Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier: 7ElEhsn4Hijii3epVd+5aXI7xpfMbxxQFuYpAeCbw/s=
Subject key identifier: 63:E8:82:58:D5:98:D5:CC:63:C0:DD:7D:2E:74:DF:C2:66:9E:7B:7E
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number: 0127
Signing time: Fri 31 Jan 2025 03:48:59 +0000
Manifest this update: Fri 31 Jan 2025 03:48:59 +0000
Manifest next update: Fri 07 Feb 2025 03:48:59 +0000
Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: EgVMG3i/P5OMUi2tig2siWPpisc2YvCSm1iaXv/U9HA=)
2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: PSPyDidUc2Ysk1Zzt/hq/yHS8xGylcttSXcqtY7zcuE=)
3: D7FC7B4C217A11EE8C2D2243C4F9AE02.roa (hash: Bz/Ejq1tEuz4EVJF91Xaku+18lMYhCoYHiQXonf6xO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: Jan 31 03:48:59 2025 GMT
Not After : Feb 7 03:48:59 2025 GMT
Subject: CN=679c482b-7345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:32:e0:09:28:36:54:38:22:41:70:1e:ba:
45:63:0d:c1:d9:e9:d7:f8:75:25:cc:92:31:ed:c1:
2c:40:26:59:39:04:e7:ee:82:27:ea:e2:fe:52:af:
77:f0:c9:ec:0f:e1:5c:ba:5d:cf:46:a5:c6:91:f7:
ba:42:60:e0:57:3d:47:23:46:45:40:6b:00:42:d8:
b4:50:e2:1a:5c:80:58:d4:7c:c8:ca:e0:33:ec:fc:
bc:12:83:5a:1a:bf:5a:c2:20:73:ce:d1:55:0d:79:
68:d2:56:d4:da:86:5d:14:21:17:e3:95:db:96:8c:
b2:3b:6d:7a:57:61:ff:70:39:ec:e2:1f:30:25:90:
15:90:a6:59:da:b7:e1:c5:0a:19:19:f0:45:8d:1b:
7b:e8:c3:b5:90:8f:03:59:6a:26:d9:49:14:28:0b:
7a:16:f8:f1:ce:48:d7:32:fe:31:5f:67:6f:d7:ff:
ec:9b:91:32:e2:35:72:58:bd:3d:90:b7:fc:1e:45:
22:bc:84:b5:01:4f:a2:82:8f:64:fe:0b:c1:f1:fc:
b1:e0:0f:e8:b5:65:91:4c:18:80:42:79:a3:e7:82:
1e:cb:d8:a0:ac:6c:be:2c:1d:28:34:60:8c:f0:0a:
f2:cc:7a:d7:9b:ee:c7:62:0a:d6:de:45:70:21:72:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:82:58:D5:98:D5:CC:63:C0:DD:7D:2E:74:DF:C2:66:9E:7B:7E
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f8:59:68:de:d1:94:b1:54:9d:12:07:57:24:cd:19:22:6f:
96:a6:ca:7b:41:43:c4:d2:1e:3d:64:ca:b2:bd:5a:d0:96:c5:
8e:87:9f:55:da:2d:2f:bd:57:f6:98:b9:a3:2e:32:00:34:ba:
d5:0f:c5:61:57:54:89:96:7e:32:b6:fb:38:84:76:e9:74:0b:
10:a6:d8:59:b0:f7:bc:35:e0:11:7c:54:46:62:0a:da:38:dc:
d8:ae:52:d3:d5:72:64:23:85:6c:66:21:c1:d8:14:58:60:a0:
b9:0b:74:3a:75:82:d1:31:d6:65:87:92:11:da:49:61:b3:48:
18:f8:de:37:2d:50:30:04:1a:c9:99:9a:b7:97:9e:ad:b4:40:
ca:ff:dd:7e:5b:5b:f9:c1:3a:fa:90:61:cf:98:b0:c1:74:bc:
ad:3f:7f:26:ab:9d:14:45:79:a9:d4:e2:ac:3f:f0:66:4e:9a:
0a:a3:2d:30:a0:e3:74:8a:a4:2b:1d:75:95:ba:e7:95:a9:d7:
ff:89:e1:f5:fd:ae:d0:e5:29:91:cf:1e:6b:14:00:0d:f1:a0:
b5:11:1b:c6:be:ce:71:b3:ae:36:26:e1:14:fb:9e:89:e3:82:
ea:cb:07:79:69:1c:a7:2f:00:72:56:f5:85:60:62:cd:12:83:
0f:5a:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:50 2025 by rpki-client