Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json)
Hash identifier: g2FaYmQKEaJVDKLPWkviMf2zOMr1TFv6ujyp4dxaHQ0=
Subject key identifier: D8:C3:03:A6:19:69:50:29:A3:29:BE:5D:D1:DA:D1:5C:C4:22:B4:2A
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 03:35:55 +0000
Manifest this update: Fri 31 Jan 2025 03:35:55 +0000
Manifest next update: Fri 07 Feb 2025 03:35:55 +0000
Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: DgyyDMTkTDmqJycqY+Rp+ao//tSIHO1H8IUw2DUayYU=)
2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Validity
Not Before: Jan 31 03:35:55 2025 GMT
Not After : Feb 7 03:35:55 2025 GMT
Subject: CN=679c451b-2217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:b6:2a:55:54:23:03:11:7d:95:54:11:93:
79:1f:82:fb:7e:b5:3d:a2:02:30:8f:49:da:e7:84:
3b:28:b4:2c:37:e7:f5:a3:8d:2d:92:98:bc:93:e6:
79:d0:e1:0a:70:f5:b9:d5:37:e8:df:3b:a2:0a:1c:
c1:8a:dd:8e:da:2b:ce:8a:99:e9:0c:4f:c9:e7:3f:
a7:78:88:c2:d2:16:09:1d:33:6b:48:e4:52:32:ba:
86:66:31:11:88:b4:29:a3:64:95:4e:45:34:d9:81:
fe:09:f0:90:d4:ec:e4:71:55:df:51:93:d5:45:e8:
82:f0:ba:46:6e:91:be:3b:4a:73:6f:da:cd:d7:3b:
68:77:b2:72:fe:c8:04:01:62:9c:ae:79:48:e3:96:
c0:aa:64:bf:9e:a9:f4:f4:e6:6d:ec:e7:77:4b:84:
a0:1a:a3:42:34:92:63:bd:72:7d:aa:94:8f:31:2a:
f8:eb:48:6b:71:c8:30:6e:15:31:65:d4:72:f7:7b:
38:57:8d:12:e2:0f:e3:5c:7f:08:34:00:a2:6b:bd:
3c:c5:1a:ea:ac:32:86:b1:ef:08:12:30:32:5d:be:
2f:2d:e0:f8:0b:41:e8:44:ec:83:c8:b3:41:b7:6e:
fc:7e:15:d7:4e:c7:a6:e3:00:53:64:b0:47:c0:30:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:03:A6:19:69:50:29:A3:29:BE:5D:D1:DA:D1:5C:C4:22:B4:2A
X509v3 Authority Key Identifier:
keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cf:ee:c7:71:e1:20:35:70:d4:ea:41:5a:04:e5:ed:4d:df:
5c:e0:57:ff:a4:b0:7b:d1:b4:b7:5e:88:7e:5b:a8:5a:24:7c:
29:48:ba:58:ca:e0:7b:15:21:f5:4e:2b:c2:d3:82:cf:c5:f8:
da:eb:43:8d:b5:89:20:be:c6:1c:e7:18:a9:a1:03:92:e8:a1:
98:c1:4c:20:eb:65:86:61:a6:6c:e2:9d:6c:7b:1b:91:87:57:
07:fc:45:c8:f9:9e:e2:53:dd:2a:05:42:32:3e:b1:d6:8e:57:
fa:e8:20:6c:de:2b:17:b1:79:cf:71:b7:3b:cf:43:f1:3e:12:
31:10:5c:62:30:8a:76:ea:ec:34:f3:3b:c7:fe:36:e4:7e:56:
a8:e1:3f:c4:03:60:17:a8:89:53:25:c9:0a:fd:97:cb:0e:c3:
b3:ac:1f:3b:9e:96:83:5c:ea:a2:ed:2d:2d:24:0f:71:6b:94:
6b:3e:8f:6b:50:b2:46:0b:f4:2a:70:08:db:20:0a:42:bf:f4:
80:7f:89:e9:a5:89:20:05:a5:de:68:d8:b4:9d:1d:f7:79:f9:
d1:c6:da:47:b0:3a:88:41:e9:a0:0b:b7:dd:bb:ca:18:c5:2a:
05:66:4b:8c:be:74:e1:86:0b:1a:de:64:fe:e9:6b:f3:be:43:
af:f5:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:03 2025 by rpki-client