Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json)
Hash identifier: lbzD4+bt+8fZYiyb0Xrd8RJ+GrMl68hGANyoWFkhS/c=
Subject key identifier: 44:9F:C8:E6:A8:F4:CD:0C:D7:B4:27:42:AF:6B:F9:E9:E7:7E:C6:7A
Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
Manifest number: 08C1
Signing time: Thu 30 Jan 2025 20:31:45 +0000
Manifest this update: Thu 30 Jan 2025 20:31:45 +0000
Manifest next update: Thu 06 Feb 2025 20:31:45 +0000
Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: ToPESasKVz2uOwCN83Va8ard5K1m9IMXLBgVJGbGHS8=)
2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Validity
Not Before: Jan 30 20:31:45 2025 GMT
Not After : Feb 6 20:31:45 2025 GMT
Subject: CN=679be1b1-70e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:33:1a:d6:86:98:ae:9d:8c:88:fd:45:82:
3f:75:08:eb:f5:df:b8:5e:85:02:85:4f:d2:49:79:
50:19:75:e1:f8:71:0f:c8:cf:bc:4b:45:96:1c:33:
58:ae:4d:20:d6:1b:80:db:cc:bf:d6:9a:dc:c1:4b:
ac:82:1a:fa:c1:41:7d:ff:a2:c1:ef:e8:91:59:8a:
6b:fc:50:30:b1:ef:37:70:f2:fa:03:9c:76:bd:01:
77:01:31:75:14:2e:e7:8e:9a:18:2c:08:a8:7d:8e:
86:1a:40:40:84:99:6c:19:16:64:f9:fc:ec:64:9f:
74:27:56:8d:d4:ff:a4:cf:d5:93:13:c7:96:75:06:
8b:8e:fc:78:70:1d:31:47:45:d7:dc:0b:0e:76:06:
48:48:eb:e4:d0:b6:70:77:e6:10:24:58:7c:cd:ae:
29:38:c9:c9:87:be:65:b0:a5:70:57:e3:25:1c:45:
8d:d6:6d:31:01:d7:b4:e6:7f:44:b1:76:17:b3:18:
fa:3e:09:4d:22:76:98:2a:bd:35:1b:7c:0c:c0:72:
19:50:6f:59:0b:88:37:9e:22:06:6f:b8:b3:e7:4b:
7a:45:45:df:96:9f:bb:66:cb:f8:cc:de:8a:6b:36:
ea:66:58:58:42:9f:09:bb:13:e8:a3:6a:9d:b3:50:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9F:C8:E6:A8:F4:CD:0C:D7:B4:27:42:AF:6B:F9:E9:E7:7E:C6:7A
X509v3 Authority Key Identifier:
keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c5:00:39:08:ad:57:c2:1f:9a:2b:b4:50:38:51:af:6a:f5:
ce:dc:e9:4d:5d:c8:e6:06:ec:f8:68:e5:e1:b3:59:c8:df:17:
fe:b5:5c:00:ad:16:10:1b:34:ca:f3:bd:15:a4:fd:c1:07:53:
50:a9:06:17:37:98:e8:48:36:60:77:07:30:cd:d2:34:44:b5:
a5:5c:0b:34:6b:2f:3e:2b:60:74:84:e1:41:36:a1:d4:93:c1:
fd:e8:bf:16:af:6a:a8:4e:e2:7b:a5:35:04:cd:25:a2:44:98:
71:58:83:4b:52:1d:f5:5d:8c:fd:d1:25:b2:ef:a5:42:04:7f:
47:e3:35:59:cc:d1:83:40:16:84:8a:34:56:1d:e8:cf:27:70:
93:8c:7f:f2:8f:4c:be:64:e0:74:cc:af:0d:69:5f:4f:7b:20:
c5:ed:ba:35:17:c1:aa:9b:c6:e2:d7:f3:6a:4a:a1:b3:d5:12:
eb:ce:6b:55:ad:b8:ae:10:80:2f:b8:0e:a1:a0:89:e6:35:d8:
15:db:53:23:f6:ae:5f:67:83:c8:55:13:b3:fc:32:61:a4:94:
fe:e1:c6:57:2a:93:6c:88:b7:d3:70:9b:f0:85:0c:c0:69:7d:
a7:ec:06:fe:3c:04:a0:6a:a4:ce:3e:db:95:2e:33:dd:43:3c:
cc:3b:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:24 2025 by rpki-client