Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier: zyAxU6jOrrWwFg863niwq2nVttIzK3kViF6p3q0YQoA=
Subject key identifier: 3D:A0:25:6F:0D:5E:8D:94:10:9D:27:36:0A:DF:4B:1F:7B:65:B5:02
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial: 073F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number: 0735
Signing time: Thu 30 Jan 2025 21:37:56 +0000
Manifest this update: Thu 30 Jan 2025 21:37:55 +0000
Manifest next update: Thu 06 Feb 2025 21:37:55 +0000
Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: puusG+mmRO+63OfP95cwEIyY/gNwwK6K6FHiFtD8jfQ=)
2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: svxlLdDpxiT0p4tG6s6Cz/fiwEF/oY/e6ZOEngdw4Wk=)
3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: HswIS1O+7/IUGVb010ng/g+7bqvTvlSUDgR7cSiI2Gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Validity
Not Before: Jan 30 21:37:55 2025 GMT
Not After : Feb 6 21:37:55 2025 GMT
Subject: CN=679bf134-a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:c1:86:26:b2:c8:7e:61:92:6e:32:51:50:
a5:bc:f8:fd:4a:eb:8a:9e:30:cc:d2:69:c0:9f:42:
28:da:41:1f:00:44:84:c9:9e:cb:a8:78:02:b0:50:
23:e7:dd:7b:67:34:12:b3:5d:48:f7:2f:b8:b1:1f:
9f:25:db:ec:18:8f:b6:4c:bd:c2:ee:cd:af:83:67:
a7:29:ad:4f:18:49:9c:33:e4:62:42:bc:bc:ad:ab:
81:c5:d2:d1:48:1d:cb:4d:1a:b4:69:b6:9e:5d:bd:
34:5f:d5:0e:07:63:b0:ea:9d:39:cc:09:5d:fd:e7:
f9:15:ae:eb:3e:76:d6:45:ee:4d:60:18:8b:61:2f:
2e:c0:8c:d9:84:28:33:9a:27:ba:d1:74:52:34:7a:
ba:be:44:e5:c7:72:a2:55:7b:12:a3:3b:0b:7d:45:
54:58:01:40:7c:90:c2:f7:a8:f6:65:39:3a:4d:39:
84:68:6a:e1:1a:2d:f1:52:b0:4c:0f:5f:84:91:c1:
7d:d2:d6:b9:b7:66:37:c6:97:54:8b:86:54:26:44:
5b:c9:13:94:b0:5a:bb:71:8a:99:c8:68:0b:9a:07:
9e:c0:f8:f7:8f:24:b0:1b:aa:ca:ab:57:f0:ca:ce:
e2:f2:d1:d9:80:94:db:3f:34:ef:44:47:ae:2f:7b:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:25:6F:0D:5E:8D:94:10:9D:27:36:0A:DF:4B:1F:7B:65:B5:02
X509v3 Authority Key Identifier:
keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b3:2c:68:89:d6:0c:39:5d:0a:7b:a9:ed:6a:86:2a:5e:91:
8a:68:b8:98:17:5e:35:2c:87:ab:80:b3:e5:b7:fc:04:c9:d4:
c7:9e:d1:dc:b8:86:68:15:d8:8a:78:67:f7:59:f1:77:9a:6b:
df:81:63:d3:10:84:f8:a9:08:30:fc:17:f6:4f:1f:0f:50:ce:
63:05:50:9a:d2:dc:64:c3:94:cc:a8:1a:2c:41:2d:e7:a9:ca:
ca:03:ca:20:cd:57:58:9b:bf:59:88:a5:1e:b7:21:88:3d:79:
d0:65:51:20:22:4d:d3:12:4e:d0:3e:de:ec:fd:17:ee:50:6b:
7e:69:83:3c:3e:d6:47:c1:83:bd:8b:fb:9f:a5:66:d0:1b:e2:
ae:1a:aa:1a:bd:25:a4:9f:69:df:ab:42:d0:00:aa:96:d8:95:
96:76:07:a4:71:bc:5e:2f:b0:28:c0:e3:b1:f7:81:1e:6c:4f:
cf:d0:0a:4e:c2:83:72:1b:20:9b:11:3a:89:19:d8:83:4a:b2:
41:9d:b5:31:55:3d:76:b2:33:08:c0:26:b0:d5:8d:70:d9:e6:
3e:b2:43:8a:26:96:0f:b8:40:d4:3e:b9:c8:9d:52:ac:65:f2:
48:47:92:de:c7:b7:43:c3:be:bb:8e:a6:c3:7b:b9:6a:41:b6:
2a:c6:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:20 2025 by rpki-client