Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json)
Hash identifier: rNwzonbc6pupW305Ani4AaitjVR6kmBjgebJNUMj2B8=
Subject key identifier: 0E:DA:96:57:B1:08:79:69:12:5D:D3:DE:75:B9:8E:6F:3C:E9:8A:33
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 22D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
Manifest number: 22BD
Signing time: Fri 31 Jan 2025 15:52:00 +0000
Manifest this update: Fri 31 Jan 2025 15:52:00 +0000
Manifest next update: Fri 07 Feb 2025 15:52:00 +0000
Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: J/+ZznpfHs08vEnBObiax30SzNzQ8UuwxdYGMnAx9GY=)
2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=)
3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8918 (0x22d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Validity
Not Before: Jan 31 15:52:00 2025 GMT
Not After : Feb 7 15:52:00 2025 GMT
Subject: CN=679cf1a0-7440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1c:59:89:25:98:dc:24:da:78:b1:97:18:2c:
f4:2c:e1:e8:88:a1:af:46:0a:ed:44:83:9d:04:5b:
6d:9e:51:8f:14:a0:85:42:0e:93:3b:2f:7a:d8:ab:
3d:8b:f0:fc:5e:1e:c1:57:06:97:58:bf:03:34:f8:
55:86:e9:10:53:00:bd:ad:e6:0f:55:55:6e:f4:a0:
f2:6d:d8:35:b6:3e:5f:fe:a4:bd:b5:41:46:0c:cb:
e9:6e:cb:1d:56:5a:4d:f5:93:d0:10:0a:0a:9b:54:
31:09:c7:4a:b1:d7:d9:88:4a:87:d4:c9:7a:eb:c9:
d2:e5:8c:23:ea:56:2f:6a:58:e0:1f:24:f6:e0:e6:
91:d1:64:43:50:c9:ee:88:7b:1f:06:05:27:0e:f4:
b5:f8:b2:62:32:38:bd:7c:ca:6d:1c:24:e2:c5:04:
97:78:51:eb:54:86:9e:30:db:fc:d3:6f:38:c8:1f:
62:9d:33:86:a8:00:5f:74:65:9f:d6:fb:0a:60:84:
00:7b:4e:81:06:fb:77:03:16:b4:57:a6:d8:e3:9a:
5c:ac:ba:b1:75:9e:10:4e:a2:de:2c:f0:99:fb:12:
37:d7:e1:ae:fb:b0:16:83:56:b6:8e:de:f8:37:60:
aa:d1:40:bb:b0:9a:2b:15:a8:a8:b1:f5:ad:17:81:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:96:57:B1:08:79:69:12:5D:D3:DE:75:B9:8E:6F:3C:E9:8A:33
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:bc:8a:1d:d0:8f:e3:cb:85:4d:23:9c:d9:d9:93:12:70:fa:
60:f6:7f:bb:23:d2:ef:73:55:a4:ac:e2:b9:fb:02:0c:cf:b4:
f4:8f:5f:a8:e0:af:1a:a1:7d:e3:2f:ea:65:46:03:bf:5c:28:
3e:4f:d3:13:28:d3:9e:98:24:36:96:34:cb:b1:a9:78:10:f1:
18:b3:8f:02:b8:3f:76:e3:f9:9a:81:dd:43:5e:57:45:cc:72:
1c:0f:f9:bb:71:3b:16:60:5d:11:a3:ec:9c:e7:e7:9f:0f:c8:
7d:1e:80:57:35:5a:19:63:8a:52:fe:dc:d3:d1:ef:f5:b4:71:
46:8b:7a:25:87:e6:5b:e8:44:9a:7d:31:ba:d9:9c:77:57:de:
90:f3:c2:ed:02:e7:bb:4e:4b:17:bd:18:22:e5:2c:90:98:04:
83:e6:40:94:5e:d3:ce:23:18:e9:b2:7a:91:a7:53:96:4f:4d:
9e:a7:1f:86:d2:47:a2:bd:b7:3c:45:2b:6d:ac:12:41:60:a7:
9b:6a:76:e9:51:fb:71:73:a0:d8:12:fd:9d:42:91:8d:62:e1:
06:00:ac:27:4f:0e:82:08:8e:31:52:d8:b8:ca:9d:3b:12:31:
1b:89:01:ba:5b:a8:b9:79:3a:68:ff:78:5e:c4:c4:17:bb:34:
3a:61:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:43 2025 by rpki-client