Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json)
Hash identifier: LskgsqGf1mg8flx37HnVXwjx1W3U9XKARLaqbfxsB7U=
Subject key identifier: BD:A1:EC:BD:CA:60:DA:5C:19:3F:1E:EC:7D:5E:95:31:46:5E:8C:71
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial: 1C9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
Manifest number: 1C8A
Signing time: Fri 31 Jan 2025 16:11:21 +0000
Manifest this update: Fri 31 Jan 2025 16:11:21 +0000
Manifest next update: Fri 07 Feb 2025 16:11:21 +0000
Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: xAhnKP6W08pjOf2LX1666AvH6P3A6P12NoKrOZ3BIhM=)
2: EB7012446FDE11E9AF945067C4F9AE02.roa (hash: 7u9f+gWjW4ewcVZaqyMD9ZqpjL5Hz8NvrMbvw9f5dXY=)
3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7325 (0x1c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Validity
Not Before: Jan 31 16:11:21 2025 GMT
Not After : Feb 7 16:11:21 2025 GMT
Subject: CN=679cf629-8f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:57:6a:5e:88:5d:fa:10:4e:8a:0c:c9:2b:
52:4d:9a:7d:01:6c:c1:dc:f3:ba:6f:85:87:1e:62:
9e:42:93:63:4d:6c:8e:d5:e2:bb:62:12:33:e9:59:
03:d2:4b:a6:89:b5:7f:b9:d7:cc:dc:3f:a7:69:e9:
9f:31:93:e2:60:71:1c:38:a9:af:9e:75:44:e6:ff:
70:59:93:6d:1d:31:5f:51:bb:a8:67:47:bf:5c:5d:
77:78:6c:2a:f2:ac:ea:4a:17:b1:f9:8d:dc:28:9a:
50:9c:d0:87:72:97:2a:e0:96:29:94:15:ee:a4:87:
9e:8d:1e:53:79:73:31:8f:8c:4e:cd:85:85:80:b8:
90:de:d8:e7:eb:91:5d:53:ba:1f:9d:7c:2f:fd:da:
54:44:78:db:63:85:fe:6f:5b:c8:e4:21:d2:d3:b9:
f3:90:ba:94:0b:08:24:51:d3:be:23:87:aa:59:9d:
bf:b7:b8:7c:fb:1d:41:53:9f:8f:bd:a7:06:99:2b:
2b:21:d0:c4:c0:fd:d3:63:55:66:ca:2b:ee:3e:69:
d6:71:b4:8b:1b:58:15:6d:b2:c7:9f:f8:d7:75:4b:
25:22:0e:39:43:85:d2:06:a0:05:9c:93:8c:7f:5c:
27:2d:42:ea:f0:b3:8b:36:43:ee:a1:98:d2:e4:59:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:EC:BD:CA:60:DA:5C:19:3F:1E:EC:7D:5E:95:31:46:5E:8C:71
X509v3 Authority Key Identifier:
keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:c1:05:bb:55:f5:d6:ae:a2:8d:5a:b2:9b:e9:7d:3a:07:
0a:38:f1:f5:a2:81:63:b1:42:73:6c:1f:b1:60:be:58:e3:e5:
63:bf:05:b3:08:ca:ef:22:63:03:38:4d:a7:45:6d:84:ce:0c:
f9:ad:23:20:dc:f8:22:24:12:5c:a7:23:ab:a3:10:9d:f6:86:
a9:99:50:41:10:b3:91:a6:7e:89:26:8c:bd:2f:47:bf:62:2d:
99:4d:da:14:81:db:e7:8c:fa:61:69:c7:7a:3d:e9:2d:11:fc:
da:09:c2:d4:d9:2c:af:bd:bf:3f:a8:e9:cf:75:2e:16:3b:56:
39:bf:bd:1e:d3:59:f5:be:d0:57:3a:c7:1a:4c:eb:3d:f6:78:
92:5c:1a:f6:cb:1a:a6:16:3a:0a:9a:e9:41:71:89:0b:96:bb:
a8:7f:a7:84:b1:85:44:89:8b:51:e9:1b:9d:1b:cf:bb:88:03:
2e:56:7b:e7:53:4b:5c:c3:b2:a9:44:81:18:00:17:93:ea:42:
e8:38:48:0a:b6:4e:78:a2:6b:13:e4:1b:b7:9b:28:bb:c0:fe:
43:a3:58:ff:ff:b3:18:7b:40:71:f4:d2:11:f2:ae:86:df:a9:
95:de:ee:e3:fc:45:d9:de:c1:49:88:7c:40:33:c8:19:5d:1b:
17:84:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:11 2025 by rpki-client