Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
File: imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft (raw, json)
Hash identifier: Mff5XyqwtxdILyc1NXmtwGnXC/QYXxRyiHmmIUlzlHk=
Subject key identifier: B1:61:DC:ED:35:33:0F:65:0A:C0:F4:07:EF:B0:8B:F7:BF:EF:F0:C4
Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Certificate serial: 2D4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
Manifest number: 2CE3
Signing time: Fri 31 Jan 2025 15:33:29 +0000
Manifest this update: Fri 31 Jan 2025 15:33:28 +0000
Manifest next update: Fri 07 Feb 2025 15:33:28 +0000
Files and hashes: 1: imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl (hash: g2eRtPnmgOZ+FMBr3u2s/GApnaUuwo1hMRYsbsLWuZI=)
2: 3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (hash: arjppb8o0dAo/PmRzQByMlM088vFXvA0RnVconCK+zU=)
3: EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (hash: S4ikhB4wQjYJoUuGIHYvTR4A3rR63MmfA1fRonhKGKU=)
4: 4221CE240EC211EB9F6B1914C4F9AE02.roa (hash: kLqMqBpKEFH6/wOJjRyVhUownkqorcEZej+kQ3FiGDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11594 (0x2d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Validity
Not Before: Jan 31 15:33:28 2025 GMT
Not After : Feb 7 15:33:28 2025 GMT
Subject: CN=679ced48-3beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:7f:e2:a8:2a:4b:23:63:92:8e:0b:d3:c3:
22:c1:cf:12:39:b5:40:e5:fa:8b:61:51:63:b5:11:
0d:b6:64:22:14:b5:0a:c3:cb:86:9b:28:fe:61:87:
d7:01:f1:95:f1:8b:bd:d8:a8:51:e8:35:fc:9f:91:
43:ec:46:02:dd:e8:0c:a7:60:f4:69:7c:3c:3b:74:
8c:d1:9b:a7:45:c3:60:ba:b2:ad:0b:66:91:11:b2:
22:d5:3c:f0:b6:25:bf:62:d1:f2:d5:3b:87:64:55:
a1:59:de:f5:95:a1:75:28:3d:f6:49:bb:77:be:41:
00:e7:01:4f:d0:65:90:ed:86:be:25:c5:69:5d:1b:
b7:85:3d:2b:1b:12:77:d5:e8:4e:54:5e:73:ad:23:
1e:07:69:36:1c:a2:29:88:a0:11:97:22:f6:3b:04:
ea:4d:67:2d:fd:32:f1:c6:73:4d:32:d0:37:3b:ae:
31:e1:68:8b:45:be:d2:8d:fb:52:29:e1:c9:e9:8f:
85:4b:0c:35:e0:3c:3e:4f:ee:ea:e3:98:66:a0:47:
90:e2:a1:f5:9e:6c:e5:b6:2d:98:93:92:8d:0f:ea:
14:65:35:87:a1:ce:23:a1:e9:a2:cf:27:ec:7b:56:
a5:20:d4:b8:40:27:19:91:aa:1f:33:e7:64:66:8d:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:DC:ED:35:33:0F:65:0A:C0:F4:07:EF:B0:8B:F7:BF:EF:F0:C4
X509v3 Authority Key Identifier:
keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:49:2b:fd:b8:d8:f8:c0:34:c4:5a:04:ad:30:b7:23:24:fd:
2a:ea:63:9e:57:52:66:7c:38:9f:51:5b:60:d3:7f:45:54:ae:
3b:7e:18:ed:e4:9c:67:27:ef:89:64:f5:2c:a5:58:0c:16:14:
1a:05:7c:70:c6:03:8a:c6:a0:4e:7c:55:39:ac:9e:7c:38:a3:
27:05:43:a7:86:c8:13:60:27:de:e4:09:8b:aa:ea:e4:16:3c:
a6:a7:e6:5c:42:cc:c7:23:fa:b3:0f:55:22:db:aa:e1:f8:1d:
55:b8:e4:2e:1e:11:39:10:59:97:d9:83:d8:fa:f0:11:df:e8:
92:6a:c5:b0:bc:4c:fc:5f:6e:c2:43:f8:8b:9c:87:50:69:b6:
9f:80:0a:45:8c:aa:1a:23:bc:f3:6c:57:3c:b4:aa:12:d4:30:
e0:fa:4f:c2:4c:17:86:e7:ef:db:b7:88:48:7c:78:d8:da:2d:
f5:ca:e9:40:2f:49:44:59:0a:70:9d:f0:5a:4d:86:87:0a:15:
d9:44:6f:6b:7a:d9:c4:88:36:55:16:86:f3:59:95:2d:0c:51:
03:c6:aa:f8:07:a5:f6:3f:6b:36:3b:5f:13:6a:50:cd:aa:2c:
4e:9e:04:4d:37:70:a7:d4:9b:3d:9e:36:c3:0e:29:96:68:2b:
99:24:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:20 2025 by rpki-client