Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json)
Hash identifier: ya+xkfg+NK/ohZdUHemT5JCyH9XfY3Wo6PdLwITbTqo=
Subject key identifier: 24:C6:AB:64:22:99:0E:3B:93:B7:F6:09:F3:45:FA:DB:24:3D:7F:37
Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
Manifest number: 13
Signing time: Fri 31 Jan 2025 07:04:15 +0000
Manifest this update: Fri 31 Jan 2025 07:04:14 +0000
Manifest next update: Fri 07 Feb 2025 07:04:14 +0000
Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: /nEwW0zY3tCwIbQfHfFIbIrQQVzt0dsNY+J7BqGBOvU=)
2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Validity
Not Before: Jan 31 07:04:14 2025 GMT
Not After : Feb 7 07:04:14 2025 GMT
Subject: CN=679c75ee-620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:d4:45:16:c5:9c:05:a4:35:b9:dd:08:59:
97:95:a1:12:e1:70:b4:a2:aa:36:8f:f7:97:a1:50:
42:ed:22:8e:f8:3d:7c:16:11:d0:3e:9a:e6:13:f0:
18:6e:34:bc:93:24:c4:f8:1b:74:93:97:36:30:32:
c4:f9:1b:ba:b4:13:b8:5d:44:58:cd:79:1a:11:b3:
13:87:e8:7d:f9:ec:ba:29:76:ea:8e:89:3f:c2:04:
f6:e0:84:98:9b:70:6b:60:3b:b9:fe:1e:74:21:c1:
f5:68:76:5a:42:c2:57:18:78:a3:ed:ee:8e:a1:06:
c3:68:53:90:6a:d3:15:6b:aa:f6:e3:b3:21:00:c4:
68:f1:07:67:9e:fa:f0:8e:6b:a9:a4:4e:98:14:07:
3b:17:23:dd:b1:df:9e:fc:22:8c:06:5f:18:f2:a5:
7c:dc:49:dd:c9:d1:41:74:43:60:13:48:46:d0:72:
a7:1f:f9:fa:2e:63:32:df:b9:cc:00:a4:a7:6f:43:
94:41:ac:c8:6a:41:6a:f8:e8:51:5b:6e:84:71:a1:
c7:50:cb:f7:e9:b2:0b:d8:37:5a:96:b5:cf:af:66:
d2:f5:f3:56:7b:44:16:70:2b:32:ec:5b:f4:af:93:
68:b6:54:c9:9f:cd:e9:a7:8d:d5:d2:46:b7:9f:78:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:AB:64:22:99:0E:3B:93:B7:F6:09:F3:45:FA:DB:24:3D:7F:37
X509v3 Authority Key Identifier:
keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:87:09:e8:b5:f2:fb:85:0c:2a:8f:2f:3f:1b:9b:12:e5:0a:
92:6d:34:d9:83:6f:01:04:ac:33:b1:7e:8d:25:f3:07:62:b9:
a1:42:2c:d4:36:d5:63:6f:49:df:e7:39:20:4f:76:2e:c1:e0:
e3:43:e3:cf:60:ad:8e:ec:d8:7b:c1:a1:5b:80:d0:bc:95:43:
e1:ff:6a:e7:c7:e9:9a:4f:38:5c:20:16:8e:03:fa:53:73:0a:
2d:2b:30:07:9d:0c:29:7b:84:9f:af:b5:9c:d4:eb:53:12:f1:
dc:9f:14:13:54:30:27:be:2f:35:c4:74:9a:20:96:a1:a9:36:
95:aa:4e:0c:ee:e4:b2:c2:02:61:df:fd:60:2e:be:d4:08:6d:
b2:56:90:35:66:ca:bb:b4:68:a6:1d:c1:d8:84:6f:c0:34:02:
8d:c9:d6:c5:95:ca:f7:ac:47:46:96:af:77:26:ca:f0:ef:a1:
2e:e2:0e:fa:b7:fa:d3:3d:e2:2e:44:c3:35:e8:bd:51:c3:dc:
98:9f:d9:0d:2a:15:7f:4c:ff:70:e7:62:5e:1e:08:ae:35:2f:
fc:6d:ec:7f:b5:c5:77:c6:a2:20:7a:b2:c8:1c:7b:a2:e3:ed:
a2:37:81:34:f9:5f:da:9d:5d:ad:f7:a0:f4:ad:8f:85:de:b4:
02:4a:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:23 2025 by rpki-client