Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json)
Hash identifier: 8oZEi7krXruhz06uGlPygGtPQEg/JUyBW92Z4NU2eUE=
Subject key identifier: 1B:44:64:D1:92:30:3C:2D:1D:44:EC:2D:FE:F8:AF:78:0A:26:F2:A6
Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18
Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 04:22:58 +0000
Manifest this update: Fri 31 Jan 2025 04:22:58 +0000
Manifest next update: Fri 07 Feb 2025 04:22:58 +0000
Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: x7af2lybNn4t7fpLP8nszE3JF3vcN9kNklCuLFGr6u4=)
2: 3802AF56829811EEB7C3F322C4F9AE02.roa (hash: /dryDqRy0DH6c/gZr4MBN4BosfeqNmHeRwKmrIx/CX8=)
3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ZuM6BVmH6niQKuKQ1eCiPR55KnpBaOjGce45jTQXxyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
Validity
Not Before: Jan 31 04:22:58 2025 GMT
Not After : Feb 7 04:22:58 2025 GMT
Subject: CN=679c5022-d8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:c0:42:1b:fe:c9:48:b0:f3:a7:18:21:1c:
c2:b1:da:13:c1:fa:af:9f:1c:e6:03:b2:2f:a7:d5:
d1:67:5e:5f:13:e1:9d:a7:3a:b8:6c:5b:27:4e:f0:
61:b9:08:14:9e:c6:16:01:38:ba:1a:f1:5c:79:04:
0c:7e:80:b2:e1:2c:4a:d3:c0:10:c7:03:4b:d8:69:
c7:40:0f:b9:d9:5b:0d:c5:be:85:b0:f5:e9:ef:27:
4a:fa:76:e3:6a:c2:fd:ad:f6:21:a5:60:d3:06:bc:
06:9a:d2:f0:57:bc:16:61:70:f6:40:4c:18:6d:a3:
4e:f7:3c:69:dd:91:d1:d3:af:1f:22:b9:fc:c3:d7:
1c:6c:9f:ca:64:d9:7f:b1:28:7a:da:ae:9d:2d:b5:
df:4f:14:ec:1b:06:78:c5:e1:68:71:1e:76:5d:8b:
29:4c:84:04:4d:06:5f:2a:44:0b:f8:6a:90:d4:7b:
51:e5:9a:e2:22:c4:e3:e5:a9:11:c3:b3:1b:04:0f:
f2:a2:07:15:f6:58:b2:e3:98:94:e0:a9:30:4c:fc:
af:b9:f0:07:87:9a:28:be:86:ea:bb:8d:9b:7f:b7:
4d:a7:a7:19:0c:53:4c:9b:ae:3c:99:a0:4d:4b:0a:
d6:1a:12:64:36:bd:09:21:7d:75:dd:c9:d3:67:07:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:64:D1:92:30:3C:2D:1D:44:EC:2D:FE:F8:AF:78:0A:26:F2:A6
X509v3 Authority Key Identifier:
keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:11:1a:bb:ed:4c:04:f9:24:2e:a8:da:f6:07:04:8c:83:7d:
fe:c2:93:6f:19:c0:07:c8:e6:7b:d9:2b:b5:01:d3:50:34:5b:
15:57:e4:17:e9:7d:9c:54:78:1e:a5:6b:3f:77:1d:1f:76:c6:
20:68:fe:a2:25:32:fe:36:30:f0:90:51:df:10:95:19:79:9b:
6f:ea:9d:06:56:e8:f9:26:e7:fa:bd:22:68:69:00:8d:06:cc:
df:f0:a9:75:04:fe:73:18:76:9f:e1:8e:31:cc:c8:0d:82:6e:
25:55:64:25:32:ee:f1:cd:a5:bc:bc:63:99:68:9b:b5:16:17:
e9:77:6a:b5:9e:14:de:d1:28:49:97:56:de:d9:24:8d:2f:15:
e9:06:6a:73:51:0d:3a:2b:00:cc:cd:21:5c:be:c5:5c:57:67:
10:d1:af:e6:3e:51:89:49:a9:51:4d:0b:63:9d:5a:09:29:71:
ff:de:2c:4c:71:e6:82:a2:b3:96:45:5e:80:94:ca:e1:88:49:
71:e6:5f:80:12:13:c6:6a:f9:15:dd:7d:46:8a:0d:55:cd:4d:
34:45:7b:e1:14:21:27:8a:26:01:23:f7:64:ad:5a:17:eb:a9:
6c:1b:35:07:7d:9d:7c:61:8b:bc:de:df:28:5e:10:a2:ed:2f:
3d:5c:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:57:17 2025 by rpki-client