Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json)
Hash identifier: QYck1sX+Zf6m+ILYG8h4VT90+xStvlqd/ZbvvHlmbtk=
Subject key identifier: FE:60:3B:6C:CA:35:C1:9C:1D:08:05:85:34:14:30:68:1E:B6:B0:6D
Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
Manifest number: 019E
Signing time: Fri 31 Jan 2025 02:38:07 +0000
Manifest this update: Fri 31 Jan 2025 02:38:06 +0000
Manifest next update: Fri 07 Feb 2025 02:38:06 +0000
Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: LEQLtIPJ3/nm5YZP9/UQOt3c2Lv2KcHuBq0tZv2fQcg=)
2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: HjT8VM2XqnkqsOJWOxm5J3xWXDt5memxcVZ9AVhTnyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
Validity
Not Before: Jan 31 02:38:06 2025 GMT
Not After : Feb 7 02:38:06 2025 GMT
Subject: CN=679c378f-e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:5b:dc:f2:6f:dc:d8:b0:e5:3d:79:d4:c3:
23:26:97:51:e0:ca:82:8b:6c:fb:e1:af:19:28:6f:
21:e9:59:7c:28:92:5d:24:57:3a:1d:ba:30:54:e9:
d1:95:7c:2b:91:76:e9:d4:24:37:76:c0:68:9a:63:
b2:6d:3c:05:78:27:47:e7:42:df:ce:18:28:2f:18:
96:7f:4a:2a:b9:44:41:58:5e:ca:19:39:07:c7:ec:
15:e6:04:51:33:e7:d5:6b:d3:f6:4a:2e:c9:f6:31:
4a:b6:f9:c2:57:7e:2c:d3:a9:05:0b:3b:79:bd:e0:
a8:ba:5e:5c:88:34:c0:ae:03:d3:80:af:dd:fc:86:
87:a2:94:b5:8c:5e:6f:6b:f2:94:6c:61:5f:38:64:
ed:b0:a9:cd:18:fb:b8:3d:7a:2d:58:59:7f:ce:1b:
26:be:67:60:d2:cb:cb:f0:61:7f:e0:83:0f:99:a3:
51:90:f1:5c:fd:44:ce:54:1f:47:59:b2:cc:10:4c:
ec:d7:a9:2d:95:63:1d:26:21:86:56:bf:b9:3b:c5:
95:3e:a3:aa:a1:14:4f:ba:64:80:aa:cf:59:7b:1e:
03:e8:c6:72:7d:8b:8e:b6:36:2c:53:c7:36:bf:7f:
bb:e3:9a:d5:13:1e:b1:ad:7b:d3:ea:f9:da:75:d2:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:3B:6C:CA:35:C1:9C:1D:08:05:85:34:14:30:68:1E:B6:B0:6D
X509v3 Authority Key Identifier:
keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:24:e8:c9:8c:fc:e7:4d:f0:8f:69:ec:eb:be:99:aa:83:49:
f0:3c:1b:45:15:0b:79:19:ee:0b:5f:1f:74:24:22:38:b1:3d:
41:c4:33:2f:9c:13:cf:c6:37:4b:38:f3:75:7d:0c:72:95:f0:
47:b3:09:b5:db:c1:7b:d7:38:79:4d:9c:cc:09:9f:46:ed:14:
b5:7e:47:d1:f6:f2:97:6c:e3:cf:b7:37:c0:39:7d:ba:34:5d:
a9:af:0b:02:97:29:96:21:7c:c6:b7:40:dd:19:fe:f4:bb:a2:
eb:eb:e9:6c:33:27:28:93:4e:16:fc:27:0a:3a:34:ea:93:45:
39:c7:1a:53:02:12:7d:a4:c0:b8:db:0c:d2:ad:2b:7b:ed:c1:
8b:a1:24:d6:0d:33:8d:32:8d:cf:0d:89:54:a8:7e:0a:97:a1:
c5:8e:9b:cf:fa:a1:67:ed:50:76:55:60:5a:be:f5:35:6c:2a:
ae:55:aa:d9:87:e2:50:51:ad:1b:a5:fa:13:65:ab:88:e9:38:
6c:2b:91:19:54:6d:83:ac:c1:ad:28:ec:51:63:0d:20:dd:77:
80:4d:51:75:7a:7c:c0:78:16:3f:9c:58:36:3a:e1:e6:a0:1b:
21:c3:81:af:4a:ea:14:71:71:33:fe:37:0d:d8:e8:56:05:85:
c8:13:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:21 2025 by rpki-client