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Certificate serial: 3450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
Manifest number: 344C
Signing time: Fri 31 Jan 2025 15:07:36 +0000
Manifest this update: Fri 31 Jan 2025 15:07:36 +0000
Manifest next update: Fri 07 Feb 2025 15:07:36 +0000
Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: eq832ZZaQqp2Nn39hBNKwz2rxLHzFiY4V0w57nIJraM=)
2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: bZ78zYHCnstuVWjSxrFde4CQb6MOUeIvruPUliQa2hQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13392 (0x3450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Validity
Not Before: Jan 31 15:07:36 2025 GMT
Not After : Feb 7 15:07:36 2025 GMT
Subject: CN=679ce738-0e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:a9:3e:88:20:90:76:27:7d:8c:c6:1f:eb:
92:fa:38:86:37:7c:1b:19:12:0d:e8:2e:90:24:d0:
b8:07:79:ec:34:6c:0f:c3:86:d3:46:7c:d3:e2:fc:
98:e8:e9:23:df:a8:ba:a9:48:f9:c1:95:ee:61:84:
35:a4:66:d9:f7:60:84:1c:a9:b0:dd:69:3d:e5:9a:
1e:40:cf:08:09:cb:dd:11:94:0d:f9:2f:ba:d4:c0:
a2:3e:cb:18:5c:6e:23:66:c5:32:bf:e6:5d:db:8b:
cf:d0:54:a4:d2:26:21:23:da:88:7a:89:a6:55:76:
83:9f:e4:3a:e7:cf:d1:cc:2f:e2:f6:2e:12:4d:e2:
6e:ca:18:e8:dc:8a:6d:d9:53:33:34:6f:1d:d8:a5:
61:04:ae:d7:3f:59:92:aa:d5:6b:97:d9:2b:98:c8:
0e:22:1e:93:e3:7f:d2:f5:ad:31:44:3a:43:6b:26:
0b:56:8f:f4:11:46:f8:e5:f2:07:46:f4:8b:3f:10:
7f:3a:fc:02:9c:67:af:6a:82:da:85:78:d6:67:48:
bb:40:56:f8:f0:6f:b4:aa:27:37:d7:d2:ac:4b:09:
62:01:38:c4:87:46:95:3f:bb:99:19:a2:f8:29:d0:
ff:87:0a:ac:b0:ab:ee:98:cf:73:a5:a2:ac:ad:ec:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:43:10:63:F4:FC:4A:CB:81:C1:27:D0:63:38:8E:95:D0:B1:28
X509v3 Authority Key Identifier:
keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:bd:d6:71:0b:a7:3e:cc:06:5e:b1:bc:e9:15:0f:b3:d6:3a:
d2:49:21:7b:1d:72:5b:ea:20:dd:4b:c7:f9:87:62:4e:97:50:
93:68:e2:21:94:84:88:d7:db:69:93:4b:dc:c4:66:5d:ec:f2:
4c:aa:4d:c6:e8:f9:0d:32:85:30:7d:c3:6f:68:f0:7e:f9:a3:
34:c5:a3:47:9f:42:8b:30:7d:1b:eb:d3:26:77:6a:a2:8e:42:
bb:86:16:70:f6:91:3d:62:32:2e:ef:9c:34:41:a0:9b:57:c3:
be:11:1b:f2:b4:9c:17:5f:a5:45:be:c0:ea:20:03:e1:82:1e:
b4:bd:a0:8e:d0:dc:f0:a6:56:52:d1:4b:87:33:59:e5:52:af:
9e:64:bf:a4:8d:5d:5a:7f:10:cb:21:a9:49:92:51:9b:6e:b9:
7d:65:3e:97:22:1a:36:ab:90:4c:7b:bc:b1:d7:97:8b:3c:67:
a3:c1:66:d2:90:d5:1e:fb:ba:78:2c:7b:c3:91:3b:fa:b2:2d:
ad:06:61:00:bc:66:71:43:be:a8:41:b1:aa:c9:42:35:e6:19:
e9:19:35:6c:08:c5:b8:7b:72:14:b0:b2:ff:84:a8:ec:77:c1:
b8:fa:3b:e6:b2:e6:fb:26:d4:0c:c5:73:2e:19:28:c4:93:de:
7f:2a:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:46 2025 by rpki-client