Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File: rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier: bLQN6drBfPsuNeUtXmVlkQXXSvmJgBYnKhgIPkeHOQk=
Subject key identifier: 2F:40:D2:DB:64:80:B6:AF:75:2C:DA:74:3B:60:CD:E9:CC:9A:DC:36
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer: /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial: 0EAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number: 0EA7
Signing time: Fri 31 Jan 2025 17:39:45 +0000
Manifest this update: Fri 31 Jan 2025 17:39:44 +0000
Manifest next update: Fri 07 Feb 2025 17:39:44 +0000
Files and hashes: 1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: 6wSZMqoUPvp7Aga3ZyPkiTUtQySzyGlpOjv+QD4BddQ=)
2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: +5h350Entxop10VDTkTCS9JuaJOuqYNRDCA3VkMIaEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3759 (0xeaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Validity
Not Before: Jan 31 17:39:44 2025 GMT
Not After : Feb 7 17:39:44 2025 GMT
Subject: CN=679d0ae0-b311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:f6:fa:37:74:02:39:05:8f:a1:b0:fa:f0:
8e:27:9e:76:da:8d:fb:64:a7:7c:3f:56:48:54:21:
b8:2b:2f:d9:a9:46:e4:f7:17:85:8d:ea:65:f7:62:
2f:bf:88:6d:8a:08:e1:4e:b6:d7:43:b0:23:e4:92:
2b:fb:f7:51:42:f0:e4:a6:e6:c6:69:bb:eb:82:5f:
32:c1:01:fc:df:34:0d:8c:cb:69:9e:8f:c1:4e:f9:
70:14:82:c9:5d:d8:75:69:00:13:96:59:aa:b8:60:
2a:3d:ec:f9:7d:85:eb:3b:e4:1d:89:62:ce:14:f0:
39:7e:f0:b6:a3:01:e2:ce:6e:4b:a5:5d:05:52:43:
2d:da:b0:95:3c:d7:a2:47:2d:03:3d:c9:74:41:32:
6a:23:0e:de:61:3e:a9:e9:68:28:ff:1d:5f:19:90:
9a:63:fb:ec:85:49:c9:a2:62:47:2b:e3:af:4f:7c:
09:5c:8b:86:3a:43:5d:26:62:7a:7c:7d:cc:50:ba:
e3:af:72:38:42:d6:71:18:ce:b8:4c:15:50:eb:11:
74:91:77:2b:59:f4:b7:c3:63:06:7f:3e:f3:60:56:
1e:26:a9:02:36:c0:61:93:5a:df:4a:f3:ac:82:f5:
9a:08:d4:83:b2:98:02:38:dd:df:4f:90:2a:03:57:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:D2:DB:64:80:B6:AF:75:2C:DA:74:3B:60:CD:E9:CC:9A:DC:36
X509v3 Authority Key Identifier:
keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:ba:5d:bf:11:78:97:6c:a7:6b:fe:f3:97:0c:b5:5b:ff:
b6:35:06:3b:9f:aa:0e:44:bc:f9:42:db:ec:d7:8b:58:60:12:
78:1d:37:33:dc:95:08:c2:f4:0e:85:ca:9f:87:6b:39:d4:da:
18:d6:6f:4d:cc:c4:5a:e3:d7:0e:70:09:d4:f4:7e:c3:cd:bb:
3f:4d:75:0c:10:f2:85:bf:cb:13:69:b7:9b:96:23:fc:aa:7f:
5e:dd:89:8a:45:a3:a0:a4:a4:32:6d:ae:04:b8:9f:3e:c2:7c:
57:84:11:ac:b3:9f:f9:b9:36:95:76:17:bf:ab:a6:54:04:81:
88:d3:e4:32:1d:8a:82:b3:49:94:f6:e7:a8:04:5a:9d:e7:40:
fe:ff:cb:2f:ad:af:fc:45:cc:05:56:57:4f:4f:50:c1:65:61:
c4:ce:ce:01:48:6b:e7:8f:f2:8f:66:4a:22:f4:28:4e:a1:66:
0e:4f:ab:86:fb:8b:be:91:a2:20:2a:09:e1:61:b0:bb:a5:5e:
9b:da:65:6a:ec:95:d6:9b:d8:9d:2b:b4:ea:eb:d4:ce:a4:f0:
75:08:0e:c9:af:de:60:91:94:49:76:da:54:94:48:d1:59:a9:
45:d5:97:ae:77:87:b9:ea:b2:ac:90:24:bf:9a:e6:30:85:f4:
a1:eb:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:11 2025 by rpki-client