Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier: Tlwgi0O/REZSoFDBiVsWx289SCsLCe8iEVJ2ufY7SIE=
Subject key identifier: C9:2D:42:54:F1:E9:BF:9A:61:D1:DF:A2:19:6A:17:E5:0D:A2:49:5E
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial: 0625
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number: 0619
Signing time: Thu 30 Jan 2025 22:44:29 +0000
Manifest this update: Thu 30 Jan 2025 22:44:29 +0000
Manifest next update: Thu 06 Feb 2025 22:44:29 +0000
Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: SRXevuYs474y47+H5a1fxLG9A0BnlDKJJ6/okqRkBsw=)
2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: H4rCHNTwrLDXBPWNh+1x9w51oi/Ty9c8TNS+dkVYHKE=)
3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: OAOhBdws2Og/Ca7gVwngPo7rjcHZWaqTFgTJSHrV1uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Validity
Not Before: Jan 30 22:44:29 2025 GMT
Not After : Feb 6 22:44:29 2025 GMT
Subject: CN=679c00cd-648f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:ba:93:4e:26:2b:2e:7c:77:ae:66:ef:14:
fc:3f:90:5e:a6:d9:3b:82:45:29:ea:90:4e:a1:fe:
ad:ce:ff:eb:5c:85:f9:00:8a:37:c3:d5:d1:f5:5d:
92:a3:7b:16:a8:e3:1b:e2:7e:9f:00:98:60:7b:d5:
1b:16:4e:65:25:4c:98:2b:ea:93:3a:ab:26:a7:3a:
91:e8:65:11:02:44:ac:ad:a1:65:b4:16:8f:5f:e5:
af:38:44:c6:d0:e1:2d:e5:27:91:54:1a:13:ba:52:
ae:ea:d8:a2:29:f3:61:34:e4:d2:fb:49:8a:b9:e2:
35:95:19:91:8d:d9:f1:b2:4c:d5:b8:81:c4:72:0d:
07:81:74:cb:4a:9e:74:ef:83:bf:bf:55:7b:a9:6d:
68:e7:c4:da:d8:31:82:e9:30:ff:03:05:f3:35:02:
61:fc:06:50:4b:af:e3:5e:a4:af:87:3f:f4:bb:5e:
9e:3a:1c:41:3c:36:f9:06:9a:cb:5e:46:3a:53:6d:
8b:62:26:47:8e:fe:85:31:cf:56:1d:e7:05:a9:a9:
a5:17:f6:b3:07:ef:3f:93:02:1b:95:55:18:29:f0:
69:ae:63:4c:f9:be:34:eb:07:5c:bd:00:6a:f6:7c:
88:a7:be:6c:00:e8:67:43:55:1c:33:28:b9:3c:6a:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:42:54:F1:E9:BF:9A:61:D1:DF:A2:19:6A:17:E5:0D:A2:49:5E
X509v3 Authority Key Identifier:
keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6e:6e:e9:7a:9d:52:f6:14:3a:3c:24:30:c2:02:94:8a:6f:
ea:ba:89:1c:b9:e9:df:95:86:7a:3c:70:39:a6:1e:1b:eb:d9:
97:b3:12:55:56:3f:53:ea:a7:b8:8d:5b:ce:b1:23:8d:4e:50:
25:95:81:c0:46:8c:ba:aa:c9:8b:f1:af:92:a0:43:26:c1:77:
fa:03:9e:38:1c:33:a4:5a:97:3c:17:4f:69:8b:b6:96:45:f4:
bf:4f:16:a1:db:28:3b:2b:86:a1:5c:6c:9a:ec:b9:12:00:04:
fd:56:cf:13:13:33:bc:2e:58:0d:6c:71:b1:ce:f1:cf:bc:bc:
a2:7f:1c:f8:ee:7e:f6:72:72:6e:83:2e:72:f7:95:d3:65:89:
c6:e0:5c:cc:46:07:b1:96:fe:0f:56:42:f2:c5:60:81:50:ab:
fb:54:bc:4e:46:bd:b0:fa:dc:8f:f7:9c:4a:4e:25:6e:31:a6:
d4:cd:f7:fe:06:f3:4e:1e:c9:b0:c3:39:ec:45:dd:b8:9d:f4:
b8:32:27:72:8d:1f:25:fe:37:cc:3f:fd:6c:84:e6:35:90:b8:
12:93:3a:9f:cc:e4:81:b0:af:60:89:d0:65:ac:c6:18:81:f5:
2f:2e:c7:2c:02:a3:0f:bd:9d:5d:49:f1:f8:f6:3e:41:af:a2:
2a:29:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:34 2025 by rpki-client