Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json)
Hash identifier: 5l4mxIjw085qyKdalXfQcNVGLHtRLdDQL/IzyaKYym4=
Subject key identifier: 26:60:6B:4E:A2:03:75:3F:9F:20:3A:E3:B9:36:78:E5:54:FA:63:07
Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Certificate serial: 0EB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
Manifest number: 0EA0
Signing time: Fri 31 Jan 2025 17:40:15 +0000
Manifest this update: Fri 31 Jan 2025 17:40:15 +0000
Manifest next update: Fri 07 Feb 2025 17:40:15 +0000
Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: Le5VQdgi6ZoEUfzFqrGZ0Jk9DkrChdi+c1w7R+XURbo=)
2: FDEB52CE90A611EEAC16B10EC4F9AE02.roa (hash: Pmc9VijHKmWmd2y1547WrG3eEFQnb4cWmEa69AQh9WA=)
3: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3769 (0xeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Validity
Not Before: Jan 31 17:40:15 2025 GMT
Not After : Feb 7 17:40:15 2025 GMT
Subject: CN=679d0aff-8d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:49:9f:a2:96:12:fd:c9:17:39:90:de:06:
a2:5c:83:92:62:0a:ae:e1:3e:5e:e4:42:e0:e3:59:
f9:d6:67:7e:a3:78:dd:51:1c:16:bf:db:e0:fb:20:
e1:29:97:9c:d9:3d:44:92:1b:63:9d:6e:67:ce:ff:
61:e5:7c:53:c7:0c:f3:8e:ca:51:31:be:1a:ad:06:
0c:70:36:33:df:2f:1b:fc:19:6b:79:c1:61:58:7d:
27:cc:4e:54:d9:22:35:2d:29:3f:12:a8:f6:71:9c:
05:2a:a4:a2:51:9b:c9:0f:ae:05:63:48:18:03:ee:
b1:0a:ab:5a:05:a2:30:ff:48:f7:30:94:9a:27:67:
07:fd:13:77:a5:c6:8d:b1:83:43:34:02:0a:f7:1f:
e1:16:28:66:56:59:ce:f4:3d:96:6a:d0:d8:88:08:
a6:ca:aa:05:f0:00:72:62:79:1c:61:b0:0c:b6:79:
39:ff:3e:c4:30:26:fd:b5:bb:57:72:f5:00:31:29:
da:4c:67:0f:d2:4d:09:6b:fb:19:38:b0:ba:d2:c0:
d1:90:ac:5b:dd:79:2d:a0:b6:35:f9:ab:36:1a:0c:
77:25:a6:5a:95:1c:3c:2e:3f:cc:0e:a5:ce:fe:70:
e3:1d:34:b5:8f:3d:08:44:2d:4a:51:be:9e:29:82:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:6B:4E:A2:03:75:3F:9F:20:3A:E3:B9:36:78:E5:54:FA:63:07
X509v3 Authority Key Identifier:
keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:ed:19:7c:8d:06:29:3d:3e:8a:e0:bd:50:18:e9:0c:f9:4c:
e8:d1:13:8d:dd:15:02:42:25:43:6c:30:0d:67:38:51:54:c5:
db:b2:98:1c:98:8c:7d:3b:77:7c:c6:09:bb:96:df:f8:86:9b:
9e:4b:4b:66:08:17:43:9d:05:e2:63:54:b7:4e:08:f0:fc:75:
af:1f:68:54:5d:3b:6f:c9:75:18:57:1d:13:44:10:ec:78:64:
17:c2:41:a6:96:59:65:ee:38:1a:2f:35:78:74:d9:e1:78:97:
98:78:4d:0d:01:0c:7f:e8:b8:c3:51:53:14:17:d4:84:04:88:
81:90:bd:17:51:f9:19:be:8b:86:ba:ea:4e:8e:fa:d2:ed:2a:
a0:db:1b:1b:7c:80:2a:13:53:78:cc:45:88:0f:f5:c9:7e:a5:
40:6d:70:ee:ca:f8:cf:68:8b:a5:a1:f7:60:d0:ba:16:70:d1:
4b:4e:f1:81:f2:a0:24:53:67:d1:fc:46:8c:c4:b5:28:23:8f:
59:2e:ad:f8:40:4d:d5:e5:27:3a:18:fb:e1:c1:a7:91:84:67:
cc:75:f8:10:81:4b:78:e9:fd:7a:f6:ba:94:d4:e1:72:b2:c0:
2b:82:7f:9a:c8:29:07:c4:a9:0c:92:06:d7:3f:e1:2d:b7:fb:
18:59:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:44 2025 by rpki-client