Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: 6uiFbyVTV20CEGffd4b3be+a7h4U1geiFp09nHPQWkk=
Subject key identifier: 07:05:CE:34:DC:77:B1:02:ED:23:06:00:52:7C:9A:BD:6C:5A:BD:3C
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 011A
Signing time: Fri 31 Jan 2025 03:56:12 +0000
Manifest this update: Fri 31 Jan 2025 03:56:12 +0000
Manifest next update: Fri 07 Feb 2025 03:56:12 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: yRVpHdTOdLmfsQNkThP70kKVos+YgH+eJ+3WZqlOzxc=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Jan 31 03:56:12 2025 GMT
Not After : Feb 7 03:56:12 2025 GMT
Subject: CN=679c49dc-a4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:1d:f2:53:5f:c7:8b:53:8e:72:ec:0f:3e:
91:37:68:0a:31:cf:fc:eb:8c:a9:58:27:56:66:a1:
f3:3e:5c:63:9b:d0:d5:96:06:58:4d:d3:29:02:8f:
d3:65:84:93:3a:73:ce:ba:b0:42:f5:44:91:48:9b:
2b:f6:7c:ca:84:19:e4:4f:12:43:12:9b:d9:4f:c6:
68:76:20:ef:8b:28:18:7f:bb:e8:98:d4:6f:58:75:
ee:82:3f:fc:71:44:4f:ef:4b:3b:64:79:7a:fe:96:
4f:54:99:16:2f:84:dc:bc:18:b2:2e:d1:e0:37:7e:
cb:48:25:6a:4c:d6:6e:05:a5:39:86:d5:2f:9e:45:
ff:21:c5:c6:fb:7e:9d:21:0c:ff:e4:b4:5a:0d:e2:
34:0d:f8:52:f7:d5:ef:2e:7e:19:61:ab:c9:c5:ff:
fb:5e:3a:15:2b:51:b2:59:51:ae:17:66:15:0b:65:
b5:98:7a:b0:54:27:b9:cd:4b:a0:6d:e4:6c:00:50:
53:b4:ca:91:f2:88:1f:bc:c6:b4:d5:34:73:c4:f9:
c1:74:6d:43:58:4c:2e:53:6f:ce:4a:9f:78:e6:a5:
b9:96:6e:22:3e:37:3b:1c:7d:ee:bc:dd:37:fd:b4:
74:4f:72:33:ed:a4:5b:f9:61:e8:ce:d8:d6:40:dc:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:CE:34:DC:77:B1:02:ED:23:06:00:52:7C:9A:BD:6C:5A:BD:3C
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:89:f5:23:d4:e8:de:b6:76:1b:ac:11:61:21:c7:22:d0:
65:5c:fa:5e:38:2a:69:3c:47:6d:83:b0:f7:ba:8f:60:d0:ed:
f7:69:b6:87:2a:9d:ae:9e:5d:d1:12:44:e8:bf:b4:71:15:e6:
da:a6:73:c4:ad:3e:07:c5:37:8c:c1:8c:d1:14:7e:ff:94:2f:
71:82:72:1b:5b:d2:45:25:16:ae:1f:a6:3e:9c:5a:1d:73:61:
f6:52:2a:b1:a2:80:88:e4:50:3a:28:51:d4:92:4b:a9:3a:6c:
ff:d5:a4:d3:71:a5:54:9d:0c:a0:73:0a:5c:83:f5:7f:6d:94:
61:28:83:9d:d2:06:22:fd:ed:16:fe:84:24:84:84:81:40:5f:
f5:28:ee:e3:22:c9:39:2d:35:04:d9:e3:69:50:a3:75:fd:74:
35:b5:2b:4f:20:38:2c:12:dc:ba:ca:96:5b:dd:90:8d:a3:ee:
d3:0c:f8:6b:58:20:54:0c:0a:eb:0c:19:65:20:b1:cb:ee:2d:
a7:0e:af:16:28:e6:23:56:c2:1e:77:2a:8a:ae:c2:0f:41:76:
03:d1:71:c6:67:23:cc:7d:3a:aa:91:ae:8a:b2:fb:ed:08:b2:
e9:50:cb:12:03:c4:d2:c4:80:09:13:65:95:0a:ff:c6:3c:2f:
55:16:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:57 2025 by rpki-client