Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json)
Hash identifier: T8lgBYRbmDyH5wQ8IKd9YK6Da1nM46cEJlhbXGYOn50=
Subject key identifier: 79:11:4F:9F:BE:91:EB:03:89:C0:92:BF:2F:12:9C:59:20:26:1F:72
Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
Manifest number: A5
Signing time: Fri 31 Jan 2025 05:18:17 +0000
Manifest this update: Fri 31 Jan 2025 05:18:17 +0000
Manifest next update: Fri 07 Feb 2025 05:18:17 +0000
Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: ezEqjECLLRt+NMy20hT9lkVnWQD26II5ZDW7/biErrw=)
2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=)
3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=)
4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Validity
Not Before: Jan 31 05:18:17 2025 GMT
Not After : Feb 7 05:18:17 2025 GMT
Subject: CN=679c5d19-2e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:45:9a:8a:c1:8c:12:2b:c0:05:06:ac:4d:
68:8e:a4:ec:0b:fc:6f:d1:db:63:86:a1:c0:d4:63:
f8:a3:cf:be:34:a9:08:4a:70:4e:46:b7:20:3b:14:
ba:12:05:c7:ce:8a:68:43:30:4a:5c:f4:e2:95:0b:
fa:20:b4:19:86:b7:ad:95:85:11:38:97:fd:3d:53:
c0:34:1a:1d:29:23:62:90:e7:a4:70:ac:1b:5c:cd:
b7:bc:35:fe:ca:bc:f3:94:03:50:13:41:8a:00:8b:
3b:1c:b0:ca:7b:e1:21:b6:7e:e8:fa:42:51:ac:a7:
fc:a4:f3:a8:b5:7f:c0:cc:75:3d:ab:ce:52:ad:7c:
f1:ae:71:0d:47:e0:3d:f8:7e:a7:4a:fb:39:67:4a:
7f:e6:22:38:75:fc:ea:f9:ff:1e:28:6e:58:f3:35:
d7:d6:f9:0d:40:e6:ec:31:90:36:75:56:ed:3a:b5:
50:b4:68:d8:6c:84:de:b7:a1:54:bd:9c:5b:72:ff:
f5:83:3f:f9:c8:0d:a5:2e:39:f0:96:b4:32:de:d5:
d0:f5:43:26:6c:be:b6:63:9c:98:64:f7:43:0e:99:
bc:7b:ca:c7:7d:ff:65:ba:55:80:4d:57:e5:71:b2:
59:97:73:85:e5:76:8d:22:f0:70:4c:eb:d5:3a:d2:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:4F:9F:BE:91:EB:03:89:C0:92:BF:2F:12:9C:59:20:26:1F:72
X509v3 Authority Key Identifier:
keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:2c:f2:27:5b:55:9a:72:92:33:70:1c:6f:41:ed:da:17:
21:33:d1:e4:d9:65:ba:b2:6b:bc:cf:c3:51:a3:c9:45:a7:4e:
f1:da:78:bc:0f:a9:f0:85:70:8d:5c:06:4e:81:39:95:df:4e:
05:e1:51:1f:c1:b3:fa:f6:0d:73:b0:8d:f4:63:5a:5f:36:ef:
6a:8c:96:5b:a2:d0:1f:13:28:54:ea:13:be:92:ec:5c:7a:8a:
71:e8:fb:7f:36:8b:76:f7:23:05:89:20:0d:20:a9:40:41:70:
0f:94:25:d6:29:cb:85:73:2f:48:42:7c:a6:50:0b:de:d2:14:
04:87:59:31:e5:ae:20:a0:17:8e:65:54:e5:49:0e:f8:d3:09:
09:c0:09:21:32:3b:41:68:0f:bb:58:9f:7c:a4:f6:e3:f4:7d:
a5:fc:30:e4:aa:9a:a4:31:9e:fa:73:0d:4b:43:da:9b:b5:3c:
86:32:93:64:2d:ba:9e:bd:07:26:87:97:7d:4a:cb:0d:21:04:
7c:1f:42:bf:04:75:66:2b:5c:ca:0b:83:63:e7:6e:72:5f:c7:
dc:1d:cd:bb:67:95:a9:30:0f:7d:ad:6d:33:87:f3:b6:e3:10:
66:2c:97:e7:9e:65:85:ec:56:c0:4c:05:ed:cd:17:59:14:2b:
97:43:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:03 2025 by rpki-client