Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
File: F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json)
Hash identifier: on7btfc/CB6f4xjmAPydAkRoK6yj9/IyO6yJu/MhVzo=
Subject key identifier: 24:45:EC:C1:2F:D0:97:A9:28:2B:A7:C0:A9:32:E3:DC:01:D6:6B:59
Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
Manifest number: 010F
Signing time: Fri 31 Jan 2025 04:03:15 +0000
Manifest this update: Fri 31 Jan 2025 04:03:14 +0000
Manifest next update: Fri 07 Feb 2025 04:03:14 +0000
Files and hashes: 1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: 5LFfAfWiirYGEyAPn8tUOazZtElx3mgHpBkhoHhls+Q=)
2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: ImURD0YXIXR8XStDPLYGz5z7015ogkyNT0YFkxGE7dU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Validity
Not Before: Jan 31 04:03:14 2025 GMT
Not After : Feb 7 04:03:14 2025 GMT
Subject: CN=679c4b83-3127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:9a:2c:eb:c9:1b:c6:9e:62:da:ab:a7:e3:
b3:a8:54:0a:41:d5:b9:bc:50:1b:2d:ca:19:bc:19:
47:eb:43:52:ef:9b:c4:81:89:e4:2e:56:51:a1:01:
6b:c0:7e:d5:4c:f1:c8:fa:57:b8:c1:ad:db:d4:7b:
ee:d9:56:25:4a:e0:98:28:c4:ae:23:c3:90:b6:57:
e0:07:b3:63:13:70:08:1b:11:9b:30:9b:11:01:cd:
2b:7a:86:0a:67:5a:99:3d:3d:3b:e3:6e:56:75:c2:
8b:5c:11:29:fe:07:79:4c:cd:df:bb:db:81:c4:c2:
ef:5c:54:86:29:8f:58:8a:04:d1:fd:23:59:51:b3:
bb:57:6e:9e:be:98:5d:d2:3c:34:79:bc:49:a1:c3:
1f:c2:cd:5b:78:ef:0d:67:88:37:2a:25:25:39:de:
4a:9a:0a:79:0d:ee:b3:0d:cc:96:6c:bd:bd:c2:f2:
ea:37:ff:ca:41:6d:9b:f3:ed:30:bc:77:0c:3c:c1:
ab:ef:c9:75:b8:cf:70:dc:0d:db:11:57:21:fa:8b:
b6:3f:ea:25:3b:2f:af:72:39:26:46:47:27:de:bf:
e0:d9:d2:16:8d:60:5e:e3:8c:42:03:dd:c3:67:65:
09:0d:8f:49:86:0a:bf:42:ab:18:8e:47:76:ae:43:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:EC:C1:2F:D0:97:A9:28:2B:A7:C0:A9:32:E3:DC:01:D6:6B:59
X509v3 Authority Key Identifier:
keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:53:fe:08:18:c7:b1:f5:09:6a:5a:a4:4a:ab:06:3b:ad:
1c:7e:bb:03:62:ee:04:94:8a:dc:22:c1:8e:2b:34:70:da:f4:
4c:de:49:67:c4:73:ef:2d:9e:da:16:ad:44:07:fe:13:28:91:
8a:19:56:57:3e:13:59:f7:af:2d:38:18:79:db:6a:44:e4:6f:
df:d9:66:75:46:52:b9:35:7a:98:da:26:36:ea:db:90:a8:5b:
05:ae:86:85:97:46:dc:53:67:1b:5e:49:92:99:6a:50:8f:af:
18:32:02:9f:f8:3d:81:73:9b:fc:d3:b4:2f:36:53:ef:b4:dd:
38:66:ca:fc:eb:4e:46:c6:4b:ba:e3:3b:4a:1a:aa:93:1f:3e:
8e:9c:c4:2d:06:c8:c5:22:c5:fa:d0:d6:ea:a8:73:48:2b:db:
ad:4d:04:68:e2:58:22:a5:1d:25:5f:a6:69:03:6d:56:39:59:
7e:f1:ce:a2:0b:7a:50:21:9c:2a:69:a3:09:d9:cd:7d:93:1e:
c7:9f:47:b2:49:af:2d:79:2b:20:e8:59:35:11:85:3b:18:1d:
6c:d5:bf:ce:f1:51:f8:d1:6b:33:cb:eb:40:e4:1d:18:b5:94:
0a:5c:93:f6:af:04:7d:da:96:c0:1e:86:88:6b:e3:0f:2f:d7:
67:d4:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:13 2025 by rpki-client