Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json)
Hash identifier: hT42Sy3rRzvYWsocjQaR8QR5ioXHCnPxPfWrNFyaH9g=
Subject key identifier: 01:AE:BC:49:61:D3:C4:97:7D:3F:38:7C:80:14:CD:3F:D8:FC:89:58
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 02:41:42 +0000
Manifest this update: Fri 31 Jan 2025 02:41:41 +0000
Manifest next update: Fri 07 Feb 2025 02:41:41 +0000
Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: WPm8KHDSvZnuNNsCBQhQxHY4CBNlgc4skRCzKzbdAJI=)
2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: C5+qR+xwM5riTT+23t/1tPZQq66L4etzO1hAZvNu09M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Validity
Not Before: Jan 31 02:41:41 2025 GMT
Not After : Feb 7 02:41:41 2025 GMT
Subject: CN=679c3866-4084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:90:d3:76:b1:d7:15:73:3d:84:64:2c:98:
c0:06:b3:cd:7e:2d:53:10:e2:22:f2:3c:c3:87:a9:
df:a7:40:ab:df:c9:0e:30:8d:c2:36:f3:1e:be:1b:
0d:48:cb:0c:3f:8f:ad:78:8d:ba:ce:4d:36:10:16:
96:6e:5a:26:c7:71:26:51:a7:7d:2e:9e:c7:08:25:
41:8f:f6:10:b5:54:f3:73:c8:8d:78:94:6f:2d:29:
68:65:b1:74:0b:69:e9:8f:91:6a:fa:b2:e8:68:a5:
54:47:d2:7a:cd:2b:ac:c8:f2:8b:c8:18:4c:63:85:
13:95:d5:01:4f:0c:e1:61:58:43:04:f5:7e:6f:73:
e3:6f:ba:97:53:c1:df:2b:8c:69:6c:79:10:31:9d:
d8:a0:e1:88:a4:3e:a0:01:f7:07:7c:13:91:47:5d:
95:96:81:29:eb:2c:90:61:40:d3:e5:de:0c:d0:b3:
e3:9b:29:48:5c:ab:e9:8c:2f:f8:dd:9b:11:e4:eb:
77:7c:68:3c:13:08:16:b4:07:ba:69:88:f4:4b:61:
ed:ba:4d:a3:0c:66:59:c2:55:ae:16:34:d6:d6:f5:
e9:95:9f:f2:38:dc:e3:9c:ee:f8:05:d0:f8:3d:90:
0a:da:67:fd:6d:8e:69:35:33:d9:31:61:4d:9d:8a:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:BC:49:61:D3:C4:97:7D:3F:38:7C:80:14:CD:3F:D8:FC:89:58
X509v3 Authority Key Identifier:
keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:c1:01:e4:ce:13:a0:11:d4:5e:99:7f:1b:92:0f:86:e5:
ac:a2:de:28:76:2d:08:92:0a:0e:85:09:2a:f5:d6:3e:6d:2e:
f8:a3:f6:5d:7f:97:b5:34:df:aa:a7:58:7a:3e:d1:de:9b:93:
84:e1:e8:9b:8d:cc:2b:c1:27:0d:38:eb:5b:7c:86:b9:82:38:
b9:88:dc:74:59:df:67:d4:15:af:6a:cc:dc:32:77:e7:31:ee:
4f:ce:78:8f:de:ca:d9:71:43:d2:3e:95:2e:14:23:17:ae:3f:
97:3f:3f:e1:a8:ac:bc:d1:37:c3:15:bf:7d:e0:44:36:f1:b8:
35:c3:a7:8e:14:c0:39:06:4b:27:de:46:2a:3e:66:c0:f9:4d:
d4:e2:e8:cc:78:bd:a3:22:6c:0d:eb:6b:34:a2:a5:b8:27:73:
24:05:77:be:51:66:80:45:50:63:d8:90:b3:63:3d:51:30:35:
cb:b7:a3:e4:1e:21:3b:ea:8d:ae:ba:68:b2:6a:0f:e1:ec:d5:
05:59:6d:5f:ee:6c:a8:01:f1:c9:e7:a5:54:59:1d:bf:f4:83:
6b:29:dc:cf:5e:82:2e:58:41:cb:61:5a:a0:b0:2b:50:b0:ce:
d6:a6:d3:16:a6:59:53:3b:76:b5:26:27:2b:94:41:7a:62:26:
78:10:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:40 2025 by rpki-client