Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier: B2GGo5J+fHTmgahuvaDKeWKHEb+rv2t9rTFToXt2WOc=
Subject key identifier: 99:18:3D:8B:F5:9F:8B:0E:8B:36:9B:0B:53:1D:C2:3C:94:83:AD:85
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 0481
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number: 0475
Signing time: Fri 31 Jan 2025 00:10:55 +0000
Manifest this update: Fri 31 Jan 2025 00:10:54 +0000
Manifest next update: Fri 07 Feb 2025 00:10:54 +0000
Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: R51a8V8LWXroVUmKs4doAgTExKYEkQEIOpusiRbvBSY=)
2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=)
3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Validity
Not Before: Jan 31 00:10:54 2025 GMT
Not After : Feb 7 00:10:54 2025 GMT
Subject: CN=679c150e-a64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:2e:0a:cc:5a:7a:b6:cf:3a:41:13:bc:e9:
2e:0f:6b:a9:ba:08:d4:fa:d4:d6:28:16:12:16:85:
3b:0d:10:1e:1e:d1:7b:8c:db:7b:4f:58:9f:c7:81:
2d:9c:71:6d:b3:3f:27:c1:42:5f:0c:ec:bf:3e:85:
ab:67:f4:4e:65:01:d8:24:1d:67:df:c4:9a:2e:49:
22:5d:06:b6:5c:45:8b:c7:fa:2c:c2:b2:b8:b6:20:
ce:7e:91:c6:23:5f:eb:3b:d8:49:c6:3f:eb:91:8f:
04:aa:ec:8d:e6:ca:08:b1:f8:65:17:84:76:9c:02:
65:81:a3:fe:51:f9:11:18:dc:09:7a:45:3d:cb:29:
c7:f1:5a:ec:74:df:5e:27:6c:1f:3f:49:e4:26:0e:
f7:22:af:01:da:19:e2:f2:1d:e2:e9:8f:20:c0:07:
c3:ce:ca:64:9f:e5:96:27:22:59:cd:fd:7b:9e:ec:
07:b6:80:3b:cc:4e:1b:15:8f:d4:7a:e0:b1:53:95:
92:18:bd:74:c6:4c:92:f8:fe:66:25:57:b2:29:fd:
c3:cf:7e:0e:a6:3b:5b:c0:cd:67:ec:74:90:76:5a:
6f:d4:82:58:c2:98:4f:8e:b6:f2:ba:d6:18:e1:93:
34:69:39:d2:02:e6:a6:56:d8:6a:13:7d:e3:93:46:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:3D:8B:F5:9F:8B:0E:8B:36:9B:0B:53:1D:C2:3C:94:83:AD:85
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:6b:e9:61:8d:a0:f2:1a:d0:d7:4c:20:1f:a3:19:60:ab:7b:
c5:c0:0b:80:95:b8:6b:f1:19:3f:44:42:31:1a:58:79:c2:8e:
96:c4:f1:dc:34:98:95:90:96:79:2b:cf:1d:17:a5:5f:5e:c9:
d5:85:46:3b:96:92:8d:62:87:03:fd:6a:1e:2b:d3:8f:c6:6d:
c8:c6:63:00:6f:f9:0b:3a:97:13:22:84:a3:f9:d8:a1:a1:40:
de:88:d0:49:0e:24:e7:53:98:7e:60:fc:05:32:92:88:d3:2d:
e9:fe:04:61:45:97:6c:5a:5d:cc:65:e0:7c:ee:41:09:0d:4d:
98:37:c3:10:ad:6b:b1:d1:55:52:26:d3:87:55:e6:a8:2d:0e:
3f:52:81:26:23:f2:84:50:35:5f:51:fc:3b:44:4e:4e:2d:c1:
d5:98:d0:1d:f7:65:04:da:3d:c4:fe:ae:01:f6:9c:9a:8c:08:
7c:0b:4e:13:4f:6c:73:5f:27:4c:17:22:b4:5c:df:46:78:13:
f0:2f:50:5b:99:6d:06:63:08:ba:8c:19:9a:11:f0:8c:ad:89:
93:96:fe:70:b4:0d:84:6f:df:95:cb:f1:36:66:2d:a5:f0:7d:
bb:31:91:0f:21:30:72:36:b0:14:05:fc:1b:38:4c:fc:6c:1d:
bc:da:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:08 2025 by rpki-client