Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft
File: c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft (raw, json)
Hash identifier: a0AobqcR5vmJVIyaU59j+m5br56XrUjiNKfnEQ+fn2s=
Subject key identifier: 5A:2C:6E:EA:98:52:01:9C:CB:49:1C:EF:21:3D:6A:8A:F5:B5:32:7F
Authority key identifier: 73:C0:E0:18:90:FF:30:67:60:10:62:A1:2E:54:BD:54:37:90:91:B6
Certificate issuer: /CN=A91FAEE4/serialNumber=73C0E01890FF3067601062A12E54BD54379091B6
Certificate serial: 047C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft
Manifest number: 0473
Signing time: Fri 31 Jan 2025 00:08:17 +0000
Manifest this update: Fri 31 Jan 2025 00:08:16 +0000
Manifest next update: Fri 07 Feb 2025 00:08:16 +0000
Files and hashes: 1: c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl (hash: SuExtho5dqU+m1sfgut1gdKf7fP8F2egoH8Nst2qy8E=)
2: 601148222FE311EC9A82B173C4F9AE02.roa (hash: 7l7cIvv2PKgzcAVE2+wLoCJeRNQ2nD5JLbsIhjuYwUw=)
3: 163AF95074D011ECA22BB248C4F9AE02.roa (hash: hmFZEklS7232HSEBl5X/5WIBk5f8ooZ9kl7W3a5q2xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAEE4/serialNumber=73C0E01890FF3067601062A12E54BD54379091B6
Validity
Not Before: Jan 31 00:08:16 2025 GMT
Not After : Feb 7 00:08:16 2025 GMT
Subject: CN=679c1471-f4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:9e:6f:8e:4d:77:3b:4c:a6:cd:dd:0a:06:
7d:9b:ae:ef:a7:a4:82:bc:0a:5e:2d:41:c9:cf:37:
0b:c7:49:7c:e3:9c:a1:1a:d6:57:d9:7e:0a:32:dc:
7a:a4:ba:45:e5:a5:c2:d4:22:d5:ef:29:2c:76:fe:
df:a5:51:e4:b0:6f:fb:39:34:42:38:47:d0:96:63:
e8:fb:6d:bd:b7:3d:16:f1:57:3f:17:2e:53:9b:20:
5d:2f:95:3c:00:41:9b:54:ee:12:68:b3:45:2b:4a:
f9:31:88:13:68:82:aa:08:0b:77:fd:bd:d7:c0:ec:
2f:1b:98:da:8a:44:a7:e8:fb:8e:a0:b1:03:7c:d9:
8e:7e:e5:ba:96:1c:cc:60:d6:b2:cb:3d:e8:98:26:
7d:d9:fe:f3:bb:6e:77:a0:2a:8c:ef:49:d5:c0:fc:
5b:68:91:d1:42:6c:42:3a:a8:6e:09:69:0b:95:e1:
e4:b9:f2:b4:ac:f7:3a:0a:2f:f3:58:43:95:f7:6d:
99:f4:35:0c:27:96:c1:1f:a5:d8:36:97:5d:94:6c:
ad:67:b0:7b:4f:4a:6f:62:f0:ab:2d:44:69:ee:b2:
0b:8a:86:33:f3:08:c0:42:b2:f4:74:25:3a:cd:98:
6c:67:f9:8f:9e:98:10:93:1c:12:f8:c8:0b:64:c4:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:6E:EA:98:52:01:9C:CB:49:1C:EF:21:3D:6A:8A:F5:B5:32:7F
X509v3 Authority Key Identifier:
keyid:73:C0:E0:18:90:FF:30:67:60:10:62:A1:2E:54:BD:54:37:90:91:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:7b:92:82:8e:9a:80:46:4d:46:7c:f3:e1:2b:73:a5:da:
b8:8b:0a:b2:96:3c:f4:ba:05:fb:a5:8c:09:f6:c6:58:88:0d:
d8:cb:67:ff:2c:60:a0:d6:ef:58:92:2c:e8:d0:b8:4f:dd:13:
74:ef:9f:50:58:2f:4c:ca:3b:65:12:97:20:16:fa:4d:e1:e3:
69:be:e5:ed:60:37:d9:f2:12:73:80:b0:8f:db:4a:d4:5d:46:
f6:8e:c4:97:fb:13:11:ff:89:9e:0c:27:28:19:f6:c7:e4:eb:
07:9a:4c:74:57:8e:7f:9f:f0:63:39:05:0e:24:4f:38:4b:e9:
76:28:af:ab:10:1b:8e:a7:98:47:03:fe:d2:86:c3:8a:0c:53:
1b:07:19:ff:bb:5e:53:7b:30:8c:e6:06:07:6d:da:12:cc:5c:
23:7b:d8:0e:35:bd:a3:db:e1:b9:19:d8:e5:a9:8e:d9:97:fd:
29:c5:db:e1:29:da:5a:44:0b:31:c3:b7:40:8d:85:ad:07:dd:
35:70:c0:8e:9f:59:6d:3b:46:ec:98:ea:aa:35:fb:1b:a0:6d:
c6:55:07:38:84:1b:c5:f9:0e:28:a9:22:d4:64:76:e7:38:f2:
3e:a0:66:a2:b7:7c:3a:98:95:47:11:01:66:b8:e7:61:b7:25:
76:e3:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:06 2025 by rpki-client