Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json)
Hash identifier: GRNRSGUUwjNnzpHMJjromFxKjTKvnp5kCHJJWGUa21o=
Subject key identifier: FE:F6:FA:41:AF:9C:41:06:26:77:71:1A:1C:BA:CE:8B:54:7E:DC:A1
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 0360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
Manifest number: 035C
Signing time: Fri 31 Jan 2025 01:01:39 +0000
Manifest this update: Fri 31 Jan 2025 01:01:39 +0000
Manifest next update: Fri 07 Feb 2025 01:01:39 +0000
Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: oLfiavFKYyW3e/iD67XyKMqIkeEi1cWUF5/Je42noWc=)
2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: guTq71O2LSxBtq9wp1j3np+TPnuYZq23yDrd9yyvAgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Validity
Not Before: Jan 31 01:01:39 2025 GMT
Not After : Feb 7 01:01:39 2025 GMT
Subject: CN=679c20f3-05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:03:44:9d:5e:55:82:54:5e:e9:58:f4:0b:
55:3f:5d:12:9b:d4:80:45:52:6d:01:2b:2f:02:d8:
d7:66:3a:bc:63:15:dd:b3:c3:30:90:6b:e4:e0:a2:
32:d5:41:be:17:ae:48:2e:33:e9:ef:a5:d2:92:0a:
30:5c:93:7c:32:c6:c3:d2:d5:81:67:21:46:0d:df:
0e:a2:25:f7:ea:e1:63:50:d7:05:56:62:79:c8:42:
1a:ca:0b:80:3f:26:07:0a:b4:d5:53:51:63:b9:b6:
1e:17:43:ab:8c:f8:1f:94:6a:cd:f4:f6:17:5c:97:
3a:3b:53:27:36:31:7a:e3:69:e7:31:09:71:65:9e:
63:33:3d:c9:1c:19:13:76:45:2e:83:e1:6a:ad:97:
75:65:d0:e7:67:35:23:53:59:71:83:ac:cd:d1:87:
52:62:cc:de:0a:37:c8:c7:44:c5:1c:e1:fc:4a:40:
1b:b1:29:1d:ba:64:a5:97:41:17:c4:a6:76:b6:c4:
e6:87:2e:43:2f:68:f8:a8:f3:73:32:21:30:69:ba:
63:69:4e:d4:6c:2b:04:36:da:95:ea:12:12:cc:c5:
9d:45:5b:06:ab:47:00:72:1a:05:5a:6f:03:90:6a:
f7:c1:3f:dc:23:79:04:2c:eb:c8:ec:a7:90:43:48:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F6:FA:41:AF:9C:41:06:26:77:71:1A:1C:BA:CE:8B:54:7E:DC:A1
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:32:04:13:6f:05:9e:16:ef:03:07:fc:73:c8:2b:68:ac:20:
71:a5:22:8f:e1:97:0d:8a:93:d9:22:9d:c6:9f:1b:94:c2:f9:
26:51:b1:9e:32:ac:66:52:78:49:5f:bc:36:66:5d:ef:f4:cf:
c9:46:20:ad:3a:c1:4a:dd:5b:09:49:e6:ee:27:23:39:b9:91:
a2:d4:d3:c4:93:31:db:23:02:90:4b:a2:b4:0f:06:55:ed:14:
33:58:62:b2:d6:7d:3c:8a:a0:d9:25:9b:05:1d:d0:39:ec:c6:
50:80:9b:28:73:eb:61:48:e2:52:03:6a:85:ab:8b:2b:c8:a6:
2a:e5:9a:b8:79:53:a8:24:de:22:24:ec:39:e3:bc:e3:de:b3:
ae:c4:7f:8b:c7:84:4b:ba:41:6b:60:4b:01:2c:46:a5:b2:37:
ba:40:98:5f:6f:ab:d3:c8:bf:b1:27:90:29:30:a8:65:96:78:
97:49:a3:65:aa:48:de:79:09:d5:c2:78:5e:39:9b:96:1d:11:
29:29:d5:44:9d:4b:05:3c:c2:09:8e:74:97:2f:33:a2:13:f4:
3e:6d:e3:6e:83:08:2f:38:e5:d0:c3:bb:41:2e:1f:f9:2b:88:
8b:5a:48:65:ab:f3:fd:f2:bb:b1:0d:00:05:1e:cc:ee:00:0e:
cc:15:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:04 2025 by rpki-client