Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json)
Hash identifier: YcPIk3EdV80f+Ne/5aguicroQg1RQHQUQ6tA1BHN1x4=
Subject key identifier: 2F:A5:0A:E9:12:3B:1D:CF:71:6B:76:8A:41:60:80:EA:AD:EC:E0:1E
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial: 04B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
Manifest number: 04A9
Signing time: Thu 30 Jan 2025 23:58:40 +0000
Manifest this update: Thu 30 Jan 2025 23:58:39 +0000
Manifest next update: Thu 06 Feb 2025 23:58:39 +0000
Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: jL8meV6qRUGiiuBRDV4TS/LO1g9sFRPZ36fKBq84Ye0=)
2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Validity
Not Before: Jan 30 23:58:39 2025 GMT
Not After : Feb 6 23:58:39 2025 GMT
Subject: CN=679c122f-48bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:70:5b:b8:c2:75:10:4a:45:26:2b:42:38:13:
73:f1:3c:13:ad:fd:04:9f:35:24:10:f1:bd:21:92:
8c:33:52:5e:a4:ce:6b:ab:62:e1:f5:4a:d2:df:50:
48:0d:0b:4f:f9:3a:d1:d1:a3:3d:88:14:27:76:62:
e2:3e:54:f1:06:50:80:da:b7:ee:f5:90:0c:f3:be:
36:e3:e3:61:c7:eb:a3:48:85:93:c0:57:a9:a3:16:
f1:a4:9e:95:b6:ac:6b:80:01:e2:f4:1b:44:bb:5e:
de:62:a2:8c:e3:fc:6e:c0:74:b3:e7:bb:2b:99:a5:
7e:24:95:5e:cd:52:8d:98:f7:d8:a4:2e:0a:b9:f0:
1c:99:25:ea:93:a8:eb:c6:94:ea:e2:6f:d8:8a:ea:
21:45:b9:38:81:3e:7e:da:1a:b4:82:52:e9:8b:96:
c2:22:e2:cb:ee:53:09:12:a9:2d:ca:b3:6a:56:45:
c1:20:8a:b9:8e:be:48:69:57:2b:32:07:d2:93:8d:
b1:22:82:9a:03:4f:9e:db:f2:6e:4c:4a:c5:ee:84:
09:9a:62:7e:7d:b4:2c:68:76:c6:ac:17:31:af:0b:
a1:13:27:3c:18:80:14:27:fb:8a:25:f7:7d:3c:fd:
33:8b:5d:8a:91:56:40:c4:fc:69:ca:e9:30:25:f2:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:0A:E9:12:3B:1D:CF:71:6B:76:8A:41:60:80:EA:AD:EC:E0:1E
X509v3 Authority Key Identifier:
keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:12:47:ba:ee:1a:9a:25:78:d3:76:a9:19:cc:4a:56:3b:f2:
ec:69:b5:b2:57:1a:aa:bc:f8:b9:0b:0c:2d:62:3c:7c:b0:3d:
92:61:7c:5e:68:28:b7:6f:96:0a:ee:85:83:6f:3d:1a:48:55:
4f:de:07:fb:18:14:39:bc:6f:29:69:6a:0e:78:2a:95:3e:d0:
de:48:4d:b4:0d:f7:82:d8:45:ff:b5:5e:3a:c3:0d:2c:e8:1c:
47:34:5c:28:89:59:3b:6b:eb:80:67:36:9c:45:50:e0:a9:06:
33:06:e1:b5:bc:45:cc:72:b1:b3:4a:b5:16:f3:e9:de:15:1a:
82:66:47:d1:a2:58:32:f0:53:a8:22:a0:12:cd:24:f2:5e:ca:
bd:01:4f:13:13:92:2d:57:e5:5e:59:22:71:9f:e0:fc:0e:4c:
6a:57:f0:c4:81:92:fd:35:82:ea:d0:ec:dc:1f:6b:b4:72:57:
bd:92:7d:40:81:96:11:e3:de:74:53:8e:91:be:29:b3:71:14:
70:0f:d0:e5:66:bd:32:9b:67:de:a5:a9:3f:0d:d0:59:c4:06:
5b:23:04:ea:0b:79:9e:33:d7:97:8b:94:18:b3:23:a1:e0:a7:
03:6b:b0:73:e9:2f:2c:1e:26:4a:96:8d:57:d4:e2:b7:99:31:
b2:17:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:41 2025 by rpki-client