Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: +1vxpaHPfglCvBT4omoTEQjXDPCloiLQX2U/n/y+/lw=
Subject key identifier: 93:61:10:69:3E:9B:85:23:CD:3D:61:16:CD:7F:C5:A4:36:A9:FA:97
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 256C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 2553
Signing time: Fri 31 Jan 2025 15:45:20 +0000
Manifest this update: Fri 31 Jan 2025 15:45:19 +0000
Manifest next update: Fri 07 Feb 2025 15:45:19 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: fZyhjv5sEKku5eTP+rcgbR2Egjlk5cCZUUjynRvW8qk=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9580 (0x256c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Jan 31 15:45:19 2025 GMT
Not After : Feb 7 15:45:19 2025 GMT
Subject: CN=679cf010-f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:f7:4a:6f:9d:c9:1c:2a:66:92:bc:39:c7:
69:99:25:99:e5:c8:07:fc:0a:e1:02:5d:fc:04:1c:
1d:cd:c3:c3:ef:56:a9:b1:c9:66:07:9c:5d:0c:08:
b1:b3:bc:b2:b6:87:03:f0:18:07:5c:46:f6:e0:fc:
40:4c:ee:e4:24:aa:1a:f5:06:8f:36:27:c1:f9:c0:
69:24:ca:cf:b2:ea:29:35:6a:0d:59:24:78:b6:d0:
ae:ce:e4:92:d7:97:05:67:fb:55:d9:d1:3f:81:9f:
95:87:9c:13:3d:ae:03:57:ee:0c:9b:51:d2:bb:0f:
1a:65:aa:01:7c:61:dc:3d:1f:7a:08:0d:7b:68:b8:
62:5b:4a:58:2d:31:a2:7d:6e:70:65:1c:f7:8c:cc:
dc:e5:ad:dc:37:da:35:aa:34:3c:5d:22:60:ff:95:
c2:52:c1:32:43:2c:a5:fa:be:f5:d9:7d:f7:d3:28:
95:94:d4:23:84:0b:bb:6a:62:9d:b3:bf:9e:85:ff:
a0:52:e3:f5:fb:32:65:51:f4:b6:29:1a:3c:be:3b:
24:e0:cb:22:bf:78:1f:79:49:b7:db:eb:34:66:25:
41:da:97:f5:a7:fb:98:c6:85:15:b6:23:74:7e:87:
bd:8a:25:c1:36:5c:43:f0:34:7d:a4:a1:1f:85:5e:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:61:10:69:3E:9B:85:23:CD:3D:61:16:CD:7F:C5:A4:36:A9:FA:97
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:da:c7:92:77:ea:66:a8:30:80:c5:c7:2d:49:c3:93:ab:93:
54:8c:48:c3:42:95:45:1d:df:6b:b2:35:b6:1b:40:bd:00:87:
83:37:54:3e:13:c1:60:50:54:2b:81:76:5a:42:69:a2:5f:4e:
b6:95:d0:1a:12:4f:c4:24:0e:a3:5a:f4:a0:39:ed:c2:d7:f0:
1c:62:8f:0a:b5:ff:61:46:a9:94:d2:33:8a:cc:b2:d6:93:9e:
98:a1:45:08:d4:64:d6:50:d7:f5:79:9c:38:97:88:55:7b:a7:
e1:fd:39:f5:46:e6:1a:61:5d:ea:30:7c:80:db:a9:5c:9b:d4:
2e:be:90:d9:93:e2:62:2e:bc:a3:dd:48:ec:08:a5:c7:03:f0:
57:ae:13:87:2b:02:3c:53:25:e4:64:b7:fa:99:8b:6b:28:d2:
ca:b1:3b:44:f7:53:7f:b0:84:97:d8:63:a0:ec:6d:62:c5:52:
ce:4e:e2:cf:21:90:f8:6c:04:d2:64:41:36:92:3a:b0:6a:76:
5c:55:09:3d:b8:3f:f4:5d:8c:94:0d:85:86:92:cf:1f:5f:fa:
e5:1a:e0:67:ea:ea:80:5c:e2:47:6e:33:10:b7:26:2d:13:e5:
1f:2f:4a:63:62:2c:9b:31:5e:f4:06:96:2d:3c:31:7d:c3:f6:
30:90:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:54 2025 by rpki-client