Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json)
Hash identifier: kPIJhBvj5J2p99CBFkgCLVqzpuJ5bZbp3LkMannIMzE=
Subject key identifier: 47:09:54:4F:F5:E2:5C:A3:F1:C4:54:5C:4D:88:FA:FE:5F:A5:B3:74
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial: 22A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
Manifest number: 228E
Signing time: Fri 31 Jan 2025 15:52:35 +0000
Manifest this update: Fri 31 Jan 2025 15:52:35 +0000
Manifest next update: Fri 07 Feb 2025 15:52:35 +0000
Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: qtFZbvVDagdk0Y6HUVZjesZGlmdU+3ry/UNwSblShTU=)
2: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (hash: 0vCf/xwV9KMenpxoQYxOfrnjClEJSXbTz5F/3QVeMUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8871 (0x22a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Validity
Not Before: Jan 31 15:52:35 2025 GMT
Not After : Feb 7 15:52:35 2025 GMT
Subject: CN=679cf1c3-0991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:72:dd:72:f9:dc:e2:db:b4:d4:a6:35:12:
59:b6:45:ed:9d:05:61:f8:ac:ee:96:22:fa:2a:9d:
1f:36:d8:d7:9e:9b:38:83:b4:52:24:f7:f2:98:ff:
93:a9:22:de:09:b5:41:50:de:2b:3d:a2:dc:b2:d7:
f3:b7:16:34:93:8e:e3:d2:df:cc:92:bf:22:bc:59:
4d:7c:bf:fb:6a:c0:4f:b2:df:a9:65:43:73:0d:04:
8f:bc:d2:eb:ac:05:8f:1e:14:bc:0d:88:ee:6a:4c:
3d:32:d9:28:93:77:d6:ae:a3:b4:6d:db:a8:df:a0:
81:bc:06:e6:37:3c:e1:e9:dd:f8:08:05:80:1c:bf:
18:01:de:b3:36:13:5f:ff:4b:6d:72:60:31:f2:4f:
35:9b:76:34:90:0e:42:93:7a:4e:1a:08:a6:12:5d:
c5:1a:13:02:11:0e:c2:5d:87:34:df:7c:5a:2e:67:
23:67:2b:79:fe:b1:12:fe:01:52:7b:f5:8b:36:ca:
73:86:fc:7b:68:8d:10:06:fa:99:50:bd:de:9d:03:
61:d1:5b:fc:7d:3b:ed:37:f7:a8:92:14:96:d6:51:
0a:53:be:3a:ea:0f:20:f2:fc:b5:56:19:4b:d1:00:
bf:ce:01:a2:17:53:bc:ae:5f:36:69:82:fd:34:fa:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:54:4F:F5:E2:5C:A3:F1:C4:54:5C:4D:88:FA:FE:5F:A5:B3:74
X509v3 Authority Key Identifier:
keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:e0:ae:c8:82:f4:44:83:91:26:4e:bd:89:6d:22:92:bb:
92:df:c5:0d:bf:db:59:af:88:05:18:33:03:9a:36:91:12:a4:
2e:c1:f7:1c:51:e1:99:39:b8:58:45:c2:13:72:f3:c1:96:18:
58:66:10:f7:b9:b1:17:ab:0c:aa:4a:f2:f7:13:a0:fc:6e:3b:
69:f1:8b:af:9e:39:16:f0:ce:04:4c:12:73:4e:4c:61:69:fc:
56:e1:6a:11:28:2f:ee:e7:38:c8:59:6f:86:0c:b6:06:08:c2:
75:28:71:d2:57:18:59:6d:1a:b2:a8:00:b9:7f:75:b1:7a:2c:
94:2d:7f:6c:5f:63:31:79:8b:1d:dc:f9:d5:04:50:cc:8f:62:
f1:44:32:12:ec:bb:d5:70:a6:3b:72:0a:bd:24:0c:4a:e9:5d:
f3:3b:1b:55:15:35:d9:2e:37:fb:fc:ca:5c:c0:59:48:9b:80:
59:1a:1e:ef:20:b1:d9:1c:88:8d:00:a3:76:df:25:e5:b0:10:
34:90:0f:0a:27:94:7c:45:9b:2e:25:38:d9:14:fe:f5:fd:29:
6c:60:95:7e:49:1f:c1:bb:ba:e5:e2:13:13:6b:fe:52:67:3c:
01:ba:9b:6e:9d:3b:6a:33:60:a5:35:ef:e7:d3:87:7a:21:a4:
33:32:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:40 2025 by rpki-client