Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json)
Hash identifier: Tm4MtIiT8LYTtkVDv+g7acUIyj8i9aXrQ37v4AU+G4Y=
Subject key identifier: E6:9F:3E:38:FA:D6:89:85:92:45:D1:A8:A2:DA:6C:10:1B:C0:EB:F4
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 03:45:46 +0000
Manifest this update: Fri 31 Jan 2025 03:45:45 +0000
Manifest next update: Fri 07 Feb 2025 03:45:45 +0000
Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: LogZyMYF6slmLSwPepTNoxB1E9wQGJYcSy8ZVmB1Tw8=)
2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: bVFigoZ3x0JTyZjZCupe2tjJv5QUTmpZ1H+nraFSE8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Validity
Not Before: Jan 31 03:45:45 2025 GMT
Not After : Feb 7 03:45:45 2025 GMT
Subject: CN=679c476a-aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:b8:19:32:58:12:d7:12:71:08:26:02:ef:
ce:bc:b4:8b:19:6f:a9:07:13:e7:88:25:41:62:06:
a3:37:3a:a1:4a:d7:cf:6d:70:7b:31:20:f7:c7:5d:
94:3b:4c:23:8d:9e:b9:52:b8:fd:83:4a:17:17:99:
5a:38:57:c4:85:5f:71:e0:7f:77:1e:b8:82:f3:1a:
cf:2b:0a:d2:2c:73:00:f9:51:5b:6e:3d:ef:cc:cd:
cd:1d:ad:4f:74:36:ce:6f:e7:72:d1:0e:dd:fc:cf:
db:b6:6f:7d:50:6d:1a:6e:e8:0d:09:95:4b:07:1f:
58:97:97:3e:c5:4a:21:7f:a3:84:12:e6:4e:f5:da:
d8:88:30:e7:b0:76:f1:3f:a4:78:9f:c8:fb:28:9b:
9c:11:63:35:3e:60:dc:5b:0b:d4:9e:a3:12:d6:5b:
49:8a:ef:39:d1:79:e2:00:be:1c:2c:e5:77:9e:97:
e5:da:75:0c:1c:93:0a:a5:a7:5d:15:2e:f8:43:64:
12:b9:95:e1:c8:a5:0e:06:31:75:2a:06:81:a6:9f:
17:42:12:16:02:33:9e:59:bb:3a:f5:7f:8b:e9:16:
ea:b2:3c:48:b4:f1:b5:09:21:93:0b:79:84:92:d9:
86:46:ff:fc:f2:dc:a0:f4:d3:56:8a:78:7c:ad:f3:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:3E:38:FA:D6:89:85:92:45:D1:A8:A2:DA:6C:10:1B:C0:EB:F4
X509v3 Authority Key Identifier:
keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c2:b5:d1:33:8d:c9:21:b6:58:e8:7b:24:bf:24:4d:6e:8b:
e7:17:8f:e6:8d:2a:c1:e8:3c:f4:b0:35:82:0e:42:42:71:28:
2d:ca:af:01:5a:c7:63:cf:c2:62:d2:12:95:48:76:69:72:65:
b1:2e:96:a3:09:91:17:c3:c0:fe:67:1e:56:6b:21:fd:a1:51:
ce:e7:d7:c0:e3:c3:59:14:47:16:58:64:c6:e9:58:b8:3b:77:
95:7c:7d:fe:bf:7c:e6:e0:ac:d5:a6:26:ea:88:72:8d:11:d4:
9b:23:1f:8b:30:e8:79:c8:b3:ef:97:f8:f3:b7:64:e0:78:ac:
35:62:8c:5c:fb:87:df:1e:95:45:85:9e:25:80:e8:05:a5:22:
f6:32:26:3c:63:91:2c:8a:77:1e:40:19:8c:55:6e:31:1f:b4:
46:c6:75:61:c5:55:09:6c:e9:73:57:53:4f:40:ac:41:15:56:
ee:c0:85:c7:f4:07:d3:cd:90:4e:8a:4b:c1:1d:61:1e:7f:dd:
5a:fa:83:df:d6:18:3e:ef:1c:11:2b:75:ea:90:b6:95:09:88:
27:f2:ca:e1:da:02:10:46:a7:2d:7d:7c:4b:a0:08:b2:5d:3c:
6b:e2:bb:3d:a0:10:eb:7a:bc:70:85:92:a9:b7:8b:07:22:33:
57:ad:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:25 2025 by rpki-client