Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json)
Hash identifier: UOUaCzbr9UiQthAMA30HmAwJzIXO+T87H7avmurzKvw=
Subject key identifier: B1:3A:C6:71:E8:5A:81:9F:8C:A0:C2:22:B1:BF:34:E2:99:3B:BF:9E
Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
Manifest number: 0628
Signing time: Thu 30 Jan 2025 22:36:06 +0000
Manifest this update: Thu 30 Jan 2025 22:36:05 +0000
Manifest next update: Thu 06 Feb 2025 22:36:05 +0000
Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: LiQj8C17eXX+t2B67ogA45N4llEd1mNbQMyr21EAOu0=)
2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 9gWAlYui5HAMuRW7/VDGjU6Xnl/T3f6FvG1ktEoqp10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Validity
Not Before: Jan 30 22:36:05 2025 GMT
Not After : Feb 6 22:36:05 2025 GMT
Subject: CN=679bfed6-bf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:f0:77:d3:81:fc:24:aa:a6:23:d4:cb:50:
e5:cc:5d:6e:d0:ce:29:43:f3:e5:e2:93:53:13:08:
53:36:5c:46:b9:2d:b4:ff:e1:8a:b4:c8:1f:55:39:
05:18:8a:b7:f2:94:c3:67:07:df:14:0c:df:f9:36:
65:e7:0b:48:87:15:aa:4f:b4:b5:df:f2:f1:1d:b9:
04:bc:22:90:17:e2:c5:51:66:0d:27:00:0b:bd:b8:
32:5e:b4:0d:23:cf:96:8c:9a:c2:a5:bc:d0:f7:0e:
5f:a6:c3:2a:30:3d:a0:9c:b9:18:77:21:da:92:58:
8f:1c:72:cb:58:e2:6f:06:0b:46:d9:35:31:0c:46:
49:bd:03:9e:b1:56:19:95:96:79:68:e5:ec:ee:61:
31:df:65:2a:f0:36:8e:f7:e7:d5:b6:75:e3:cc:9c:
c8:3c:7b:25:ba:fa:a1:95:25:db:f2:cb:af:f5:3e:
bd:17:f5:19:b4:89:a3:a3:fa:c6:a0:eb:57:4b:e1:
98:fd:0e:36:cd:1b:21:b1:30:29:3a:4d:b8:f7:f1:
42:a3:a9:3a:a2:b3:ba:81:1f:e3:7e:98:42:aa:44:
74:ab:a2:73:d6:bf:cf:aa:33:15:7b:01:3a:b9:7c:
17:cb:8b:f5:5d:7c:d4:d7:1b:93:7c:c9:76:e3:e3:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:C6:71:E8:5A:81:9F:8C:A0:C2:22:B1:BF:34:E2:99:3B:BF:9E
X509v3 Authority Key Identifier:
keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:2e:b7:20:75:e4:b3:a9:ae:ad:42:6b:7b:f4:4d:ca:da:4f:
95:bc:03:b6:cb:61:79:76:bb:de:84:f1:ae:d4:b2:88:0a:20:
d1:01:b9:f3:80:a6:59:dc:dd:15:97:7c:e0:5e:b1:b5:37:28:
80:34:88:5d:ec:58:b5:18:68:13:fc:34:ce:45:7b:65:ea:a4:
fa:dc:e3:a6:e1:1c:3c:7b:ca:46:a0:95:f7:9d:98:33:2f:ff:
e8:72:8b:97:5f:26:0f:f6:95:cf:e3:31:be:42:72:aa:14:a4:
00:89:90:4c:6d:06:9c:36:0f:7d:74:40:25:46:c2:ff:72:38:
d4:1e:bc:7f:43:66:45:b9:0c:4d:90:c3:80:f6:4c:1f:58:1a:
ba:c8:73:c7:8d:7e:0d:f9:d4:6d:68:02:5b:86:30:95:48:86:
8d:b0:dd:37:1e:91:38:37:2f:38:2b:b4:61:7d:ba:ea:c1:6c:
6f:7f:93:39:ed:8b:7a:93:8e:6b:66:8a:60:95:f3:e4:f2:41:
15:9d:d6:3c:9c:32:5c:fe:6c:23:05:c1:84:f3:10:c3:2c:b4:
3e:2c:ad:32:32:e5:b6:8c:8c:23:81:0d:93:e0:27:1b:9e:08:
0c:47:d0:ad:50:33:a7:75:b8:e3:7e:c0:1b:27:b1:8f:5a:1f:
82:84:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:47:39 2025 by rpki-client