Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json)
Hash identifier: EhrtYWCr5aklYojwTSLstgV0v1vrRjVxtlS+mf05QTg=
Subject key identifier: E0:51:05:84:41:06:FC:BA:20:78:41:C9:50:56:46:16:91:F5:0B:13
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial: 06DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
Manifest number: 06D3
Signing time: Thu 30 Jan 2025 22:02:35 +0000
Manifest this update: Thu 30 Jan 2025 22:02:34 +0000
Manifest next update: Thu 06 Feb 2025 22:02:34 +0000
Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: WuiiPugHr9/CPnJ2qWlHWy+DkjdlI6214uHik9H3I/o=)
2: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: IwbM0qanfV+e3+145YunmnHjT+laZw+y8+B4ZLa5xus=)
3: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: l86iuU4A1knmyjZ3msJqjoeK6VLpJ7MZC8Ec9/M8Wvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Validity
Not Before: Jan 30 22:02:34 2025 GMT
Not After : Feb 6 22:02:34 2025 GMT
Subject: CN=679bf6fa-c5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:46:51:0d:bb:c8:6e:bc:a0:4a:db:8b:de:
dd:9d:98:70:9d:18:df:7d:29:47:81:be:e6:5c:aa:
88:29:31:ff:6e:9c:90:70:30:27:f1:1c:4a:3b:0d:
bc:92:5e:e8:15:3e:0e:f8:13:a9:7e:78:05:a4:db:
02:eb:a0:75:37:3a:d1:d7:af:96:49:8f:63:c2:fc:
2d:4d:3c:91:b2:be:c4:45:8a:08:f1:03:91:a3:70:
d5:a3:35:05:36:19:a0:08:ca:0a:ec:79:59:83:3e:
a7:71:7d:ef:64:16:a2:82:30:75:41:68:83:d1:40:
63:0c:70:44:0e:1a:ae:42:24:6d:f0:ac:79:eb:13:
f6:cd:ef:74:e7:01:00:18:2a:23:82:8d:91:9f:d8:
ed:84:c3:b0:dc:11:23:b0:3d:0d:be:5a:04:f1:c1:
40:43:30:32:90:bb:8d:47:74:27:f2:10:df:2a:97:
c6:0b:f0:60:c3:33:7e:e8:3a:ac:96:40:90:e4:42:
e1:3e:de:3f:8a:8b:99:db:62:d6:a0:10:69:c6:dc:
b6:49:66:ed:c5:0e:42:87:eb:25:07:3d:2e:c7:a6:
f1:04:d0:73:b9:46:36:07:98:ee:6d:2f:84:cd:6e:
1d:eb:8a:cf:fe:c0:f0:0e:08:21:04:57:72:47:70:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:51:05:84:41:06:FC:BA:20:78:41:C9:50:56:46:16:91:F5:0B:13
X509v3 Authority Key Identifier:
keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4c:35:59:6c:d6:fc:cb:d1:88:d5:b0:fd:fd:8e:31:bb:1f:
22:fd:df:aa:f0:6b:bb:d2:d2:a0:c6:a4:f5:7a:79:6c:97:ad:
1c:39:a0:da:8b:06:88:0f:d7:96:ec:af:9f:f4:b1:a9:13:d2:
b2:ff:30:21:d5:59:e6:81:7a:1b:17:da:92:8d:db:c7:1c:2c:
2d:6b:0c:54:42:47:7a:40:fb:e6:6c:6f:cb:be:84:f3:13:a5:
fc:f4:82:ed:bb:33:9e:a2:a7:6b:e6:63:49:97:db:a1:4e:85:
f0:65:8a:d0:ae:f1:89:83:0c:96:a9:4a:7b:d6:4a:3f:6d:89:
9d:92:e2:cd:bb:fc:c6:40:f9:22:b5:87:09:f9:1a:e8:9a:14:
a2:29:1e:03:32:5b:9c:23:dd:5a:4a:33:10:2d:23:7e:95:98:
8a:38:48:a6:ea:aa:ee:53:19:8f:19:e7:97:2f:74:98:f0:2e:
14:95:00:0d:c6:1d:f6:37:4c:d5:b3:c4:e0:73:43:32:5e:7c:
4f:ce:39:16:e0:74:9d:3d:59:0f:c3:c6:0e:0c:a4:38:02:cf:
4a:5f:d3:60:da:f7:78:4f:b5:e5:b7:da:97:16:c3:67:fc:ac:
ba:d8:2e:51:cc:3d:8f:64:b7:ac:c1:d9:06:0e:83:9a:1e:d5:
eb:c7:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:57 2025 by rpki-client