Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
File: 8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json)
Hash identifier: MTInVchJtK0VHoUunAgqkxRVYavxdYjHZz+Yo5rHeps=
Subject key identifier: 7E:94:14:E6:61:C2:F7:FC:3E:18:8E:1A:FC:9C:A4:CC:54:3D:07:BF
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Certificate issuer: /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
Manifest number: E5
Signing time: Fri 31 Jan 2025 04:33:43 +0000
Manifest this update: Fri 31 Jan 2025 04:33:43 +0000
Manifest next update: Fri 07 Feb 2025 04:33:43 +0000
Files and hashes: 1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: jKhJr4M5lOwsFTwLl545Orbd3h7jQlK8QGGD1Ti9gbs=)
2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: rmSlyhnDPvPSFvbFMmRCs9JHSxTZmt3FdyC7wK+xTxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Validity
Not Before: Jan 31 04:33:43 2025 GMT
Not After : Feb 7 04:33:43 2025 GMT
Subject: CN=679c52a7-8a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:1c:f2:e7:25:97:7f:a9:94:31:31:3f:a1:
c4:44:fd:26:19:d0:47:58:e3:9e:a9:c7:c2:32:28:
0e:87:dc:88:c8:97:ca:65:cc:d6:87:5f:ea:4d:55:
27:2e:c6:d4:40:0a:f1:82:cf:f0:6d:23:4c:89:10:
cf:9b:86:1f:37:cf:35:5c:8e:c9:36:e5:ec:42:27:
4b:48:5a:f2:75:59:ba:69:03:b2:6b:9d:6d:6e:c7:
72:c7:4b:ef:97:68:a7:4b:93:57:cf:16:87:9c:59:
21:1d:d0:f2:ea:3d:4b:d7:c5:83:ed:c1:7e:d4:43:
2a:20:1a:6b:07:bc:53:31:a3:56:ed:54:f5:00:b1:
33:94:7f:66:73:d9:c3:c4:98:cb:c6:c7:03:a7:e5:
ee:7f:66:f1:c8:f8:93:dd:04:63:57:fc:e2:7e:75:
71:25:a2:a7:94:2c:32:fd:08:1d:5c:8f:9c:b9:f8:
2c:c8:2c:a5:bb:e1:b8:a8:95:d3:2f:fa:a2:88:42:
a7:9d:37:84:e5:b8:2b:90:39:94:33:eb:7b:07:3a:
10:29:8e:ff:81:34:52:2e:27:39:a2:a7:d9:6c:8b:
0c:5d:59:60:7e:77:3e:14:df:f8:54:80:9a:3d:9b:
de:ef:28:e5:06:2e:0e:ea:11:38:4c:30:b1:b6:0c:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:14:E6:61:C2:F7:FC:3E:18:8E:1A:FC:9C:A4:CC:54:3D:07:BF
X509v3 Authority Key Identifier:
keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:04:df:fa:b7:32:aa:c0:df:09:aa:00:01:72:b3:40:ad:3c:
d1:4e:b4:89:0a:18:99:f0:0e:a0:16:f8:00:e4:d7:26:5c:bb:
c1:1b:78:8f:a5:4c:a6:4e:fa:0c:0b:30:0c:57:3e:24:cc:32:
4f:05:cd:7f:33:18:86:78:8e:d6:76:dc:1c:15:b6:56:72:59:
62:70:7a:25:1f:c2:95:f8:ae:29:90:37:79:b6:20:e1:d8:a3:
39:fb:fd:ec:d6:42:b0:86:97:6d:93:96:4c:8c:d2:66:f9:20:
08:3d:a5:21:24:db:ea:4c:41:62:9c:9c:ff:54:d1:48:bc:73:
3e:fd:45:e3:44:af:43:01:b0:cd:79:9d:87:28:52:a9:92:1f:
2c:bf:c0:34:c4:9a:0a:40:65:48:97:84:aa:f4:e6:d2:2d:0b:
e1:f7:8b:2c:5d:36:c7:58:5c:b6:3a:37:32:03:b8:e7:27:b3:
fb:7f:14:81:be:d5:43:65:4a:aa:7b:75:f3:3a:ca:97:a0:d1:
57:d8:71:51:2b:d7:c1:a3:2d:7e:5e:17:ab:05:c8:48:00:57:
c3:6e:46:f2:86:2d:a4:0a:3b:36:a2:44:47:58:7c:82:0d:be:
81:a8:ef:26:7f:83:f2:87:f6:04:8e:e2:c8:39:9d:1e:11:55:
01:76:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:35:57 2025 by rpki-client