Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json)
Hash identifier: 6Jl1k6gIJIC8EwVe8DeVCUk1cNPq7a4jUX2YYKMrtwk=
Subject key identifier: 95:B9:46:1E:3F:F9:7F:A3:F3:06:6B:9E:5B:75:44:78:41:12:DD:CB
Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 06:46:02 +0000
Manifest this update: Fri 31 Jan 2025 06:46:01 +0000
Manifest next update: Fri 07 Feb 2025 06:46:01 +0000
Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: 6L4s7kLR4LfQt80Z6rbJT1i0KvdPL5EFsKwT989gX1s=)
2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: Cu6EvKx5+axic2G9t78jCRZobiDqkcq6DwLktnKvujw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Validity
Not Before: Jan 31 06:46:01 2025 GMT
Not After : Feb 7 06:46:01 2025 GMT
Subject: CN=679c71a9-4fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:64:73:46:c2:e3:8e:c8:13:85:08:fd:03:
7b:5f:89:66:4f:f3:c0:6d:1a:91:b5:04:90:ae:3e:
ac:60:ca:d8:30:1f:c4:59:c8:25:c7:03:67:37:a3:
e5:4d:81:b3:fc:bf:70:15:49:81:13:6d:7d:2e:dd:
4b:9a:2c:a7:69:38:94:94:03:4c:e6:44:2e:8e:3e:
95:9b:1f:5d:39:f4:7a:64:2d:f7:8e:e6:23:f1:ae:
00:f0:6b:14:8b:55:1d:c5:81:55:5f:36:e6:25:57:
02:33:96:b5:60:31:cf:b4:e3:82:5a:97:d1:1c:81:
ba:1a:0f:ab:60:92:52:2f:30:4c:3f:92:9f:4e:2b:
1c:69:f0:3b:d7:8a:5b:25:b3:f6:85:4f:52:5b:fe:
f9:d8:d5:e6:48:35:56:3b:7d:bf:4a:42:c3:44:0b:
4e:50:9a:61:3d:ff:aa:57:eb:7f:f4:e5:cd:a9:0e:
42:bd:22:1d:14:08:2b:b7:7d:a6:09:42:6b:19:d6:
4d:3b:90:71:3a:37:ce:e0:a6:97:af:aa:4c:9d:cc:
27:5a:9a:fb:2b:82:72:49:bb:a8:7c:e2:ce:03:49:
4c:70:b4:2c:b8:fb:e9:2c:81:2b:ed:a0:6c:0a:00:
b8:34:7b:28:a7:af:86:35:c1:a4:b8:ef:1a:8a:d7:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:46:1E:3F:F9:7F:A3:F3:06:6B:9E:5B:75:44:78:41:12:DD:CB
X509v3 Authority Key Identifier:
keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:cd:a9:94:4f:71:35:ee:86:8c:29:05:8a:fb:e5:7e:85:
68:76:82:30:89:44:4a:b4:71:4b:ef:84:c6:0e:6d:5c:bb:a7:
c3:ac:e9:75:fa:69:72:1e:3f:58:58:25:ba:dc:a1:d9:69:9e:
c2:f3:45:2b:4c:22:38:61:76:b9:ce:81:fc:18:3a:58:d3:4d:
4f:bd:5c:cc:be:d4:ed:50:36:dd:93:35:a9:9a:10:5d:5c:8c:
a8:65:f9:01:d7:d1:11:e7:30:aa:c4:9e:96:b7:4c:3b:fa:04:
ef:89:1f:57:b6:56:86:ae:35:b6:3a:9f:02:e1:74:9d:39:93:
b9:c7:37:43:28:78:e1:c9:8b:4a:f2:26:be:d9:32:b4:81:4e:
7a:f2:0d:3d:6e:67:f4:55:35:42:07:ad:64:63:6f:fa:03:a3:
60:cd:8f:48:cf:78:a4:4c:a6:a8:87:94:19:38:ad:fa:91:2b:
68:5f:25:38:a2:a4:49:be:84:be:0e:6a:08:7f:a1:9d:dc:8e:
d3:8b:5e:fd:62:ff:ed:bb:0f:e4:06:c2:44:6d:7d:e9:f8:9f:
02:01:0b:5b:b5:45:10:36:d1:1d:bc:39:d8:f2:ff:e9:d5:1f:
5e:e9:0d:d2:c4:f8:25:81:af:14:11:3e:36:be:a4:5c:be:58:
da:f8:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:00 2025 by rpki-client