Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier: p+K9GPzSs2cSdFanRtyH8/78B52kn51xDxXlfSRd9BY=
Subject key identifier: DB:E3:13:94:5A:1D:94:A1:11:52:49:F4:0A:FD:63:AE:73:D8:E8:0D
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number: 027C
Signing time: Fri 31 Jan 2025 01:44:13 +0000
Manifest this update: Fri 31 Jan 2025 01:44:12 +0000
Manifest next update: Fri 07 Feb 2025 01:44:12 +0000
Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: +ExJjZjZImMDpHnWp2IfnaflladjJz1qk5IHw9qOX4s=)
2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: QErLnurbIXvxhMRBkoUfFlZlnlUaVJAze8ZqVt/qUq4=)
3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: P+1Rqy+ACA4e0I+pwLJRreU8z9vqEtggvk9g8eqBcwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Jan 31 01:44:12 2025 GMT
Not After : Feb 7 01:44:12 2025 GMT
Subject: CN=679c2aec-1fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:fc:fa:c3:b7:00:ea:85:a0:45:e2:93:cb:
6c:f2:5e:fc:3d:00:a9:a1:91:c3:cb:f5:4a:5f:ff:
e4:75:a9:36:de:9f:0f:34:aa:2f:9d:51:db:97:c4:
94:3d:bd:8e:7a:36:2f:8c:e2:ee:69:de:30:74:e0:
ae:df:42:41:61:4a:65:b4:ad:20:08:6e:55:d8:35:
c7:a3:88:ae:01:38:a5:83:a5:62:4d:85:c0:ec:f9:
af:50:b0:79:fa:f7:b0:4c:8b:07:74:51:73:7d:6e:
16:e8:ad:45:ca:14:8d:5b:9b:87:84:f6:f0:33:69:
df:81:62:d3:88:b3:8c:f1:f9:e6:34:89:5b:52:ba:
80:8b:13:0a:e2:91:ee:30:81:d1:fe:83:17:6b:1d:
d9:e1:0e:ae:38:c9:21:fd:72:56:50:fd:e4:f1:3f:
cc:9d:ab:fa:b6:8d:95:43:85:0b:8f:ed:51:37:92:
15:ae:c7:68:cc:06:b0:6f:9a:e4:76:d4:09:db:c0:
75:67:4d:4a:f5:3b:3d:00:17:3e:8d:ce:98:d5:fc:
9b:db:fb:63:d6:bd:68:90:0f:9f:fb:9e:57:67:b0:
45:77:e5:37:22:a1:c9:3e:d4:ba:37:ab:63:b8:76:
4b:33:35:3c:e6:74:4c:86:b7:f7:ac:cd:ca:0a:d6:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:13:94:5A:1D:94:A1:11:52:49:F4:0A:FD:63:AE:73:D8:E8:0D
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:59:75:45:3e:a2:47:7d:6c:2e:ab:7b:00:59:fb:77:d0:
ab:36:4b:bc:77:af:11:b0:a3:0b:b9:04:b7:43:b7:05:cc:18:
da:70:b0:ed:f0:bb:a0:82:4c:44:7f:24:e6:d8:c4:f9:9c:2e:
05:b5:af:89:a2:ff:7d:40:b0:d2:60:70:1e:d5:2b:bd:35:3f:
e0:5c:77:79:ad:10:89:16:a1:5b:80:97:10:20:1f:aa:9b:a3:
9f:9b:f3:3c:47:dd:42:72:9e:53:94:68:a8:84:fb:76:42:7a:
b3:db:1e:d3:05:00:89:b5:7f:07:9b:33:cb:97:0c:a1:e9:a1:
d1:5f:54:0d:e3:38:69:3b:a0:db:0b:61:e9:49:96:78:ff:a2:
a2:f3:95:21:11:b0:84:a8:19:b1:2f:d9:33:d3:9f:f7:ce:46:
bb:c1:94:4d:d1:ed:9f:68:b4:d6:15:50:65:10:64:35:68:7b:
e3:41:b9:66:6e:50:83:4a:31:0e:9b:b1:e4:34:bc:67:5a:96:
4e:9e:d6:a3:74:42:4c:8e:07:ac:23:d5:80:f5:bd:b5:b6:44:
79:1c:5e:d5:80:16:b7:81:cd:37:29:15:98:4e:4b:91:a3:65:
f5:9d:e0:9d:c3:01:53:ea:d7:cf:e5:08:19:0c:8e:00:59:d9:
5b:3b:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:06 2025 by rpki-client