Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier: NR62iQzE/WMRnXswustaWJ5lExrH9UUyYwPAUQ0a/gQ=
Subject key identifier: 6C:86:7C:7D:E7:8F:84:84:B1:58:70:C0:B1:B1:C1:74:2F:F7:D7:C6
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 03:56:26 +0000
Manifest this update: Fri 31 Jan 2025 03:56:26 +0000
Manifest next update: Fri 07 Feb 2025 03:56:26 +0000
Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: 6kSqyD1fhQD51jP7er8f3UuLuoNzzOwDbPEJqAx3VFE=)
2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Validity
Not Before: Jan 31 03:56:26 2025 GMT
Not After : Feb 7 03:56:26 2025 GMT
Subject: CN=679c49ea-8488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:b3:16:7d:6c:f5:10:2d:eb:54:d6:04:ba:
21:ba:b5:17:fc:c4:e3:c2:d0:3a:bc:1a:2a:b9:ad:
e0:75:e2:6b:5b:6f:a3:0c:48:85:b1:66:ba:22:a1:
ee:fe:2d:1b:14:74:cc:25:7b:e2:5d:6c:67:16:19:
8b:9c:d4:86:58:c8:b6:a6:d4:14:36:86:b1:4d:65:
54:7e:14:e0:d7:d3:98:70:8f:ba:0d:b5:6e:a5:e9:
15:03:69:41:21:07:a7:84:7a:b3:ea:d4:10:ba:2e:
d3:28:0a:5d:8f:7a:56:8a:6e:77:98:dc:78:0c:01:
13:42:4c:4c:06:5e:06:53:b0:59:62:11:21:71:71:
ab:99:c8:96:fe:34:e9:cc:09:e8:45:65:7a:88:f5:
a2:24:9e:75:1c:25:91:fb:78:ce:1f:a9:75:35:48:
50:e3:37:94:e7:de:e1:b5:d2:0a:ad:49:e9:c1:0f:
8e:19:ff:8f:4e:c0:fe:55:bf:af:56:37:1a:6b:c1:
4b:b8:8b:e3:e0:32:e2:dc:fa:a5:c2:9d:99:73:37:
be:62:e7:d8:88:a6:b6:0d:f3:58:20:b9:d4:d8:1a:
f0:97:9e:39:0f:bb:b0:08:52:36:94:57:95:9d:71:
a4:47:a3:a7:55:d4:f9:02:94:bc:37:3f:1c:28:42:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:7C:7D:E7:8F:84:84:B1:58:70:C0:B1:B1:C1:74:2F:F7:D7:C6
X509v3 Authority Key Identifier:
keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:0c:1b:9f:e5:31:b0:ab:96:16:71:98:72:85:ac:50:ee:e2:
88:10:fe:00:07:2a:46:8a:91:fd:24:72:24:8a:d1:b6:85:6a:
55:0c:d6:91:3d:e3:3a:c6:60:7a:6a:09:04:a7:c9:94:06:1b:
2d:e4:bf:25:5f:f8:0d:b1:54:b5:0e:86:c6:31:36:0d:5f:ad:
8b:36:c5:a6:b5:69:84:b1:4d:56:a1:a2:81:16:91:f8:3f:77:
7a:40:01:b6:84:c3:13:3c:aa:8b:11:53:eb:26:07:82:38:83:
e1:df:b2:ac:6d:7e:85:aa:2b:7d:fd:47:d4:9d:aa:bf:ca:62:
73:fb:35:bc:d0:8b:7f:1e:51:3c:04:70:16:0c:8d:e4:b4:fd:
19:09:00:1e:98:33:02:d6:37:30:9c:c1:7b:69:8a:7f:2e:52:
4a:31:84:83:fa:3c:4f:bd:49:e9:6a:f8:94:5c:6e:1d:76:47:
8f:f6:45:fe:48:63:14:9a:f4:fc:ef:c1:fd:cc:85:6b:3f:f5:
16:a4:58:98:63:7f:6a:37:d8:76:4f:fd:f3:df:2f:9d:fa:9b:
ee:c4:4c:98:8d:4a:25:d3:dd:d5:2a:fd:2b:e1:1c:1e:03:9b:
34:a1:98:cb:71:b6:a4:71:02:66:ed:ce:c4:90:66:2d:87:3f:
c2:10:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:18 2025 by rpki-client