Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: /yIbYuEQN5UedOsUSbftR8MqGhTCAS/2/IgUUZXU5XU=
Subject key identifier: E0:92:02:88:42:C8:D6:37:8F:6A:44:2D:A1:73:95:4C:E8:38:01:07
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 0435
Signing time: Fri 31 Jan 2025 00:22:39 +0000
Manifest this update: Fri 31 Jan 2025 00:22:38 +0000
Manifest next update: Fri 07 Feb 2025 00:22:38 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: JETYaOsVeN6oHFR/b2s0mfyKbfH53RM4vgAAbZl526k=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Jan 31 00:22:38 2025 GMT
Not After : Feb 7 00:22:38 2025 GMT
Subject: CN=679c17cf-8b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:3c:ff:c3:2a:24:28:fb:ed:39:95:78:d4:
36:5d:80:a5:c0:70:98:d2:14:61:9d:5d:85:d2:f0:
a3:34:6a:b5:ef:7f:4e:e0:ac:fd:a8:dc:34:55:dc:
53:7a:fb:2d:ef:71:96:5b:5b:b9:79:55:f6:12:ae:
0d:7f:51:90:8c:6c:c2:5b:10:8f:5a:58:0f:95:d8:
7b:1a:a8:f6:7b:ad:a3:0a:f6:b7:5b:c0:3a:26:96:
2e:4c:bb:82:39:a6:a5:fa:9a:8e:40:29:a2:a3:8b:
37:0f:28:52:6d:fd:c0:74:f4:92:0a:8a:cb:72:80:
94:18:d5:bf:bc:cb:c4:b0:e7:18:17:0b:ba:a0:86:
f4:89:82:d9:d3:72:21:16:84:cd:89:79:b4:2d:98:
57:57:7c:fd:7c:94:b1:42:b3:28:79:27:34:88:d0:
89:02:98:e7:a5:4d:e1:18:54:79:8b:be:5e:50:b5:
43:83:f8:b6:32:62:43:55:1a:b8:39:43:aa:f0:5c:
3e:22:03:1b:45:4b:33:59:0e:0e:b8:eb:3f:31:73:
a7:50:a0:54:ff:a6:b2:2f:c1:5c:d5:79:36:66:a3:
e0:60:71:ca:53:81:33:2d:6f:e6:57:e6:96:0a:98:
ea:49:6f:57:d6:6f:26:8e:8e:03:41:13:9a:fc:8d:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:02:88:42:C8:D6:37:8F:6A:44:2D:A1:73:95:4C:E8:38:01:07
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:88:f9:13:76:4a:88:c0:ea:ce:7d:e8:d6:d9:9e:ca:90:
42:8d:1b:ca:57:1a:7d:95:29:61:0d:85:53:81:06:00:10:4c:
3a:61:05:94:aa:4a:00:d7:d1:e8:4c:a4:d9:2a:82:7e:d6:98:
c1:65:6b:f9:6c:0f:b4:df:0b:2c:20:a8:06:1a:5f:a4:b9:03:
88:6c:6d:83:3a:e4:51:b5:0a:b5:3c:0a:6f:41:25:51:62:5c:
5b:be:a4:47:f7:b2:49:1b:5e:8c:36:87:e3:31:05:7a:b5:29:
8f:7d:14:2c:98:a7:1c:2f:c7:04:1e:62:23:08:24:3a:91:48:
39:ea:4d:cf:b8:04:56:a4:7b:75:ac:ba:91:d7:27:f0:c5:00:
7a:e4:49:2e:06:46:05:16:c5:74:62:d8:90:87:bf:f4:3a:37:
68:4b:1c:8e:52:ec:16:01:df:ce:ba:7b:9f:b5:d8:37:7d:2c:
07:70:e9:61:7b:07:8d:e0:eb:90:d3:2f:c5:23:6c:3b:d6:5c:
69:8c:c0:48:1f:35:17:6b:96:04:4a:00:2d:82:7f:9b:d0:e7:
38:54:46:74:cc:d5:e0:ff:5d:fd:43:94:d6:b0:8e:b3:d5:7d:
c1:79:17:ff:b5:13:8c:ad:2a:c8:d7:9d:2a:66:c0:a3:0b:21:
b5:b8:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:13:47 2025 by rpki-client