Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json)
Hash identifier: ZF2bxLEfonoS99x9uY2XrmrqRbJonZzkHFQVNxeZWlg=
Subject key identifier: C4:B0:0B:7E:68:5D:A9:E4:B9:9C:9E:AE:8C:47:79:6A:2A:E8:8D:27
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial: 115C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
Manifest number: 1150
Signing time: Fri 31 Jan 2025 17:14:16 +0000
Manifest this update: Fri 31 Jan 2025 17:14:16 +0000
Manifest next update: Fri 07 Feb 2025 17:14:16 +0000
Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: /Od1L9LIa9NbPA0WdMprxiOeH463MHz4PnV03L+d7T4=)
2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: DIX09IMqDwhYz9qe1Nv5iQBk3kT+S7TLOQSBMI/PtT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4444 (0x115c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Validity
Not Before: Jan 31 17:14:16 2025 GMT
Not After : Feb 7 17:14:16 2025 GMT
Subject: CN=679d04e8-1e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:90:da:66:b1:2e:46:13:b0:80:d7:cb:82:
13:bc:c1:06:0f:e2:00:36:17:f7:bc:8c:1a:bc:59:
5d:1a:0e:f6:0e:9c:8d:78:d1:e5:9b:37:8b:7a:76:
ca:53:96:48:4e:56:4a:11:7b:dd:96:54:4f:bb:af:
1f:40:fb:67:ee:79:44:7d:3a:c4:bf:df:80:0f:db:
4e:49:70:2c:22:97:23:a4:28:49:36:6f:b2:1b:d7:
16:1f:60:88:45:a3:55:2d:8c:b6:13:4b:95:57:db:
84:18:1d:9b:a8:94:47:71:08:3e:1d:3f:35:a9:6d:
20:9c:ac:c6:6c:6a:ce:9b:2d:f8:29:f8:29:c8:88:
e0:6a:c9:b5:03:0c:36:a6:ba:9c:ee:c1:91:97:b8:
dd:d6:28:64:ef:b6:2a:34:30:0e:65:31:6d:50:e0:
0d:cd:ec:c2:24:8d:fd:4f:a8:e6:93:dd:36:e1:e2:
0b:e4:2a:a9:33:71:76:17:e9:c7:46:3e:7f:57:0c:
5e:c8:e9:3e:c1:95:9d:47:8d:14:7a:76:2d:a5:32:
da:cd:0d:dd:7d:08:d8:3e:7b:ac:2f:fb:f8:d6:19:
e0:97:39:30:e8:f8:5b:68:6e:01:65:a2:fb:5e:c6:
de:59:16:8f:74:14:30:28:ee:10:fc:d0:eb:a9:3e:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B0:0B:7E:68:5D:A9:E4:B9:9C:9E:AE:8C:47:79:6A:2A:E8:8D:27
X509v3 Authority Key Identifier:
keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:6c:df:8d:02:75:71:47:b0:ed:89:a3:bd:ee:70:e3:b6:
01:88:14:cf:4f:d6:8a:88:01:51:14:c0:91:c1:a2:99:85:cb:
a3:d7:73:25:db:f9:13:3e:83:ae:1d:6b:3f:09:dc:00:40:1f:
86:ce:e7:52:90:6e:f6:b7:b8:d0:9c:91:24:9e:3b:ea:7d:b5:
62:22:39:21:2b:6d:47:a7:52:4d:81:f0:59:cc:98:68:e1:32:
8e:17:cc:a9:e9:54:a1:60:37:d3:e4:57:1f:54:23:c1:08:db:
99:f8:ce:7e:63:51:d3:10:b0:4c:d7:1a:25:5d:69:21:57:c4:
fa:bd:6b:70:96:9a:1a:d7:39:89:c8:70:69:ca:3a:5c:f2:5f:
d7:ef:c2:2a:b1:ee:2e:e6:a1:10:e2:7d:10:76:b3:38:ea:77:
9c:3f:23:5f:f7:70:19:b1:83:49:46:56:0a:6f:76:f3:3f:aa:
11:c3:59:7e:c3:db:d2:25:02:be:63:92:1a:13:62:cc:fb:4c:
52:a9:86:e3:9d:d6:f1:b8:45:c1:16:52:57:e4:bb:f5:50:30:
7a:d6:65:ac:f7:df:22:2a:11:06:52:e8:40:a9:d5:97:82:7b:
5e:f3:20:76:78:a6:c2:b0:bd:1d:c8:37:73:b4:1c:a5:55:62:
dd:73:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:13:49 2025 by rpki-client