Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json)
Hash identifier: 5YmwXIhI7NJaTH1rYWhGlEOMFNLzweEYCTtqfaIxCvg=
Subject key identifier: 0C:27:5C:E4:85:73:AA:CC:8F:FB:62:FC:44:B6:94:0A:26:D7:26:E5
Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
Manifest number: D3
Signing time: Fri 31 Jan 2025 04:48:37 +0000
Manifest this update: Fri 31 Jan 2025 04:48:37 +0000
Manifest next update: Fri 07 Feb 2025 04:48:37 +0000
Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: w62vN7swM80Snfqau31gRCV4vkMyY3YoVk3yZTA/bEM=)
2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Validity
Not Before: Jan 31 04:48:37 2025 GMT
Not After : Feb 7 04:48:37 2025 GMT
Subject: CN=679c5625-b989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:d2:58:c8:6a:fc:0f:fb:8e:e2:90:e6:65:
73:3c:25:1a:65:04:5a:71:10:74:1c:71:b4:e3:a7:
32:76:e4:7c:08:e0:38:8d:df:32:4a:e6:2b:f9:1a:
5c:27:c8:2a:c6:df:dc:58:72:2a:0d:07:3e:ad:37:
b8:e7:85:ea:0c:ca:d5:e5:40:1a:35:89:ae:f2:f2:
54:df:3d:89:c3:56:6e:29:ce:0b:84:08:c8:d9:ee:
3b:57:fb:b6:75:58:d5:16:6a:31:a3:b4:d1:b7:3d:
4b:65:0d:19:38:da:03:65:60:3a:de:62:37:b8:04:
46:17:44:12:8d:b2:72:e8:47:02:e1:94:6a:0e:51:
2d:d6:86:d3:2b:76:0d:9e:3a:bc:ea:0c:00:9d:19:
86:ae:ac:ee:99:87:0f:22:5d:e4:2c:db:16:e4:e0:
1a:d7:64:81:5d:1d:50:e5:63:50:b7:e2:6e:7b:1a:
76:36:62:3d:b5:cb:4e:31:ef:56:4e:17:ed:ff:ef:
d0:25:92:ef:3c:8e:61:d6:c6:34:66:46:4e:df:e7:
9f:78:c5:e2:52:dd:d6:51:4a:c0:c7:04:5e:ab:72:
05:1a:e5:8a:9a:74:8e:14:e5:36:14:ee:37:44:6b:
a4:2e:6b:51:87:16:b4:73:b9:cc:ee:2a:3a:3c:80:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:5C:E4:85:73:AA:CC:8F:FB:62:FC:44:B6:94:0A:26:D7:26:E5
X509v3 Authority Key Identifier:
keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3a:84:23:b1:df:ab:d1:56:c5:ee:d5:cc:c9:dc:0e:8e:93:
35:74:b0:6f:04:24:dc:b7:99:d0:18:7f:33:87:b3:98:ce:9b:
41:f2:42:fb:dc:ab:cc:50:25:a9:c1:60:80:4c:c0:7d:8c:f0:
97:90:39:54:6f:7e:f6:1d:43:12:67:68:10:5b:39:1f:ba:64:
b1:f5:0e:19:62:fd:89:14:3f:d7:56:45:28:ed:6b:42:df:0f:
00:1f:c1:2e:2c:80:ae:83:01:e0:5a:bd:0b:a7:b1:f2:6b:7a:
f0:cb:d8:a9:a0:0c:10:b9:f6:61:52:cb:a4:1a:48:91:01:a4:
8f:b3:b6:5a:ef:2b:13:2a:c0:0c:e3:8e:a0:cd:78:05:42:8a:
e6:6d:07:27:27:08:13:25:d9:36:ec:49:4b:99:c5:d4:1f:e0:
48:15:56:8f:0a:ef:22:60:12:7c:3b:6d:e8:04:8d:3e:0c:c4:
57:22:cb:3f:e8:be:01:a3:ab:56:d1:01:8c:bd:7e:38:41:27:
56:2a:24:d8:f3:2b:b4:02:4f:9c:d9:90:3d:50:56:52:40:35:
44:c0:3c:f3:26:2d:ba:50:ba:1e:0d:2e:9b:a3:68:d1:bd:82:
75:1f:82:a1:86:27:48:ad:6c:30:e2:40:9c:32:c5:5b:a6:92:
1a:d6:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:44 2025 by rpki-client