Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json)
Hash identifier: A2qCWEMnb4Zj/oQH5nOdBaoQF09/gFeMHineVQqAzzY=
Subject key identifier: 25:EB:CF:E4:AC:93:83:09:3E:48:88:6A:F3:FC:27:8F:41:A7:46:46
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial: 06FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
Manifest number: 06F5
Signing time: Thu 30 Jan 2025 21:54:14 +0000
Manifest this update: Thu 30 Jan 2025 21:54:13 +0000
Manifest next update: Thu 06 Feb 2025 21:54:13 +0000
Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: 75vEkOAyvVso18OrQ5cLYrRd0dPbwXwAMkWrinW0tPo=)
2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: K6694ItlfbumtbL39COqWlYQugZFNwdV2Wxv0zsctho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Validity
Not Before: Jan 30 21:54:13 2025 GMT
Not After : Feb 6 21:54:13 2025 GMT
Subject: CN=679bf505-59a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:ff:b5:5e:5d:1b:65:73:45:16:ff:61:3e:
c1:0f:e4:cc:f4:66:98:68:73:46:25:c9:2b:05:5e:
8c:e3:f2:cf:23:81:58:c6:22:04:d6:0e:05:2b:a6:
fd:56:89:8e:9d:a1:7c:84:5b:fe:5a:a9:b8:99:b9:
c4:5b:cf:6e:d9:32:22:11:02:e0:52:2f:66:bd:ff:
ce:1f:48:a1:b0:5d:5b:39:3d:c3:36:21:b8:1c:cb:
4b:76:bd:12:ac:0b:7c:c1:f5:62:ea:6b:63:63:34:
e1:94:08:a2:8e:67:9b:ac:7a:97:19:f6:16:4e:bb:
bd:29:e5:5a:4a:d8:27:34:7a:da:9c:83:91:20:4f:
42:1f:f1:52:f4:08:fb:d2:87:1d:5f:19:32:fc:38:
35:85:62:ec:c6:5b:99:ca:c0:51:5e:21:df:dd:11:
6e:7c:72:d3:05:30:9e:de:83:23:90:14:6c:66:4e:
71:f1:68:2c:e6:51:f5:47:65:5a:e4:61:56:b7:d4:
53:c9:f6:f4:ae:b3:0d:56:b7:a9:0d:48:2d:8b:10:
67:f7:75:62:9e:cf:d1:79:53:9e:88:d4:b4:5e:84:
ec:20:ef:b3:72:ba:a9:dd:04:19:e4:be:98:8e:dc:
cc:10:a9:48:85:8d:82:f2:30:22:c0:0a:34:e1:ff:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:CF:E4:AC:93:83:09:3E:48:88:6A:F3:FC:27:8F:41:A7:46:46
X509v3 Authority Key Identifier:
keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:f0:f8:bc:f4:85:5d:c5:f6:4c:fe:4c:bb:0b:f0:a1:ad:
90:40:32:5f:1d:25:10:ad:05:64:c8:6e:9d:6c:20:84:0c:a6:
37:c7:fe:4a:de:29:00:dd:ea:c0:44:3f:ed:78:2f:57:ff:42:
d0:07:92:e9:0c:7b:2d:dd:b6:cc:53:63:08:a5:e4:fb:b6:73:
a7:96:b8:17:2b:b1:15:08:89:e1:8f:42:b8:6c:5e:de:17:91:
69:35:29:46:de:5e:5d:6b:96:28:a6:6f:72:78:5a:83:fe:13:
af:01:41:27:29:e9:c0:5e:ad:91:e0:42:2e:5d:10:6c:c1:58:
b0:23:84:14:00:87:5e:c2:69:a5:d0:49:e3:cb:4d:57:85:21:
84:78:a2:64:ce:2a:fe:be:b1:72:d4:e1:f1:8f:7f:03:12:e1:
9b:fc:c5:bb:f6:2e:c7:2c:c2:4f:d6:8f:75:d5:83:d7:28:0b:
58:4f:f7:8b:f1:9e:6b:f0:04:69:20:61:64:8f:15:d4:50:87:
90:14:16:46:51:6b:26:19:04:fb:4e:d2:05:56:9f:e4:03:b5:
cd:39:52:63:cf:bc:1d:73:3b:db:fd:f6:cb:9b:01:3a:1b:92:
24:41:41:d0:8e:fc:0a:be:6c:0a:0c:31:89:07:62:c0:8a:40:
7a:4a:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:20:55 2025 by rpki-client