Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier: QOeo4cg7PM9BIPv/czTCeuoIB76PDLtDkhrf1lmW318=
Subject key identifier: 2A:90:22:26:13:CA:36:7C:98:FF:AE:7E:B0:43:5E:64:8D:F0:56:51
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 035B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number: 0352
Signing time: Fri 31 Jan 2025 01:04:10 +0000
Manifest this update: Fri 31 Jan 2025 01:04:10 +0000
Manifest next update: Fri 07 Feb 2025 01:04:10 +0000
Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: hmj9oq8w86PkiTF/r6jZfw1Ek2Bzo4LEe+pbuUzlR/o=)
2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: 58tRp84nV6cuDwMQCtuvrDR1Q9sd2XcxoEZ9gu16O5I=)
3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: HzYHLqMfwP0QnmtU46YrdLzIK8IRgXFtgddRZ8aUz8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859 (0x35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Validity
Not Before: Jan 31 01:04:10 2025 GMT
Not After : Feb 7 01:04:10 2025 GMT
Subject: CN=679c218a-2fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:cd:a6:0c:79:69:46:0a:49:61:8d:51:ed:
2e:4b:52:c4:98:95:c3:7e:ae:d0:05:88:1f:a8:df:
3c:d8:8b:20:d0:13:ba:22:c6:d0:fb:37:6a:35:d9:
9d:57:6c:05:44:50:23:30:07:08:44:6a:8f:80:a5:
49:ae:10:b3:ac:c1:43:8b:6b:7d:31:d7:bd:87:38:
8a:44:52:40:8d:d2:d3:d6:b6:2b:9e:7e:6f:28:72:
23:a9:ab:37:eb:77:d5:af:3e:0b:6e:da:28:29:b4:
cd:07:96:8a:db:40:aa:65:b6:1e:2a:68:0e:14:fa:
52:7e:b7:c6:d6:69:c0:d6:af:47:55:6e:a0:7a:32:
13:e1:ee:69:84:ed:29:0d:23:80:a9:91:64:49:8c:
d0:71:8f:d6:ee:c6:06:9c:5a:56:21:0e:dd:ae:87:
74:2f:65:1b:a2:8a:ed:ed:63:db:a9:4c:32:4e:4c:
3a:67:18:4a:6a:16:09:7b:de:9f:ed:43:6b:3f:ae:
5f:2b:1e:45:2f:ec:f6:08:af:26:28:18:3a:44:6b:
62:49:54:f9:4a:42:59:2d:7d:e1:6b:7a:35:ed:57:
65:8b:b5:63:49:10:0e:d6:f2:e2:fc:4d:c7:7b:3a:
df:d6:17:26:e9:1f:bd:71:3f:48:3e:9d:99:3e:20:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:22:26:13:CA:36:7C:98:FF:AE:7E:B0:43:5E:64:8D:F0:56:51
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:eb:97:80:d3:a5:44:0d:ed:45:9a:10:1f:91:e5:3f:5d:a1:
9c:84:f1:42:5a:b3:c1:d0:7f:e4:54:23:30:2d:d5:b9:7e:53:
65:fc:54:85:6d:4a:11:93:cf:fd:80:9c:6b:71:77:cb:f3:0b:
21:ae:2e:f0:91:69:94:da:5a:fc:e6:d4:02:eb:80:0b:01:e9:
1d:6e:4f:1c:23:00:df:2c:f0:2a:66:6d:bd:92:df:5a:4b:8e:
8e:2c:08:a3:8f:78:85:eb:14:02:a5:53:61:fe:fe:17:60:33:
fb:c8:1c:fe:0c:3f:64:a1:0c:73:03:55:85:39:af:d0:97:6c:
b6:d9:53:a5:7d:4a:9d:d9:d4:a7:eb:64:36:d4:19:13:fc:ce:
44:7e:f6:69:78:22:f9:ed:28:95:a1:73:5c:b4:85:c1:e8:a6:
21:e1:6e:6d:b0:f9:e0:4b:27:22:fb:fe:a5:02:6c:46:00:81:
b4:b3:21:7d:05:a8:a4:03:6f:f8:e8:94:d9:5e:38:8a:99:6b:
c4:c2:97:83:72:d4:40:ab:df:26:c6:e0:28:bd:25:b7:de:f9:
1d:9d:e2:36:7b:fb:31:9d:bf:1e:e1:58:16:11:88:65:68:d6:
93:ee:05:87:8e:a5:7c:d6:b9:d6:68:ff:74:ee:08:8b:f0:20:
79:12:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:57 2025 by rpki-client