Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json)
Hash identifier: 6jmGLiaTfNx+NtKsbJagvCToBY4T9fEEsRKvXRA7sDQ=
Subject key identifier: ED:D2:B8:CA:F7:3F:89:99:2F:B9:97:C2:2F:F1:88:48:5F:82:B7:A7
Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Certificate serial: 047D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
Manifest number: 0475
Signing time: Fri 31 Jan 2025 00:08:38 +0000
Manifest this update: Fri 31 Jan 2025 00:08:37 +0000
Manifest next update: Fri 07 Feb 2025 00:08:37 +0000
Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: DSSb5+3SdATGMCr/BTvxclh9Oldu59wT1NkPT4+bp7c=)
2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: CjEb36vV7LXCUvQdsPq41e7nYE3GW5xo8YCCxuuK9YE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Validity
Not Before: Jan 31 00:08:37 2025 GMT
Not After : Feb 7 00:08:37 2025 GMT
Subject: CN=679c1485-6ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:7b:65:72:40:97:24:ff:21:86:88:95:ee:
ef:0d:5a:93:92:62:ff:0d:98:1b:ae:35:cc:fc:91:
f2:b2:f3:bf:98:d9:69:b8:42:4a:60:cc:61:da:95:
f4:6e:e9:f5:e2:e5:92:16:f6:79:f6:a2:fa:2b:81:
4c:e7:ce:67:96:5a:4b:50:19:24:19:77:53:5b:0b:
24:bf:ac:dd:66:1c:7f:6c:42:9a:1c:8d:ce:38:79:
ce:a0:02:68:82:8a:a2:ae:cc:f1:d2:60:d0:5d:c3:
5e:96:4b:bb:6e:35:24:8d:58:50:29:92:ba:8b:68:
27:0c:9a:00:22:eb:30:ce:be:20:1f:6e:20:95:f7:
8b:10:c7:60:0a:87:0b:5d:ff:ca:52:30:5c:b9:e8:
39:36:36:d1:38:2f:34:97:c1:3a:2e:bf:f5:b2:be:
04:96:c2:83:87:12:6c:f1:d4:f8:3a:f1:ab:67:31:
81:0e:9b:db:03:d6:34:c0:79:7f:a9:c6:d7:8e:ec:
f5:4b:a2:3e:b0:c3:ef:64:4d:fd:0c:d1:75:0a:9b:
17:2d:c3:94:79:4c:12:ca:99:9d:e3:f0:4e:13:7d:
0a:7e:a7:1e:56:6d:69:e0:18:74:4e:a7:75:1b:0c:
c8:e2:1b:9a:75:74:0c:db:2e:78:63:63:ad:6f:b6:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D2:B8:CA:F7:3F:89:99:2F:B9:97:C2:2F:F1:88:48:5F:82:B7:A7
X509v3 Authority Key Identifier:
keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ab:c5:8f:2e:d4:c6:ce:6a:28:55:e0:0c:68:8c:80:b9:a2:
d5:d6:db:1b:71:58:be:9c:75:9e:b4:0b:b8:82:b2:8d:e3:f5:
81:2e:fd:21:6a:41:0e:4a:3d:ae:a3:25:bd:e6:24:7e:4a:c4:
3b:a5:fb:a8:14:f4:d6:a5:42:b9:0d:a4:b5:42:dc:80:aa:5c:
fd:ca:54:b5:9a:5b:a0:b9:8f:db:10:a7:bb:87:78:f2:4a:5b:
55:f8:a6:e6:fe:63:34:4c:46:d0:7a:ba:ac:12:44:74:57:c1:
01:7a:89:dd:e4:d3:32:e4:70:52:82:d7:b6:ea:6f:02:af:b2:
22:03:99:59:68:cd:ab:cb:49:ea:98:b7:c2:e9:e4:fa:4b:16:
2a:86:17:bc:80:1a:97:8c:99:5f:3f:af:30:b7:84:7d:f8:fb:
a4:81:3a:f6:00:f4:99:2f:f1:f0:c9:92:20:37:b8:3b:b7:7d:
46:08:32:ac:e5:33:3d:9c:b7:7b:47:cf:26:4b:a4:99:77:36:
c9:8c:ce:da:0f:01:5f:d7:24:35:a2:cd:4a:04:22:77:c2:5b:
18:f5:8a:40:c2:b0:0e:35:3b:92:85:73:3a:a2:13:10:84:66:
24:d0:11:68:0d:0d:44:cc:96:29:a2:a6:11:b5:c1:5c:a2:69:
cb:ca:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:01 2025 by rpki-client