Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json)
Hash identifier: BCkGnjC2xpBe4jtgy/LRzHx1f4fYfbWU+tX8nakgYu8=
Subject key identifier: AE:CF:F6:3B:18:89:3A:83:80:67:89:55:3B:57:53:C9:78:E9:A8:69
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 048A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
Manifest number: 0486
Signing time: Fri 31 Jan 2025 00:04:24 +0000
Manifest this update: Fri 31 Jan 2025 00:04:24 +0000
Manifest next update: Fri 07 Feb 2025 00:04:24 +0000
Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: /+MfxCbL1QkcEZGwlg/DB46Js0Zb6Up64mSfeYl6tGQ=)
2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: Jan 31 00:04:24 2025 GMT
Not After : Feb 7 00:04:24 2025 GMT
Subject: CN=679c1388-d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:1c:48:9e:08:be:70:69:d4:aa:b8:da:20:
76:12:d3:95:ab:01:e4:37:28:7c:ee:42:43:db:9e:
5d:ff:de:fc:4b:59:6e:d3:88:b6:83:91:b4:59:f1:
7d:4f:6b:98:ab:98:8d:53:e5:82:e1:6b:41:3d:5d:
95:00:e4:29:ee:33:8d:ef:48:93:27:fe:3b:37:a9:
a9:86:b0:a8:06:a4:ce:9c:2a:72:05:4e:c9:40:ae:
be:e6:21:d3:23:14:1b:04:81:fa:f8:a7:6d:43:b4:
31:a2:2d:86:b5:c0:c9:6c:f9:6e:a1:8f:70:e6:c5:
89:06:b5:88:23:fb:72:ff:f8:2d:da:9d:a3:90:cf:
dd:09:14:f8:5e:3b:f1:69:04:10:60:84:76:64:a2:
ec:f3:79:a6:d2:85:33:31:2f:8e:5c:26:b6:09:a6:
b2:0c:ce:37:4d:ac:da:3a:8e:b9:62:07:a8:e2:f9:
fa:a7:c5:9e:00:9a:f6:5c:4b:96:8d:ba:fa:76:be:
27:cb:7b:38:7a:a5:80:0c:27:c9:b8:23:10:95:6d:
14:c8:a4:a8:37:eb:31:f4:5b:af:03:9d:6c:66:62:
e7:bc:d4:ac:c9:57:6a:d0:47:63:e6:0d:51:2e:1e:
75:b0:2c:a2:fb:9b:9f:c3:3d:11:f6:08:0c:a2:df:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:F6:3B:18:89:3A:83:80:67:89:55:3B:57:53:C9:78:E9:A8:69
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0f:cd:dd:1e:6e:11:62:e5:ab:69:91:72:b3:26:4b:e5:6f:
71:81:5c:85:30:61:c2:d8:16:9f:7f:2b:6d:29:e2:ca:37:ae:
ce:a3:23:74:44:10:37:0f:65:4a:81:23:42:3b:0d:74:0d:cb:
b8:a1:a9:e7:26:58:a4:cc:9d:08:e0:b3:0f:7d:2c:f2:0a:75:
0f:54:fb:95:59:43:60:5e:26:c7:e2:34:32:b8:44:9c:85:b8:
82:97:ce:47:18:2f:ff:c5:31:ac:d4:e6:fe:df:0f:89:8c:cf:
88:c7:38:ce:b2:a6:64:76:cd:df:bd:eb:ae:bc:96:22:49:d3:
a3:a0:13:e8:4c:40:9c:f6:d8:5e:a2:0c:79:05:9b:9f:47:2d:
7e:97:63:f3:98:98:cf:0e:80:39:cd:c9:f9:a8:54:24:d0:48:
0c:4f:b6:15:cc:6c:f3:08:26:d6:56:a6:7a:89:c4:38:80:16:
5b:e6:c3:1d:b6:2a:5f:77:5f:58:8e:54:79:e9:91:e3:63:af:
c8:d2:35:52:af:96:49:38:96:9f:e4:06:fa:10:d8:ce:97:03:
60:f5:b6:03:b3:a6:d9:86:51:4c:83:3a:d9:c2:46:73:9b:4b:
c6:e8:71:c3:38:17:c8:3b:17:d9:96:c6:e6:17:b8:eb:44:b2:
31:3a:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:42 2025 by rpki-client