Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json)
Hash identifier: Gvm92Mci0Ua23zzdgfbzr9R+6ErUlHOdozI3PskLSOg=
Subject key identifier: 79:03:C4:79:07:E7:EE:8E:85:4B:3B:DC:21:69:85:35:89:87:4E:C9
Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B
Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
Certificate serial: 1A2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
Manifest number: 1A21
Signing time: Fri 31 Jan 2025 16:22:31 +0000
Manifest this update: Fri 31 Jan 2025 16:22:31 +0000
Manifest next update: Fri 07 Feb 2025 16:22:31 +0000
Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: Np6xh8cwB3trNqa6dMjxIr+PEte5PA3ikAEelohjsnc=)
2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6699 (0x1a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
Validity
Not Before: Jan 31 16:22:31 2025 GMT
Not After : Feb 7 16:22:31 2025 GMT
Subject: CN=679cf8c7-c747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:05:2d:59:7f:04:61:13:b3:71:45:e7:fb:
62:0f:06:97:db:c7:c3:1f:df:71:18:cb:7a:23:0c:
d8:34:59:39:be:ef:bb:08:89:97:ff:d5:a5:d5:75:
2e:7c:42:27:2c:59:cc:81:9e:9b:c2:c0:f9:86:30:
c2:8c:f8:38:4d:cf:2a:b5:47:db:0a:63:30:c4:6c:
de:09:eb:19:6e:eb:c7:49:d8:6b:6e:84:bb:70:19:
e7:26:ed:e3:02:8c:ee:db:81:a2:19:eb:ea:6e:60:
32:ca:7d:47:67:76:c2:30:ec:e9:86:d6:54:f2:e4:
b0:6b:68:9d:74:8f:9a:4b:00:02:01:93:e9:ce:27:
96:fe:e6:b7:34:53:5a:3d:54:1b:f5:c4:41:14:6b:
24:c5:c1:59:43:67:95:76:36:52:c4:64:1d:c4:d7:
18:6f:57:8b:dc:84:de:ab:f9:a9:a1:6e:46:b8:9e:
44:db:41:b0:37:b4:3d:5d:2d:9e:b1:1b:d7:26:73:
1a:42:b7:b2:5e:79:df:a3:b3:11:00:5d:c4:cd:11:
d6:c1:d8:8f:93:b1:ad:78:89:59:8f:44:30:ad:7c:
2a:37:48:44:8c:56:f0:ae:20:7e:74:b0:fa:9d:e2:
cd:66:fd:0d:0b:a4:12:73:27:54:4e:38:7b:4b:ef:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:C4:79:07:E7:EE:8E:85:4B:3B:DC:21:69:85:35:89:87:4E:C9
X509v3 Authority Key Identifier:
keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:f2:fa:34:33:40:91:e0:0c:e5:70:f2:03:51:af:16:f3:
35:9e:ec:52:c9:06:6c:9e:2c:28:8e:9a:0c:4a:fc:08:9c:41:
58:77:86:d6:db:56:f2:7d:92:16:85:ea:80:ca:81:e6:80:5c:
99:d1:28:8f:9c:e5:e3:43:14:77:d2:56:5d:52:02:9b:5a:df:
ae:d0:bd:78:cd:0b:30:2f:2c:b3:13:cc:8f:b0:3a:f2:04:fc:
b6:d3:d1:a9:9c:28:c8:e8:91:80:f9:14:8f:89:56:7e:b0:2f:
1b:12:6a:ac:86:c3:7c:65:28:be:cc:84:92:46:d2:8f:e6:0e:
46:fe:09:37:62:58:e0:35:86:bb:92:7b:13:a8:43:3f:af:53:
84:90:1c:b2:c5:1e:06:99:b2:57:94:d1:53:2f:ca:4f:f6:41:
d9:ac:61:0d:fa:78:a4:f2:89:d9:16:4f:53:c8:a0:c3:c7:3c:
51:cc:08:df:39:6c:9c:84:49:59:29:70:f0:53:49:d9:00:eb:
c5:bf:46:4a:23:b5:1e:3e:42:4b:54:d8:cc:12:a3:b0:fb:97:
f0:cf:ee:5f:ed:d5:5c:2a:28:74:95:56:3c:2c:14:56:91:88:
92:34:31:39:32:e8:8e:5f:d1:c7:b9:92:b7:3d:aa:54:c5:be:
e4:b0:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:55 2025 by rpki-client