Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: QwlSixOvF6yW8qbaFCLvXo2lGus51Dg7+iiP/58AHOQ=
Subject key identifier: 60:A8:BC:15:DF:36:05:52:B3:2F:C7:B9:6D:C7:87:50:80:BA:DF:3D
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 0118
Signing time: Fri 31 Jan 2025 03:56:05 +0000
Manifest this update: Fri 31 Jan 2025 03:56:05 +0000
Manifest next update: Fri 07 Feb 2025 03:56:05 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: FK+mMsGHlsYjUunQ3jxS+IjNW31B3O04AF8IENtmDqI=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: YH1Nm5sXHdp6f2aOSmPXsxfDGLzWgDg+3RJO69rwbXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Jan 31 03:56:05 2025 GMT
Not After : Feb 7 03:56:05 2025 GMT
Subject: CN=679c49d5-e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:26:3c:92:e0:be:22:25:ee:f2:71:88:6a:
3e:49:54:88:4b:86:fd:d8:fd:56:88:ec:79:85:ec:
0f:67:0e:53:ac:dd:e2:97:8c:b2:67:45:db:5b:34:
3b:ef:cb:d3:f6:ee:ef:15:66:77:ba:11:ac:41:0b:
f6:98:ff:f8:78:20:9f:a2:94:b6:86:9b:59:dd:01:
56:41:46:2c:e7:90:91:87:26:bb:f6:08:01:e5:44:
73:ee:f8:f1:55:0f:1f:c0:10:e7:ce:2e:12:1f:51:
66:39:f3:3f:c5:51:7f:0b:76:00:60:d8:41:cc:00:
52:54:7b:6e:b3:ce:a8:4d:0d:86:21:65:4c:71:c2:
88:aa:b0:9b:78:5f:9b:f9:8f:12:66:53:bd:89:e3:
c4:02:af:f6:8b:c6:c5:e7:87:9a:60:60:18:7c:f4:
6c:cd:51:0c:1d:f9:b9:0e:bb:23:7e:4e:5e:fc:5d:
b2:ee:6d:30:a8:6a:67:59:b5:5f:ae:01:ac:7c:b7:
07:a8:c6:7f:81:64:24:d3:cb:d1:b4:38:53:4a:fb:
20:b3:08:fb:2c:b0:1a:25:4e:7d:4e:4a:d2:69:f3:
71:58:b6:36:63:7b:02:8c:93:5c:d9:fc:db:0c:26:
5a:70:26:0d:de:41:6d:09:75:9f:e6:66:6e:56:0e:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:BC:15:DF:36:05:52:B3:2F:C7:B9:6D:C7:87:50:80:BA:DF:3D
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:98:74:34:48:41:10:1e:4f:44:f7:a2:7c:6c:b2:81:8b:b5:
c7:a7:0e:a4:03:f6:26:fb:1f:82:1d:9c:c0:c1:cf:0f:87:59:
31:54:28:1b:05:6d:c2:13:6b:6c:ab:4a:2f:74:eb:76:3c:a5:
f0:7c:a0:09:9f:5e:21:94:38:81:cc:a0:04:09:55:ef:e7:97:
4e:70:9e:de:f5:dd:8c:b0:be:44:ac:39:45:86:df:d9:6b:be:
71:9f:cf:55:4b:f8:c4:bd:41:fa:b4:2b:ec:78:23:76:47:68:
ea:e1:56:06:5d:ba:37:e5:6f:6b:1c:b3:f9:c5:b3:95:bd:79:
e0:b1:5f:bb:ba:e1:37:a4:3f:df:a7:18:d2:7e:94:69:b3:b4:
dd:4f:d2:c0:f0:70:70:a9:c5:87:3c:f1:0a:91:44:79:6d:9d:
63:d0:62:d2:2d:ba:6b:76:f5:27:6b:91:94:d1:4d:06:e5:a7:
77:eb:90:2c:49:60:bf:8c:7b:a0:50:b7:40:67:31:a3:41:9d:
d8:24:33:17:0e:f3:3a:ae:32:f8:96:6c:16:d6:45:13:26:38:
11:31:93:5c:7b:19:c9:77:9a:d3:b4:7c:c7:e4:a8:8b:79:37:
6b:84:9b:35:48:b0:b4:00:37:f1:a6:27:78:83:2b:ca:0b:c4:
65:11:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:37:45 2025 by rpki-client