Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
File: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft (raw, json)
Hash identifier: 4TNQIcg1Nys9DvmpqP+Xn2082BNoFlk2Kfa7vVN1Vis=
Subject key identifier: 59:42:2D:5A:55:E6:1F:BA:DF:EC:91:D1:86:05:AE:78:EE:F3:45:BE
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 413A20980323C0BF8B69654B8F810578993A0046
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
Manifest number: 02B5
Signing time: Fri 31 Jan 2025 11:06:36 +0000
Manifest this update: Fri 31 Jan 2025 11:01:36 +0000
Manifest next update: Sat 01 Feb 2025 13:55:36 +0000
Files and hashes: 1: 3130332e3137332e3232352e302f32342d3234203d3e203538333439.roa (hash: VdYrRIXaalZFja4r2vfmeQxVdjoRkrrMoFXlD0zUnkk=)
2: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl (hash: HHISWg3n3p/4YYlT7xLUITm62i8GCPjAEoIwirw0wVA=)
3: 3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (hash: NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3a:20:98:03:23:c0:bf:8b:69:65:4b:8f:81:05:78:99:3a:00:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Validity
Not Before: Jan 31 11:01:36 2025 GMT
Not After : Feb 1 13:55:36 2025 GMT
Subject: CN=59422D5A55E61FBADFEC91D18605AE78EEF345BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:81:35:85:91:fa:ed:62:96:18:15:b9:34:
30:a2:bb:a7:1d:33:10:bd:bd:c4:80:97:4c:92:cb:
78:ef:c3:93:a4:0b:ff:49:8e:22:4a:da:76:9f:cf:
9f:4d:bb:9d:42:c3:40:e7:1f:53:b2:de:a4:f5:34:
b3:42:2c:74:e0:29:9e:17:6e:f9:33:3d:2a:72:51:
5f:70:55:00:7d:ab:a1:95:f3:d8:69:d2:89:de:32:
1b:9e:5e:7e:3e:d6:4b:44:25:b8:4f:52:fd:0b:0d:
81:71:b8:93:39:c9:49:d0:5d:07:a0:86:3a:91:96:
a6:58:38:f2:34:5c:ea:3e:17:fb:02:9e:c8:e1:d1:
8b:97:6f:96:29:9e:f4:bb:ad:23:d6:79:fc:a1:57:
07:75:d5:26:22:32:cc:0f:d0:71:e9:1f:11:08:43:
52:51:f6:1e:c8:5f:d8:53:0b:f5:64:61:f6:11:c7:
76:3d:fa:50:9a:e6:5c:e8:d9:0d:6f:e5:e3:9a:e4:
32:96:4a:26:3c:8f:24:00:da:1c:5b:be:0e:99:d6:
d7:60:e4:8c:df:da:cb:f0:0f:1c:81:0f:fa:6f:f8:
8d:fe:35:7e:78:5d:f9:72:06:83:74:8e:d2:5d:bb:
6f:e2:21:27:2c:a9:34:8e:90:8c:25:ef:53:d4:c5:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:2D:5A:55:E6:1F:BA:DF:EC:91:D1:86:05:AE:78:EE:F3:45:BE
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:b2:1c:2d:3c:7a:17:82:88:31:5d:46:29:57:58:5f:a5:
57:2f:e9:cd:8f:78:bf:73:57:fc:14:de:c9:b3:e3:1d:5e:60:
4c:ff:eb:ba:fb:1f:14:67:69:31:13:66:fd:66:9a:4b:32:a9:
68:77:24:05:a3:36:3e:ae:13:eb:50:32:e1:81:eb:c4:eb:5c:
1d:43:76:f2:c6:67:56:d9:9f:cf:cd:63:f4:b2:c0:a1:c6:81:
b0:4e:75:8f:8f:70:1b:e7:66:87:35:27:64:8c:c9:b9:19:9b:
a5:0e:85:4a:78:b8:04:dd:2b:6e:62:46:cd:47:b8:40:3b:19:
cf:76:f0:61:cd:9e:5b:24:6d:62:92:c7:ca:44:1a:61:55:e9:
e1:2c:76:31:8d:33:6d:a7:04:bf:ca:d0:58:a6:56:7d:5c:e2:
bf:df:f6:7c:73:8c:68:d8:58:cf:e4:ce:0e:d1:cc:14:50:50:
13:7a:9b:5a:86:f6:97:26:ea:56:12:ed:47:78:96:8b:30:2d:
07:49:53:c7:d1:db:fa:cd:98:14:30:c7:ea:17:b6:42:8a:25:
af:17:74:b0:a1:92:7a:27:39:12:ea:91:c7:c1:5e:93:a6:ec:
86:58:fd:a4:a5:50:f9:e1:f1:6e:5f:00:bc:a8:6d:cb:15:32:
9e:72:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:17 2025 by rpki-client