Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier: yVjnaEUx7BBYPpHuG0t5mGCyBTp3iR+jwABCuQ2DAg0=
Subject key identifier: 15:09:F5:87:B3:7C:3C:17:50:C2:C9:E6:88:BB:DA:03:30:4E:40:E5
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number: 0180
Signing time: Fri 31 Jan 2025 03:07:43 +0000
Manifest this update: Fri 31 Jan 2025 03:07:43 +0000
Manifest next update: Fri 07 Feb 2025 03:07:43 +0000
Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: EO5tRZR0qOuaq8Z0NBVZagIjF5qBeHUm8/fKw9dvyzM=)
2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: 2ess2+aqjcLPy2+BGdLHTuvI+dzY0+eD7HCX2k3smvc=)
3: 4014542AED7D11ED8302706AC4F9AE02.roa (hash: zD9nEEeJbLqL6PpRHEJS0ZOHFslLXEVcLH+yPO4OeY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Validity
Not Before: Jan 31 03:07:43 2025 GMT
Not After : Feb 7 03:07:43 2025 GMT
Subject: CN=679c3e7f-b991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:4b:32:41:a7:bc:12:19:9b:f5:26:0e:90:
fc:05:37:69:65:d6:bc:1e:d1:1e:d0:44:87:1a:64:
50:76:ff:d9:13:33:e8:8a:ad:67:92:8c:83:e7:bb:
83:b2:f6:37:3a:dc:44:25:de:c9:c5:92:08:e3:b2:
0e:bd:75:2a:23:42:97:f5:e3:f2:87:b1:74:41:a0:
e3:20:a0:f7:d7:2e:f0:28:a7:29:9c:82:a4:54:eb:
1a:cf:d4:7d:78:28:13:5e:89:11:a1:dd:82:f4:67:
9c:46:54:f6:90:a2:fb:24:80:f9:f3:ba:a6:c6:15:
38:a4:3e:2f:e3:9a:d5:f6:d4:2d:a1:f4:f6:ce:80:
d7:50:09:9e:93:7c:ee:c1:f5:e9:ba:35:f6:f8:e4:
1a:c6:fe:1a:59:72:b1:92:a6:a9:21:3b:cf:3a:9c:
d3:ed:ba:cf:2f:0b:a4:81:22:ba:4c:7a:3f:6e:a8:
4d:cf:c3:89:01:80:81:e7:51:51:9d:02:c4:f6:45:
ba:e7:7c:50:3e:4b:cc:aa:6d:df:cf:05:31:88:02:
02:22:ea:73:1b:49:ed:37:c6:ca:4d:13:ea:60:5a:
d1:b3:57:56:2e:3b:d2:e2:cc:a5:c0:7e:2d:eb:66:
ab:d5:b8:14:f9:2d:be:4e:f1:1c:89:24:00:0e:ba:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:09:F5:87:B3:7C:3C:17:50:C2:C9:E6:88:BB:DA:03:30:4E:40:E5
X509v3 Authority Key Identifier:
keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:5c:46:6e:33:38:0d:70:86:fd:59:0e:61:67:7e:d8:db:
d5:cc:b9:3e:f6:c1:ff:d5:83:e0:78:87:d3:f8:9c:bc:9c:01:
f5:9d:d7:d2:3b:cf:4d:2f:88:25:d5:e0:6c:b6:33:15:6f:1a:
66:e2:b7:7c:83:bf:6d:a8:8c:6b:68:2a:43:65:60:b0:1b:27:
fd:98:35:e6:e4:ba:32:0b:03:8f:8e:23:90:78:57:e6:75:56:
4a:af:14:98:ff:99:c2:1f:4d:12:88:8b:4e:3e:9a:a8:c7:69:
c6:fa:c7:94:38:25:f4:e1:99:41:49:bc:9a:f2:0e:68:a7:31:
47:15:ea:6b:1c:26:e5:f5:2e:66:51:b8:c8:77:bf:14:f1:f6:
92:92:b8:57:9b:c3:5c:84:a9:91:a0:5e:88:1b:63:b5:ae:2b:
ac:a7:ef:e7:0b:d3:86:b4:5c:1e:db:38:47:d7:84:df:3f:76:
f0:e3:99:c2:df:e3:e0:de:1f:08:04:93:c4:50:9c:98:3c:5a:
5f:3d:e0:4d:26:2c:8c:65:f7:f4:64:1c:f6:10:65:8a:af:6b:
cd:57:be:47:a5:21:48:0d:fa:6e:9f:4b:66:d9:b3:84:65:df:
9e:64:8c:1d:02:85:63:b9:9a:e2:06:25:2b:74:1a:cf:10:81:
de:40:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:39 2025 by rpki-client