Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json)
Hash identifier: AIzy1rvfEBYuShpYNz2HsQ4K3xd7JmmZsbCnQ+Hdco8=
Subject key identifier: ED:55:15:AC:9C:22:4B:88:78:86:E0:33:05:0C:08:06:DF:94:35:3A
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0B9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
Manifest number: 0A60
Signing time: Thu 30 Jan 2025 20:21:13 +0000
Manifest this update: Thu 30 Jan 2025 20:21:13 +0000
Manifest next update: Thu 06 Feb 2025 20:21:13 +0000
Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: oshFnH5DK03/8j125MTRY4c7Lt5wQ1hLQLOMgbPZ0aQ=)
2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: JmnrBzA6dJ9YsMu7pz9xXLOAQrwChmETl1tBrYYwR4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jan 30 20:21:13 2025 GMT
Not After : Feb 6 20:21:13 2025 GMT
Subject: CN=679bdf39-6635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:00:f5:b3:22:ea:31:37:f0:30:37:b9:4a:
9c:71:af:c8:22:21:77:c6:b3:f9:a9:fe:9d:7d:08:
41:01:ed:04:6b:97:0f:52:a7:b9:73:a3:97:93:af:
e2:b7:ef:a5:1b:6e:5b:52:24:15:8b:4e:c1:27:ca:
2c:55:25:27:ba:7a:9d:47:4f:d2:7d:e2:fa:21:92:
14:2a:df:7d:77:68:87:24:15:41:47:32:b1:5c:94:
5f:ec:e7:a6:38:27:82:80:ec:6b:91:7f:09:fe:e6:
6f:4f:76:60:2e:49:54:6b:00:81:12:30:de:32:eb:
d0:d2:4c:80:b6:c3:0c:37:16:1b:7c:07:a6:2b:8b:
50:59:d3:22:cd:23:1f:ab:fb:3c:7b:cf:f3:01:70:
1e:f4:78:05:4a:27:71:dc:ba:7c:7a:2e:a4:94:3c:
4d:a9:c8:e8:80:75:e3:d4:a0:43:ea:3a:ff:3e:c6:
94:f7:26:2a:35:b6:16:ba:0d:dd:6b:ff:01:d3:01:
04:47:e0:74:95:c9:9a:f9:3c:a4:8c:3b:7b:4c:9b:
8b:b8:61:5d:38:e3:69:30:e1:ea:73:83:45:35:87:
03:35:24:d8:cc:dc:eb:e3:ed:59:36:d4:b2:bc:53:
e7:c9:2b:1b:00:d1:8b:8b:1c:a0:4f:03:3c:8d:3d:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:15:AC:9C:22:4B:88:78:86:E0:33:05:0C:08:06:DF:94:35:3A
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:da:aa:61:20:c1:c4:cb:09:bd:aa:7e:12:6a:f0:b2:79:
eb:e4:e6:30:0b:81:d2:62:d3:db:f3:49:ec:29:43:8e:b2:36:
4d:6d:70:09:36:0d:d8:28:98:71:40:f8:3a:05:11:26:88:37:
2b:e8:62:e1:ad:bf:36:81:be:2b:ed:9e:df:1c:ed:45:72:61:
e6:33:0b:96:30:f9:67:57:44:f0:6c:2d:e7:4f:55:49:5b:08:
53:6c:3b:82:ca:6a:15:33:b7:21:77:8b:93:18:43:34:c4:99:
b0:d0:81:d3:0a:83:11:9c:2c:09:2f:96:0a:42:8b:69:49:fe:
8b:f1:0d:47:56:58:47:f9:f6:5e:e1:a1:94:3c:93:45:fa:4f:
af:b6:54:80:67:09:25:7c:fe:b4:ab:db:22:4b:11:c2:d0:cf:
e0:74:42:09:e6:56:c0:59:05:25:f0:eb:98:40:dd:ce:7d:87:
85:57:bb:a5:2e:85:90:b9:8a:53:5c:ec:94:a5:c9:c5:87:58:
5c:1d:d2:9a:4e:63:98:65:2a:49:6a:14:eb:48:e3:2c:29:ca:
07:fd:a8:f2:c0:ea:ae:0c:f2:36:6d:90:30:35:a6:9d:32:c2:
e5:c4:9d:a4:c5:15:10:4c:7f:96:42:98:3a:b4:f1:75:c5:1a:
a0:a9:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:18 2025 by rpki-client