Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json)
Hash identifier: x+QyBQMUS6jrKWfuwxFCKKTsxQXGjaiSngH9RBymw8Y=
Subject key identifier: E7:B1:FA:B2:CB:9B:D9:6E:D1:37:45:02:F3:BB:A9:EE:74:7F:B9:F3
Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 03:33:34 +0000
Manifest this update: Fri 31 Jan 2025 03:33:33 +0000
Manifest next update: Fri 07 Feb 2025 03:33:33 +0000
Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: U8uHrahRYo1XFLQpMzzTD0yzydkd2sJWFguhUHYGwu8=)
2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Validity
Not Before: Jan 31 03:33:33 2025 GMT
Not After : Feb 7 03:33:33 2025 GMT
Subject: CN=679c448d-3c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:55:4f:23:5e:78:41:6a:ff:c1:a5:30:e0:
ad:4c:8a:85:20:d6:b2:14:12:d9:86:13:12:88:93:
b3:4b:4d:57:3b:f8:e4:f2:19:e2:ab:34:4f:c7:c3:
a2:b5:ab:8a:37:03:d2:2b:92:49:a8:b4:49:10:d8:
5f:b6:20:d1:67:df:84:a2:db:15:b0:7b:80:c1:0c:
c0:bd:f3:ac:f2:84:58:3e:17:22:49:d6:de:ba:d2:
8c:72:df:ea:54:a0:c7:0a:9c:fe:27:58:dc:92:fa:
bc:25:b0:57:1c:35:18:3f:0d:6b:dd:74:6d:b4:bc:
b2:3d:96:53:9f:e4:04:5b:e9:be:e0:db:6d:75:f9:
44:d1:83:f1:f5:25:9d:e5:d1:be:15:a2:e9:5a:3e:
e0:7b:d7:70:c1:63:70:1e:78:16:55:cd:58:ab:3d:
33:17:71:57:50:f2:59:0d:82:50:84:74:f4:2d:f5:
77:9c:79:86:fb:e0:b1:56:84:a3:46:49:07:34:c8:
b3:de:75:b6:c7:11:c8:c0:a4:4a:f1:73:5b:22:4e:
71:27:77:3d:e0:7c:74:0d:a0:fd:4b:a2:aa:23:6e:
1e:f9:c3:b3:81:94:be:0f:f3:de:f1:c8:d5:49:4f:
7e:d0:6f:43:59:dc:c9:e8:39:cf:af:6b:fe:02:c3:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:FA:B2:CB:9B:D9:6E:D1:37:45:02:F3:BB:A9:EE:74:7F:B9:F3
X509v3 Authority Key Identifier:
keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:0e:f6:17:22:8f:e2:3e:b6:9f:23:df:12:1e:03:cd:9c:cb:
c2:fa:6b:95:56:c0:c3:70:95:d4:77:b5:14:fe:94:81:ac:7b:
31:36:ba:06:81:39:df:7a:b3:68:81:43:85:79:9f:72:09:9f:
be:7d:5c:b3:ca:03:f0:b7:71:2b:12:04:f6:c1:d8:d3:f2:2c:
ed:7b:f7:84:b6:83:c4:50:9f:11:a4:c9:1a:99:a0:dc:d6:45:
9a:7a:13:f5:90:36:55:4a:51:cc:af:c0:62:f2:90:3d:d8:d5:
c8:a7:1c:e3:32:f5:95:68:e2:a1:af:bf:d1:ca:f3:3d:30:35:
13:6e:8d:f4:ba:77:36:9c:a7:63:e3:9b:e7:6b:92:03:3b:dd:
b5:34:60:c7:61:f1:3d:7a:ff:ad:05:4b:a3:76:91:cc:10:0e:
d2:2f:de:f8:7c:c7:39:6d:7f:94:66:35:92:ee:76:74:15:7d:
30:02:a8:0f:d0:3b:08:fb:09:41:70:42:69:7d:a9:00:f3:8a:
28:da:a6:cd:51:41:03:29:bd:79:51:f8:f0:66:34:e0:50:17:
dd:3c:7b:d5:d4:96:ec:10:dc:fb:c4:0f:6f:c9:ef:5a:1b:50:
4f:9c:10:ce:6d:09:02:ed:73:2b:f2:a4:1b:85:4e:07:0f:5b:
c1:8e:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:54 2025 by rpki-client