Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json)
Hash identifier: WJD+FaTq00WqXyt1IBvEdZmJOWaqIxAS7+o4tMQAgu0=
Subject key identifier: A9:41:86:4E:46:AC:6B:DE:DB:42:BB:FD:C9:25:FF:06:AB:45:FE:83
Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 04:43:23 +0000
Manifest this update: Fri 31 Jan 2025 04:43:22 +0000
Manifest next update: Fri 07 Feb 2025 04:43:22 +0000
Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: q37SLj9yXLzmgyKSdEum1SS8AIJqyfdmPpyZrvvkZCY=)
2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9
Validity
Not Before: Jan 31 04:43:22 2025 GMT
Not After : Feb 7 04:43:22 2025 GMT
Subject: CN=679c54ea-c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:04:13:48:38:b0:75:1d:39:2e:8d:d3:a8:
c7:d1:34:92:7f:46:f3:ce:0e:0a:9b:ca:14:a0:fa:
5e:0e:f0:9b:19:3e:1d:26:6e:55:63:58:5e:fb:2a:
07:84:5b:46:6b:d0:b4:de:4c:c9:c3:ad:35:bb:b8:
81:3a:d4:f5:fb:0b:59:e0:d4:4f:63:c9:cf:a6:6e:
9a:c0:8a:de:a5:d3:79:49:5c:f9:cd:f0:bc:28:e3:
85:0f:1e:5b:f4:dd:bb:88:6c:1c:2b:d9:3a:e1:64:
0d:86:90:34:86:a3:fb:a5:90:58:01:1b:0d:73:f6:
52:38:18:06:cd:e5:ea:fe:18:a3:cc:42:6b:20:e9:
2c:22:ce:08:e7:2a:04:5d:b4:0d:e9:01:06:1c:5d:
6a:6f:cc:6d:22:1a:7f:7f:ff:cc:57:68:e7:7b:42:
fc:76:3f:9b:dd:8d:66:f3:5f:c8:14:75:a7:18:ef:
2f:c3:49:95:cc:d2:cc:fb:51:88:2b:4a:52:43:c8:
b5:6c:cc:ae:74:7d:39:28:19:74:72:aa:fa:86:95:
a8:de:c5:07:b9:48:b9:da:cd:4b:7d:f7:e2:96:a3:
49:35:90:c1:e8:58:bd:7d:1e:2e:5c:7c:88:82:42:
43:01:5b:d2:a0:6d:34:e0:be:b1:90:f4:ec:3d:57:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:86:4E:46:AC:6B:DE:DB:42:BB:FD:C9:25:FF:06:AB:45:FE:83
X509v3 Authority Key Identifier:
keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:6e:5c:8d:37:2a:81:5d:8d:f2:e9:bf:a4:e5:d9:06:5a:
7d:16:f1:6a:ce:3c:22:49:51:93:f1:89:c1:1b:cb:9e:1e:bc:
99:51:09:5b:6d:42:b3:4d:65:77:ad:61:dc:37:99:28:93:25:
f8:4c:7d:8e:ca:93:07:94:be:dc:e0:fb:d2:8c:f1:22:27:0d:
58:38:66:5c:f9:41:d0:6b:d2:94:5f:c7:5d:c5:97:37:38:0d:
cf:ec:16:a2:df:3b:f8:ec:2e:a6:e2:24:ea:80:f0:e8:41:24:
10:5f:94:63:12:bc:14:ea:1b:34:69:5c:09:4e:ee:0a:97:cd:
ed:c7:cb:ac:33:7f:7f:e3:63:96:8c:d6:a1:5a:54:3b:79:97:
53:72:58:4f:44:2c:a1:04:5f:e6:13:9b:ac:f7:c4:db:a8:a9:
13:b8:fe:89:59:55:68:47:9d:96:dd:40:ab:54:2b:95:79:b6:
b8:b0:c9:a7:a8:52:b2:17:5e:d3:79:e4:33:c4:74:2c:07:23:
95:b6:4d:a0:ae:ef:e1:b7:74:3e:38:a7:f6:0d:3f:93:3b:4b:
88:6d:88:36:15:16:c5:c1:48:63:1e:11:79:b3:ea:c5:89:29:
a8:b4:89:11:31:d3:ef:59:6a:03:07:03:ba:96:0c:7f:ff:84:
5f:f1:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:19 2025 by rpki-client