Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier: fHFdURpMaK6bp/Zcj5cg/8rcxs8J2oorJxnX1G17ysc=
Subject key identifier: 46:83:BB:D7:F9:E0:CA:28:6B:56:F1:32:F7:57:D1:FC:BE:07:B0:CB
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial: 03F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number: 03F2
Signing time: Fri 31 Jan 2025 00:35:58 +0000
Manifest this update: Fri 31 Jan 2025 00:35:58 +0000
Manifest next update: Fri 07 Feb 2025 00:35:58 +0000
Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: QTRVSr0pQuM/4vqTpDnPBDSq7qmcmV3e5cvfnI4N8RA=)
2: AF506F14630811EC97879243C4F9AE02.roa (hash: 2rxDZmn8FcPG24Wlb4Jg090ASKMT6CB+r3+3kvhWtoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Validity
Not Before: Jan 31 00:35:58 2025 GMT
Not After : Feb 7 00:35:58 2025 GMT
Subject: CN=679c1aee-0d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:22:2f:b6:4b:31:46:f3:b4:4c:09:e9:e6:
f7:a7:f6:1a:fe:a3:4d:55:10:3f:28:09:9f:50:8e:
60:8e:eb:2b:52:18:b4:63:6c:85:97:dc:1c:15:3c:
50:75:f2:e6:7b:25:d0:ff:fb:0f:1a:31:4f:3a:e9:
0c:7b:d3:8b:b5:34:c5:8b:3c:45:75:7f:8f:e8:fe:
04:14:22:a2:43:27:e8:6c:d6:c3:f9:54:7a:8b:8e:
ce:44:0c:fa:f1:4b:41:13:30:ca:e4:23:48:1f:96:
fa:10:f2:bd:f4:c3:23:2c:40:8f:49:f7:99:f2:8a:
0c:36:95:fd:56:85:95:a2:d3:45:c5:37:3f:59:95:
e5:2d:a1:e0:f9:a7:76:ee:1d:72:aa:2b:fd:dd:e3:
e5:15:49:53:38:a8:13:56:25:7e:42:6b:c8:0a:43:
4c:f2:bf:b1:a9:5b:14:ca:e6:35:af:1d:d8:15:8e:
47:a5:03:d1:6f:19:ce:1a:5b:46:e2:c7:6f:0f:b0:
67:5b:03:36:2d:9c:94:83:f1:58:5f:b2:9b:29:c9:
bb:2a:af:f7:44:53:98:73:f4:9c:69:8a:52:ed:0e:
6d:5d:81:f7:78:db:59:8a:e3:6c:fe:60:e7:1a:6e:
00:5b:b5:4b:5d:9b:14:4d:7c:a4:8b:c3:ed:f2:ac:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:BB:D7:F9:E0:CA:28:6B:56:F1:32:F7:57:D1:FC:BE:07:B0:CB
X509v3 Authority Key Identifier:
keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:83:35:42:6e:9e:8c:2b:49:a8:f5:16:af:b5:db:41:2a:54:
f0:77:34:3d:1c:a4:2f:19:d1:2f:77:2c:7c:4a:6f:2f:64:8a:
be:1c:e9:9c:7e:62:3f:76:f8:4e:d3:ee:e4:52:9b:91:80:c5:
a0:ce:4a:2e:af:5d:21:c3:d0:9e:cb:74:dc:28:db:80:0d:80:
74:98:14:61:6a:45:73:2f:3b:cc:69:09:eb:4f:9e:2a:57:3a:
9b:53:4f:95:52:69:cb:11:89:ae:9d:f9:25:50:8c:6f:e4:1d:
b0:1d:4f:a4:45:1a:6c:64:04:df:a4:19:bc:79:98:13:75:c1:
37:73:87:c5:45:c4:a5:48:84:b8:55:f2:8f:92:92:1f:4a:14:
d7:e9:cf:b6:7f:19:1c:48:df:c0:d7:81:b9:4e:fa:ec:f4:63:
6f:f8:6b:38:cc:ef:05:f7:d6:41:bb:0f:17:21:51:19:7f:c1:
b5:d3:dc:9b:4f:09:80:3b:d3:59:d9:91:d7:04:ed:62:c2:5f:
26:b3:2a:bc:aa:2f:84:36:5e:03:cd:e5:39:a6:e9:32:54:0d:
63:97:cc:4f:e2:ca:fc:f2:01:91:b7:c5:2a:78:f2:ee:6c:f3:
3d:a7:40:cd:28:9c:cf:ef:86:9c:b0:6d:72:1a:2f:cd:8d:94:
c7:1a:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:32 2025 by rpki-client