
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier: 4eNEfjKWenzupy7qFJCB7DbSvq4jUCKbYAQ7k8uZ/eg=
Subject key identifier: 25:7D:4C:97:EE:1A:09:EE:A6:A0:03:CC:74:8E:B2:6A:1C:9C:01:C6
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number: 0626
Signing time: Thu 30 Jan 2025 23:59:24 +0000
Manifest this update: Thu 30 Jan 2025 23:59:24 +0000
Manifest next update: Thu 06 Feb 2025 23:59:24 +0000
Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: jSPtxzsAY5Oy/R0jQF4iVZrdKUtQeKidc3CgViA0V8E=)
2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: Jan 30 23:59:24 2025 GMT
Not After : Feb 6 23:59:24 2025 GMT
Subject: CN=679c125c-4d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:c6:bf:de:0b:29:5b:90:b0:af:e6:4d:2c:
73:81:f7:64:f0:10:61:3a:f2:9d:db:6e:23:26:d2:
0d:21:db:69:b4:91:a6:fb:3c:69:b3:38:54:dc:86:
ff:a3:ff:48:34:b5:a3:11:2b:45:33:5b:90:25:df:
a0:f6:0a:cb:5d:0e:f1:13:57:fe:f1:1c:41:fa:f0:
07:5f:d4:07:aa:57:ff:ea:df:9e:c3:76:01:d5:a4:
7e:ee:a5:de:a4:4c:cc:91:79:3c:51:a8:46:cb:4d:
12:b7:dc:25:2d:40:e3:55:26:04:b9:76:1f:c9:fb:
82:03:b0:f1:f4:eb:dc:ea:95:a7:be:c9:94:f1:1b:
07:17:53:d2:4b:5d:ee:f9:a2:e1:3f:ac:00:87:d0:
79:cc:b0:de:78:b1:93:1d:76:9d:97:c6:d6:ea:53:
a8:76:6c:f3:58:01:81:79:30:44:6c:5b:f2:b2:51:
ab:8d:e8:1a:9d:8d:67:d4:7c:33:dd:00:86:ba:dc:
f1:60:af:7c:fd:34:8d:bd:9c:e3:29:0e:d6:d8:51:
17:eb:10:4b:4d:75:40:cf:5e:8d:c6:c0:2a:84:d2:
be:a1:f4:54:56:99:ce:86:e2:da:9a:1c:36:05:bb:
38:7f:94:58:9d:71:ea:f4:9d:ca:6b:01:8a:00:cf:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:4C:97:EE:1A:09:EE:A6:A0:03:CC:74:8E:B2:6A:1C:9C:01:C6
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:0e:77:6a:b9:b6:3e:4b:9a:09:61:0e:b7:d5:4d:02:c4:
71:6e:0f:41:a3:59:eb:fa:9d:9d:6f:ac:46:4e:22:6f:6c:9c:
dc:34:9d:fc:92:a8:7b:8c:84:5a:63:54:7e:b5:01:28:ee:f3:
80:38:09:2b:1e:cf:94:3f:b2:d6:f7:aa:d4:46:ed:50:94:d3:
07:51:99:ab:88:6b:40:44:12:84:1e:15:48:ba:f9:24:a7:1b:
ef:9d:9f:ba:b2:0e:bb:ac:78:52:62:c3:38:59:88:5e:c3:13:
de:73:0f:e2:c9:85:6b:ce:e0:4d:a0:e0:25:22:d8:fa:d1:4a:
7c:a3:2f:3b:29:2f:31:92:d3:37:71:60:c3:b9:16:54:fe:90:
84:ab:d0:c3:05:26:94:b0:5d:3b:9a:6a:84:91:03:d4:78:0a:
ed:95:00:44:18:a6:c8:17:d7:df:4e:dd:f6:60:71:47:ac:d5:
23:25:3e:cf:4d:36:69:2f:fc:4d:4e:ce:9d:07:8f:49:8c:7d:
57:46:c0:87:07:6a:ae:00:bf:70:d2:e4:de:1e:fb:9c:2d:fb:
23:5d:55:96:2f:8c:06:0b:ae:4b:2d:1a:10:19:5b:1c:d4:ef:
4c:1d:15:9f:1a:ce:91:b0:23:cc:34:b2:80:f8:ca:f2:0e:00:
96:5a:2c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:26 2025 by rpki-client