Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
File: xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json)
Hash identifier: pSXhjMSjOi6RIQ4DK3WD1Bn33yY3rK8i8B+IoTXrzx8=
Subject key identifier: 99:3C:44:D4:01:06:C1:84:99:94:67:C3:F6:EB:BC:05:7B:62:D0:3F
Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
Manifest number: 0778
Signing time: Thu 30 Jan 2025 21:19:56 +0000
Manifest this update: Thu 30 Jan 2025 21:19:56 +0000
Manifest next update: Thu 06 Feb 2025 21:19:56 +0000
Files and hashes: 1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: XSegYXDWm4BVlO3tDlE6/49polj7lx4+NAE4Vm1xJVc=)
2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: LsVQKkTp9V5mDiVUJekj0bvUgPf5aQfKDpRqhhkjvWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Validity
Not Before: Jan 30 21:19:56 2025 GMT
Not After : Feb 6 21:19:56 2025 GMT
Subject: CN=679becfc-2639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:8d:74:fa:15:70:8e:d5:60:8d:19:41:68:
bf:e3:d2:5f:ae:bc:6f:4b:04:35:88:27:ca:46:1c:
9e:72:c9:9b:f9:63:83:b7:df:f8:d4:ca:f4:62:9f:
d4:be:76:08:1e:83:9d:ef:7d:99:22:6c:d6:ad:c3:
b1:ce:85:34:98:a9:4e:dc:11:29:06:cf:ae:b2:9d:
8f:a5:62:31:3e:6d:50:13:3f:53:c4:5b:0c:59:0c:
31:53:1d:4a:4a:27:43:4d:7c:06:91:eb:f8:c1:b2:
5d:dd:de:bd:5a:fc:b0:b3:89:d8:32:9e:58:e8:c4:
c9:a1:df:b6:24:2a:b3:8f:36:2b:21:23:dd:8d:9b:
6c:6a:fe:21:d2:69:51:53:f7:8d:b4:15:7f:6a:ff:
9d:70:8c:6d:09:ef:13:be:c5:42:e5:85:e8:35:06:
5f:8e:68:2c:a2:51:59:25:aa:2c:8d:f1:0f:12:08:
47:db:cf:88:7b:94:93:2b:53:bc:41:b9:d1:04:79:
9b:8b:e1:4a:0f:2d:38:fe:3f:08:b7:9d:28:f2:d9:
9b:36:6c:ef:7c:bc:d4:dd:54:a4:52:46:07:48:cb:
54:23:69:5e:f5:cb:15:02:69:e6:c9:55:15:80:1f:
4d:e6:4f:1a:4a:cc:03:77:e8:84:f9:3d:ff:d2:f4:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:44:D4:01:06:C1:84:99:94:67:C3:F6:EB:BC:05:7B:62:D0:3F
X509v3 Authority Key Identifier:
keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:9e:4c:9f:cc:e2:fb:30:24:d3:e4:68:5f:07:9d:38:79:
1f:28:0d:09:eb:5c:d4:c9:16:f5:c1:6a:de:fd:43:47:7c:21:
8b:d4:ca:e6:56:f2:ad:ed:94:d2:ef:7e:54:f8:5a:58:04:80:
c3:4b:85:16:ef:0c:94:35:ae:ed:51:c3:b4:fb:55:d9:33:ea:
3c:5a:b2:30:f0:0d:b0:2f:d5:d9:0d:7e:f6:21:6b:9b:aa:4b:
c2:f1:fe:72:6f:2c:21:7a:92:85:bf:67:8e:f9:a7:c2:b3:64:
9f:f5:bc:87:72:d2:7f:e2:62:32:c7:c5:aa:33:fc:74:03:6d:
59:06:34:67:41:7a:29:43:81:b9:84:bc:69:a7:f0:20:79:44:
15:3f:36:9b:0d:91:f1:f1:79:9e:09:db:63:e8:98:6b:ea:0a:
8d:75:ac:e6:09:ce:bd:2c:1d:1a:3d:de:50:49:d8:14:ac:da:
f1:ee:45:f3:ac:e2:90:ba:c8:0a:26:fa:e1:c1:21:80:ab:e6:
08:4a:92:f9:53:9c:9b:77:f2:6c:b9:f5:ef:20:bd:4a:0c:dc:
d7:9f:51:d4:c6:fa:b3:63:11:7d:91:6d:ef:b4:7e:08:9a:59:
3b:80:81:06:7d:9a:d3:ee:ee:d6:4a:a3:6f:22:a6:21:33:3e:
7f:80:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:57 2025 by rpki-client