Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: gd8JOoas937RZylJd2mNegOvjPEVaeZNibyl+XU1aS8=
Subject key identifier: 66:B0:26:16:65:48:1E:E8:49:BA:05:AA:A7:56:58:DD:15:61:A0:18
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 036D3D9990FEFDE6593CC58C1FD05491420BA4D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 0579
Signing time: Sun 07 Jan 2024 00:52:57 +0000
Manifest this update: Sun 07 Jan 2024 00:47:57 +0000
Manifest next update: Mon 08 Jan 2024 03:22:57 +0000
Files and hashes: 1: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: batOurECOmg5G2sj1UILzLS7d5iYVCjrSXPEU7VRxlQ=)
2: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: M+81RA0IpQfZbEaVoXnR9HL4zNSZdCyWhNKvI02AikY=)
3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: zC68+6bWfqlDXE0xpkA2SCG0i0vM4M/m+ly9BvQ+FRM=)
4: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: Pq/ZNV+oWKzjrdP/LoxNEFQdQ1OqwZsuZtzh4zv6PM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6d:3d:99:90:fe:fd:e6:59:3c:c5:8c:1f:d0:54:91:42:0b:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Jan 7 00:47:57 2024 GMT
Not After : Jan 8 03:22:57 2024 GMT
Subject: CN=66B0261665481EE849BA05AAA75658DD1561A018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:74:fd:4f:60:87:02:71:bb:f5:be:3a:42:
68:3d:d5:ba:43:a4:74:3d:cf:62:2c:74:3e:59:1e:
d7:1e:1d:8d:62:94:dd:f7:3b:c1:a6:8e:53:60:f8:
de:0e:9f:0e:4b:ce:c7:64:51:34:3f:03:16:2b:e9:
70:65:53:a9:a7:54:14:f8:f2:d8:27:ab:bf:0f:f7:
f2:50:d9:c4:55:e1:8e:3c:ec:ca:72:03:5c:ce:61:
aa:b5:a3:18:db:9d:26:cc:cf:95:03:ac:f4:35:67:
41:9c:c7:ee:49:ac:e4:79:77:bf:60:f3:4f:ab:5a:
5f:ee:6c:c0:2c:dc:4b:a2:40:d7:39:dc:bc:db:04:
70:c3:f8:bf:37:53:35:55:40:a6:05:e1:85:24:8a:
f3:86:1e:ed:a5:ab:10:61:16:c0:5d:5c:3a:98:c7:
b3:4f:d3:ca:1e:de:a6:4c:c8:7f:b5:e8:93:63:8e:
16:da:82:83:d3:96:c0:22:5e:b9:5d:3a:7b:63:10:
d7:14:03:77:ca:e2:ea:7b:67:26:f0:39:5b:9b:c4:
1e:3f:5c:2f:e9:f3:d9:33:5c:91:eb:c6:bd:ef:c9:
cd:6c:8e:01:5d:00:23:c5:2e:7c:8b:73:73:99:17:
c2:30:4f:e9:93:d3:2d:a2:f3:f6:7f:0b:b9:83:2b:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:26:16:65:48:1E:E8:49:BA:05:AA:A7:56:58:DD:15:61:A0:18
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4a:70:60:11:06:0a:c6:dc:67:cb:bf:64:29:9c:16:85:f2:
15:b8:f6:50:f5:ec:e1:a9:e7:4f:cf:81:a6:8a:65:31:5c:e1:
34:1b:b3:46:2a:5e:f3:38:d1:c8:89:0f:70:80:c5:45:67:a8:
ee:e7:85:52:e1:a3:68:55:a6:5c:74:bd:db:ce:93:79:19:a4:
21:ef:b0:8c:7d:5d:2e:fd:2e:50:da:7f:cb:88:ba:06:f7:0e:
e5:50:30:55:b4:b2:be:ea:8f:ff:15:7c:a7:53:b3:14:d4:6c:
26:e1:72:af:11:3f:50:e3:a5:f7:64:48:62:85:28:fa:e3:e9:
c7:a0:b1:00:7e:bd:24:a0:ea:5d:db:0a:43:7a:b2:fb:71:da:
b5:5a:6d:42:ef:f4:ce:71:45:f4:dd:31:f3:b7:a1:0a:e1:df:
0f:19:07:7c:ed:c9:bb:29:f1:a6:d5:7e:b0:82:ce:85:a0:13:
f5:8d:09:e7:68:4b:43:97:5d:b1:9d:24:8d:82:36:4b:51:34:
a1:ce:21:3d:c5:4f:4d:ee:c2:1a:dc:41:45:64:b3:73:71:6a:
31:c8:9a:3e:51:5f:d8:50:0f:f3:08:d7:84:b3:87:68:4c:b9:
96:71:63:fe:f3:05:f9:a4:c4:04:d2:1d:54:7e:2b:a7:f6:bd:
09:6e:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:47 2025 by rpki-client