Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json)
Hash identifier: oPsIgvb8ffAiIoWyt6E6ezbVJ8crNgTYTBnE/5OJpLc=
Subject key identifier: DB:CA:5E:35:3D:A6:EF:95:2F:1C:9E:BD:CC:10:02:44:66:C0:5E:2C
Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Certificate serial: 07D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
Manifest number: 07D0
Signing time: Thu 30 Jan 2025 21:00:20 +0000
Manifest this update: Thu 30 Jan 2025 21:00:20 +0000
Manifest next update: Thu 06 Feb 2025 21:00:20 +0000
Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: 1+2TC0D4GVjCSsnv2YdN2wWpHAO73IN1BLH+s8YIKpw=)
2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: BMvYT9IDar1yOpAiOIQ1zT2emoZ3Z/Bj9QOBnQBKVOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Validity
Not Before: Jan 30 21:00:20 2025 GMT
Not After : Feb 6 21:00:20 2025 GMT
Subject: CN=679be864-5051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:ab:e4:86:a2:b6:fb:7d:07:3a:3a:9f:c5:
79:10:bd:d7:19:03:20:7a:02:9b:5a:e9:75:a6:53:
1a:41:cf:ec:35:ab:62:92:b3:78:9f:7d:bb:99:08:
48:61:f0:00:5a:a3:ec:d0:00:f1:7d:97:59:f3:22:
69:fb:ce:11:c1:06:e6:52:2a:02:7d:05:b7:7f:ba:
f0:3b:64:3e:29:32:c5:5b:b2:c1:26:40:56:1b:62:
4e:38:d4:21:08:62:d9:78:68:42:f8:b6:7f:70:fb:
5d:99:ec:30:d9:6b:e1:80:9d:93:49:e5:3a:ee:75:
e3:24:b7:c6:ed:10:a4:67:0e:a1:28:8b:07:c4:f6:
78:d7:07:62:97:6b:79:c8:9d:cb:39:22:3a:eb:44:
29:d8:73:89:56:72:6e:28:62:87:5d:00:8f:f5:74:
ed:b0:f1:eb:81:15:8c:08:24:4a:36:93:80:6f:72:
f5:80:37:92:5e:9f:1a:e3:65:b7:f1:0f:76:33:81:
c5:af:86:ae:cc:d5:fc:b7:ef:3a:e1:bf:59:49:fd:
bd:be:36:c0:b5:51:08:f2:eb:71:47:29:2d:d7:72:
bc:53:96:bb:4a:50:af:99:5c:20:20:b9:bb:0b:4c:
f8:ca:29:94:60:34:66:55:8b:3a:12:90:95:7d:b0:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:5E:35:3D:A6:EF:95:2F:1C:9E:BD:CC:10:02:44:66:C0:5E:2C
X509v3 Authority Key Identifier:
keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c0:7b:f2:b5:00:85:8f:33:fd:c5:5e:b6:0b:d1:2b:99:1f:
9f:86:12:85:0b:9f:1f:e5:ac:f8:a1:a0:8b:af:72:1c:ae:7f:
85:9a:b6:8c:a8:57:f8:b0:98:a9:82:f6:80:f8:52:53:56:98:
33:1e:50:35:46:d3:65:28:62:2f:84:b2:b4:bc:ea:7d:e6:0b:
75:ee:a7:d6:3c:c7:e1:fe:29:b4:1c:b7:b9:37:f3:7e:50:2f:
ce:bf:c9:da:62:a0:82:ec:b6:bc:55:52:08:77:f6:14:bc:d3:
30:83:b9:96:eb:50:6f:2a:c6:bb:76:bc:79:fb:30:df:79:42:
ca:e6:da:0d:94:76:5d:c6:79:fd:70:71:bc:7a:12:26:2d:1a:
57:5d:13:ee:cd:61:b0:e0:82:36:5e:69:a5:a3:59:88:18:da:
49:d6:bd:65:59:84:9d:0c:6a:2b:9e:60:4b:85:0d:9d:f4:75:
f9:5c:dd:19:11:7f:de:da:e1:05:2e:8d:f2:0b:6d:af:81:17:
59:1b:a7:77:d6:09:82:28:9e:6a:32:c8:9c:63:ef:19:38:0e:
3a:80:8c:7e:84:a4:9a:ed:7b:27:13:54:db:b4:91:8a:d4:e4:
94:77:06:84:88:bc:c5:7f:d8:8f:b1:ed:65:f0:b7:e7:4b:09:
6f:7d:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:58 2025 by rpki-client