Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json)
Hash identifier: 33rgxk5W7U4slN1O326IzjbFLxbdC/T1BMr1x1Ohu5s=
Subject key identifier: 5B:C9:29:82:21:AD:76:20:BC:68:C8:56:00:91:B7:2F:F4:FB:55:E8
Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
Manifest number: 011A
Signing time: Fri 31 Jan 2025 03:59:57 +0000
Manifest this update: Fri 31 Jan 2025 03:59:56 +0000
Manifest next update: Fri 07 Feb 2025 03:59:56 +0000
Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: Ch+gx7v9s/DydHGiNlFJbNkPjAvG4ccpXvSnI18Qa1Y=)
2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=)
3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=)
4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54
Validity
Not Before: Jan 31 03:59:56 2025 GMT
Not After : Feb 7 03:59:56 2025 GMT
Subject: CN=679c4abc-5d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:d0:43:87:23:96:94:8b:fb:9f:ab:8c:b6:
f5:6f:cf:16:95:a2:bc:3b:85:46:96:67:a4:54:01:
a6:fd:92:53:67:b0:b3:04:12:6d:b6:45:c1:03:17:
4c:b7:44:f6:05:28:6e:52:36:54:72:57:99:0d:9c:
39:2a:0a:7b:de:39:af:a6:46:a2:50:13:9e:ca:9e:
d3:c0:a6:aa:ed:4f:7c:83:bb:03:fa:88:a0:70:30:
d3:93:01:2f:43:2f:7f:e2:30:d1:1e:c7:6f:4e:88:
3c:d0:11:5c:64:86:22:26:98:7b:c6:d9:a9:ba:a8:
c7:20:c0:16:b6:f0:05:37:80:b1:97:69:bc:e2:9a:
e3:bd:dc:ab:35:67:e3:aa:11:8d:4f:6c:65:3e:5a:
e7:2a:8d:f5:50:e0:11:e2:27:86:e9:58:15:eb:f1:
95:f2:aa:80:15:b6:64:fa:25:b6:d7:74:78:d9:6a:
0d:d6:20:4a:15:3a:c6:bc:2c:b0:28:ef:a0:5b:60:
08:9d:7c:98:db:54:4d:30:ba:f9:68:84:05:8a:82:
85:d1:2a:7c:1b:e2:65:2b:08:49:8b:d1:5d:7f:00:
42:91:c7:f9:f9:f2:cb:00:c6:34:33:ef:b5:8e:5c:
68:c3:40:39:15:8f:29:4a:12:a3:46:69:20:90:b8:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C9:29:82:21:AD:76:20:BC:68:C8:56:00:91:B7:2F:F4:FB:55:E8
X509v3 Authority Key Identifier:
keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f5:34:c4:21:98:8e:aa:8a:38:35:83:71:2d:4c:b5:cd:b4:
9e:24:9e:8e:5c:19:f4:46:13:d4:14:2a:a9:d8:85:4b:99:cc:
c8:ba:82:5d:6a:cf:fb:4b:77:d5:e7:4c:30:c4:93:f3:ff:de:
03:ae:ae:35:49:48:94:f2:f9:61:17:0f:90:66:f2:fa:ac:da:
c1:54:1c:a9:5f:2f:69:2b:4c:db:d4:24:d7:59:b2:60:30:fe:
99:a7:67:78:cf:7d:63:a7:1f:64:45:52:21:b3:7d:ea:10:37:
e4:48:6b:e2:6d:a1:5b:ed:9a:3a:76:64:a7:83:56:22:e6:e8:
e9:13:fb:b2:69:57:5a:70:26:ba:87:23:69:27:fa:47:76:3c:
67:21:a2:f5:d4:13:44:29:18:28:1e:ee:33:23:aa:d1:24:99:
ca:60:be:d2:91:e4:14:db:94:1c:02:d6:60:ea:8d:e6:f1:9d:
95:a0:c3:93:13:60:0a:51:9a:23:c5:3a:ad:72:33:2a:31:fe:
3e:d1:99:d3:0d:a7:86:79:74:4a:8a:77:cb:72:55:f8:15:c2:
54:76:56:d7:68:72:4d:89:6a:41:9c:c3:64:a7:27:92:38:6f:
fd:cf:fd:21:30:8a:62:a1:33:b7:3b:66:5e:65:88:c5:7e:7c:
cf:94:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:32 2025 by rpki-client