Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier: 9sSm5tH8i9MGKqDIh5USI6BsIWA5wmZtIEAol9EKSHY=
Subject key identifier: 17:DD:27:F9:34:52:31:21:95:B7:D0:92:FE:44:0E:59:2C:C1:39:8D
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 0689
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number: 0637
Signing time: Thu 30 Jan 2025 22:56:43 +0000
Manifest this update: Thu 30 Jan 2025 22:56:42 +0000
Manifest next update: Thu 06 Feb 2025 22:56:42 +0000
Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: M2F7JaA7Uogcu5QCMbyN0HAMjcCvwuC+u5lQGkE9C1Y=)
2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=)
3: DA1FAC58A19011EBAA68DE2EC4F9AE02.roa (hash: 0fG/kMZux/g0TrRr8X6oVIRTrgst6KT9ZYMewvCkhYM=)
4: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=)
5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=)
6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Validity
Not Before: Jan 30 22:56:42 2025 GMT
Not After : Feb 6 22:56:42 2025 GMT
Subject: CN=679c03ab-4b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:4a:93:a8:58:07:d1:0b:37:bf:0f:81:82:
0d:42:5b:97:2a:b6:40:7e:bd:1f:bb:3e:c0:52:16:
ae:49:27:41:41:5a:3a:4f:19:67:7a:0e:30:12:6e:
69:12:30:42:3b:d6:6b:02:ef:4c:6c:10:08:3c:f7:
cd:b5:f4:f4:0d:7c:c0:a6:18:bb:44:50:bb:4c:c9:
99:b7:8d:13:38:a6:6c:d8:05:df:78:6d:1c:85:52:
68:7e:9b:43:e4:21:ad:a4:e3:d9:37:a6:84:3a:33:
fe:3c:03:48:88:4b:26:ee:db:3b:78:68:74:33:00:
0d:02:58:19:79:89:bf:25:4d:59:27:83:4d:92:6d:
51:4f:1c:de:66:ab:4e:53:a9:53:fc:bf:b6:e2:6c:
a7:d0:c2:b1:05:c1:0b:fe:cb:8c:3f:77:3d:0d:bd:
c1:3e:7b:c4:a3:01:f6:07:8c:2e:ec:17:f0:ed:c1:
f1:a5:30:06:b7:d0:6a:0f:d8:33:09:14:35:97:df:
27:3a:84:1c:b1:52:7a:2c:e3:67:05:33:80:a7:de:
94:9b:4f:42:8b:17:ca:ec:ba:0a:bc:19:4f:e7:dd:
39:19:c4:b0:60:d3:be:c6:74:66:4f:20:13:68:01:
3e:01:2d:5a:07:d8:7c:bc:ac:94:6b:65:4c:89:c5:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DD:27:F9:34:52:31:21:95:B7:D0:92:FE:44:0E:59:2C:C1:39:8D
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ba:d5:30:a9:08:15:2c:40:d3:68:34:24:03:79:33:7a:27:
ac:7f:38:b3:cd:1a:db:64:99:3a:cb:bd:f5:ce:75:9a:00:0b:
14:1a:e4:87:aa:3c:79:33:92:ed:fc:72:31:d8:63:44:ca:29:
f6:36:fe:2e:bb:0b:ea:f8:09:51:0b:05:b9:5a:6e:4f:d1:16:
57:1e:ef:19:d4:c0:9c:77:bf:24:a9:6f:84:f3:2a:b0:d4:d3:
93:dd:25:d0:96:15:25:40:f8:01:7f:34:f1:ce:e1:57:06:aa:
ee:f2:eb:d2:ca:95:53:88:37:a5:92:b6:68:f2:df:2f:20:56:
ac:7a:09:38:8d:6c:94:49:f0:5f:2e:ad:b3:0e:6a:c6:9a:e8:
39:ba:c8:92:80:01:22:3c:68:16:4a:9d:e7:19:09:18:56:ec:
95:f7:f0:92:96:7d:34:82:ff:a2:71:c2:66:86:a3:89:49:c1:
16:7f:ac:3c:2a:18:97:a4:35:7a:8c:6b:3f:d1:3a:01:e9:6c:
54:06:26:75:92:ab:f0:42:fe:ad:ab:f4:1e:13:99:16:0c:4e:
24:b3:f8:ff:eb:9a:e2:df:79:6d:8f:8d:c7:9d:53:06:99:1b:
e9:2a:de:15:25:a7:1c:0f:3d:97:20:af:c2:8f:bf:09:4f:22:
32:30:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:03:40 2025 by rpki-client