Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft
File: rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft (raw, json)
Hash identifier: fh7qLuGr1tjXuEW25Eklm5Fx1EPvqRvn4O2qgmjzzRQ=
Subject key identifier: 7E:A3:B2:6F:BF:99:C3:CB:A9:33:DD:E5:84:B4:B6:2B:A4:6E:9C:CF
Authority key identifier: AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD
Certificate issuer: /CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD
Certificate serial: 0774
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft
Manifest number: 076B
Signing time: Thu 30 Jan 2025 21:22:25 +0000
Manifest this update: Thu 30 Jan 2025 21:22:25 +0000
Manifest next update: Thu 06 Feb 2025 21:22:25 +0000
Files and hashes: 1: rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl (hash: QI0MXq4Q6eZHp9Eerk5AZMimFhKy1eSjI3olkrDDcjw=)
2: 38502DA2029A11EB85BD7B84C4F9AE02.roa (hash: MTInpOnl0k5cHzk/mQ2WeCDrev/aJl9yGIcBSOBrAww=)
3: CEA093C66CA311ED9DD6425CC4F9AE02.roa (hash: Iyw+3tj3IM+pBmHPCcr/UX2wQKedAFHetZW/mNvxVH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD
Validity
Not Before: Jan 30 21:22:25 2025 GMT
Not After : Feb 6 21:22:25 2025 GMT
Subject: CN=679bed91-fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:c0:d0:12:21:dc:bd:0e:68:e2:b5:ce:77:
7a:06:57:83:31:89:da:74:fe:1b:bc:73:a9:1c:7e:
79:5c:e7:cd:2c:82:c5:ee:47:e4:a8:0e:45:58:92:
0c:bd:88:61:c9:a7:41:62:ff:3a:38:3b:c8:6e:78:
5c:79:f3:cf:e1:b6:67:d4:5a:74:d6:0f:15:66:b4:
40:31:26:e4:ea:7e:4e:6b:2a:82:81:ed:2d:53:cb:
1d:23:45:6a:d2:58:f2:31:6c:29:9b:2d:ed:8b:4f:
68:6d:bf:c1:e2:b5:84:a7:e1:c4:3a:f3:d9:61:b0:
85:d9:8e:d2:9c:25:12:d5:29:0f:e3:7e:15:12:7d:
6b:64:6b:90:58:9b:31:b3:93:bd:da:83:e8:38:a3:
d8:57:1d:27:30:4d:80:4c:b3:99:cc:f5:f1:36:42:
b5:5a:a9:fd:b0:67:4d:2c:e2:51:dc:ab:95:a1:c4:
b1:df:32:0b:4e:a3:c3:67:76:79:d8:96:c2:78:74:
88:74:7d:64:df:8c:ce:2f:4f:21:aa:e2:c5:35:f5:
98:a5:04:07:43:78:68:d3:ca:3b:76:ab:24:61:b6:
6d:03:f1:d7:e6:c8:2f:22:c7:4a:f0:f2:20:aa:83:
af:44:cb:e8:da:03:0a:57:eb:e7:f3:54:f3:20:9c:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:B2:6F:BF:99:C3:CB:A9:33:DD:E5:84:B4:B6:2B:A4:6E:9C:CF
X509v3 Authority Key Identifier:
keyid:AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:20:7c:da:8a:38:72:26:2c:31:74:9e:df:01:cf:72:a6:c1:
fc:01:96:2b:6f:bb:56:6f:99:47:49:6d:ca:95:1e:9c:82:54:
71:49:62:c5:37:c2:43:5b:ea:52:56:00:e9:f8:de:6d:83:54:
20:d0:69:b1:5e:d2:de:a8:99:4e:d0:31:e3:e1:90:53:7c:2b:
35:02:38:8c:fb:6f:12:65:dc:66:e8:4f:46:f5:35:a4:41:a0:
4f:4a:1a:40:ba:07:37:44:15:a5:d7:d4:ae:e2:2b:a4:60:1b:
78:b5:d6:b0:ed:8c:e5:f6:18:95:c0:5b:87:86:1d:d5:b0:07:
80:9d:ac:7c:dd:08:de:70:f6:5e:85:58:b2:00:3d:c3:aa:54:
5b:db:13:ad:ec:4a:22:09:5d:a1:ff:cf:1a:89:b5:ac:59:07:
c7:d0:68:da:ec:c8:44:76:21:08:92:23:b5:61:ac:35:44:c7:
d6:26:7c:5b:bc:7d:29:4c:8f:6d:2d:cc:8b:36:b2:91:78:fe:
a2:57:b6:03:bf:9a:27:4f:69:38:31:36:a2:5e:49:07:92:1e:
3e:55:19:61:2d:26:9d:61:0d:8a:bf:12:b6:8d:26:9a:30:4c:
1a:8d:77:1a:cd:51:c3:41:5c:23:4d:55:00:09:9c:40:9a:b8:
2e:52:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:44:36 2025 by rpki-client