Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json)
Hash identifier: +36k5jmBS0YGejVWb3vDVrON4kQ56b/qYbqnkdRPerg=
Subject key identifier: E7:D9:1D:3C:17:18:6F:32:10:8B:C6:78:6C:BC:40:93:55:A7:43:58
Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
Manifest number: 1ECF
Signing time: Fri 31 Jan 2025 16:06:01 +0000
Manifest this update: Fri 31 Jan 2025 16:06:01 +0000
Manifest next update: Fri 07 Feb 2025 16:06:01 +0000
Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: 8k9L7eWbdDJ0SujGFQ98wj+b0G/pOTKoI7pMwO9K/e4=)
2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: oRm2blLyiJS/QAfKc6f3YExIUJkkRHUJrPUQp9W2Q+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Validity
Not Before: Jan 31 16:06:01 2025 GMT
Not After : Feb 7 16:06:01 2025 GMT
Subject: CN=679cf4e9-1c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:c3:0b:ff:67:a7:12:ab:22:4d:97:db:08:
aa:42:a2:57:02:26:8c:75:51:b6:08:06:40:1b:65:
02:95:2f:61:a3:c0:50:78:61:26:2c:a5:d4:73:d4:
eb:b6:ac:53:54:18:9a:a6:91:b0:67:80:2f:4e:50:
2f:94:88:f0:15:75:46:95:8c:9b:b6:f3:e2:b4:8c:
33:10:38:3b:ef:72:c5:17:ca:be:ed:4e:ee:af:47:
29:5c:e5:37:0b:44:74:ac:f7:c8:d1:03:3b:18:11:
82:d0:4b:95:cd:f3:b5:e3:51:e6:1d:f8:78:50:14:
0b:20:34:fe:62:88:77:15:1e:31:3b:e5:2d:1a:d5:
c7:96:76:24:45:8e:95:41:25:ec:53:8c:82:9c:fb:
5d:16:5c:c2:04:ea:6d:49:8e:ed:a9:18:6a:ad:57:
a5:00:ef:d4:f0:40:57:0f:c0:1c:9c:61:48:01:00:
77:8f:fb:df:46:a6:b7:32:85:9f:b0:eb:64:98:21:
b2:3a:55:f3:95:dd:0d:b5:59:61:75:e3:34:3b:2f:
bb:32:56:2a:1e:56:c6:79:0b:36:ef:2c:05:f8:46:
7d:db:47:cb:58:05:81:cc:81:7c:49:5a:9c:53:f7:
2d:73:78:61:b8:cc:90:40:bb:2f:2f:85:24:8e:64:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:1D:3C:17:18:6F:32:10:8B:C6:78:6C:BC:40:93:55:A7:43:58
X509v3 Authority Key Identifier:
keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1b:42:0a:a6:ab:b1:01:4a:c5:aa:ff:e3:ce:df:d1:ef:0e:
fc:d9:a4:26:7d:36:59:b3:6c:0c:94:16:d6:04:4f:a6:49:86:
eb:85:05:88:95:ce:a4:c0:cd:25:61:50:43:15:a6:48:c2:49:
e5:ce:f6:1f:ad:af:21:16:09:29:ef:5c:19:ee:b1:d4:82:07:
6b:11:f2:9c:34:f9:74:0a:3e:27:0c:6e:b4:8b:b3:6f:fc:5a:
ee:25:a8:5b:c4:ed:40:4d:84:11:4b:18:15:06:48:e2:cb:a5:
f5:40:a2:7d:f2:d4:27:3e:10:0c:54:33:d7:f8:63:91:73:88:
77:7e:26:09:67:24:3a:e0:ed:db:76:1e:e9:f5:ef:77:82:d2:
69:43:e4:fb:94:7f:34:d9:07:b6:62:98:0a:4b:2e:f3:42:9f:
20:08:3b:0b:b1:47:f0:21:50:42:10:41:a3:cd:34:d6:50:b4:
85:91:fe:1c:7c:60:ea:b7:12:3b:07:00:db:5b:de:92:20:29:
aa:49:ec:50:73:6f:cb:f7:53:7b:03:53:98:3e:7a:3e:9c:e2:
40:9e:6e:32:9a:f1:1f:3e:db:d6:ef:72:38:bc:c4:9d:dc:db:
eb:ae:fd:98:5b:7f:5f:3c:81:d7:90:90:82:a0:b5:99:ff:40:
0a:12:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:40 2025 by rpki-client