Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json)
Hash identifier: dsHlcjzA9B3T65BBCb5OFUd9A7ltSDRvyiA9VW65NmY=
Subject key identifier: F3:29:81:8C:FD:93:27:EB:65:40:A2:AD:3D:2B:15:28:A0:C2:29:89
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0C1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
Manifest number: 0BF9
Signing time: Fri 31 Jan 2025 18:40:38 +0000
Manifest this update: Fri 31 Jan 2025 18:40:38 +0000
Manifest next update: Fri 07 Feb 2025 18:40:38 +0000
Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: L2COM+RsHCHUguXG7hRlpcweX6XjLh/f3t4grgbXYxo=)
2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: KxBznzzIjiiWziQBttPlsvKpm1Ne1EHTuACq/qobY/M=)
3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: iR7R0Q5cUse9aitnJ6QMDQAjrBMPKnkO6yIZQMvxGeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: Jan 31 18:40:38 2025 GMT
Not After : Feb 7 18:40:38 2025 GMT
Subject: CN=679d1926-767d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:00:ec:23:de:06:66:21:c6:3a:3e:27:08:
52:7d:f6:6b:de:10:a1:94:59:25:b9:79:58:a9:c9:
46:bb:4d:fd:39:b5:54:de:1e:75:ac:e5:4f:3a:96:
c8:b3:2d:eb:73:9b:10:e9:3e:d7:6d:f8:8c:64:35:
86:95:09:be:03:31:17:93:15:a8:0d:b3:aa:55:bb:
85:21:14:e1:47:c0:23:63:09:41:f0:e2:01:92:39:
47:c1:6d:ab:bc:4f:10:e2:23:e2:b0:15:f5:c9:c9:
1d:01:09:fe:44:fd:d0:78:27:a5:57:a8:23:4e:ce:
6e:d3:11:e0:c9:79:f2:44:62:02:26:ca:1a:76:4e:
2b:dc:91:90:7a:bc:db:62:1e:d8:e5:a5:42:a7:e2:
ce:3d:42:89:8b:9d:38:fa:ba:74:77:ab:84:8d:b3:
9e:67:de:99:5d:9b:0e:90:fc:73:63:6c:90:e7:bc:
f3:66:24:16:10:e0:39:ec:29:bc:b0:91:a1:2e:bb:
7d:c1:ee:bc:54:69:69:f6:00:a0:23:22:d2:d3:65:
ff:00:54:31:34:30:f0:ec:70:ac:c0:f1:d3:44:3c:
35:06:d4:a2:af:16:98:13:91:55:28:86:63:a8:6f:
e5:9e:cb:ea:02:e9:c0:16:dd:fc:fd:0b:ec:a4:e3:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:81:8C:FD:93:27:EB:65:40:A2:AD:3D:2B:15:28:A0:C2:29:89
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:1f:4b:ce:f0:24:7d:9f:04:ac:b8:df:33:7e:34:a0:ba:44:
fd:a3:f5:fc:e1:9c:14:7f:d6:ea:32:91:95:d7:2c:67:2d:4d:
96:7a:c8:9e:75:94:70:a9:91:b3:aa:5c:02:d5:ad:0d:f4:f0:
6f:a7:78:0e:cf:de:26:bb:a3:54:84:0d:41:b3:de:ec:08:43:
35:63:d1:c2:81:91:d4:d4:db:59:73:36:6e:e3:22:9d:37:ec:
48:6c:61:27:02:9f:e3:81:6c:33:42:55:19:cc:97:81:46:1d:
d3:e9:ce:d0:69:e3:43:22:d8:f2:70:7f:44:8c:a5:89:fa:51:
df:31:95:73:ae:3b:db:31:31:d4:ac:70:e3:91:6a:39:a9:73:
dd:4b:eb:05:dd:75:75:63:26:0a:ad:d3:7e:36:4d:95:06:0a:
35:f4:0a:92:56:d8:19:f0:ba:0d:50:28:4d:42:11:28:ab:f3:
71:43:29:ce:6d:4b:e5:b4:ce:98:ce:04:4e:36:77:5f:86:52:
7e:83:cc:26:88:f8:ca:54:78:fc:c5:9b:dc:d1:1f:b6:3a:a0:
cd:63:c2:a2:e9:f7:be:ea:60:7a:84:37:e6:a0:da:f8:0f:82:
0b:be:da:7d:08:ba:21:71:5a:80:45:c4:43:26:b1:9c:02:61:
72:a6:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:26 2025 by rpki-client