Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier: Z7LFmf9kwdzqgFWjQ9a3oxo5bCTg8jYL9FlxgAetLJ8=
Subject key identifier: E8:D5:8D:54:C9:77:66:8C:A6:3F:64:4B:D0:7D:14:95:34:77:18:20
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial: 066E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number: 066A
Signing time: Thu 30 Jan 2025 22:23:49 +0000
Manifest this update: Thu 30 Jan 2025 22:23:48 +0000
Manifest next update: Thu 06 Feb 2025 22:23:48 +0000
Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: hehL3pa4+R+Zv5nUsjleU3EWEba8lvBke42BnPk8CH4=)
2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: iVNlEEUpkQ4pO3sAlYnoK5SGYjCiJx3jecw+Vffe23I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Validity
Not Before: Jan 30 22:23:48 2025 GMT
Not After : Feb 6 22:23:48 2025 GMT
Subject: CN=679bfbf5-39b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:b6:59:cb:4c:ca:bc:4b:86:de:6e:0a:e3:
f9:03:61:79:17:5d:41:0e:70:ee:89:81:a8:75:a7:
b1:27:69:67:48:14:18:2c:c8:da:25:3d:91:02:7a:
e6:aa:17:37:c9:e8:9d:78:fe:4c:9e:65:13:26:8c:
41:04:2d:d9:98:eb:e4:b3:91:4d:c4:6d:a0:1e:49:
91:af:47:13:36:df:9c:42:7f:02:2f:18:ea:36:0c:
54:79:c5:3e:31:cf:e4:ec:e2:6c:31:99:90:0c:6b:
ac:fc:ba:d1:88:82:a4:ca:80:42:47:2a:a0:4c:54:
db:70:15:09:ff:8f:35:d6:f6:58:d8:8f:8c:1f:8f:
e9:3c:cf:dd:a3:7b:cf:53:a2:ac:47:77:b1:46:27:
ab:31:fc:5c:fa:96:fb:d1:f2:b5:d4:f3:0e:5e:90:
8e:da:b5:03:3c:ab:01:76:55:e4:c3:e6:24:fa:7c:
00:68:4f:60:20:34:ba:0b:cb:40:da:12:47:42:0e:
83:1a:82:a3:78:0a:9e:c3:74:26:3d:47:da:80:62:
5c:17:c3:ad:79:da:45:b5:21:3f:01:a6:c8:54:e2:
55:19:57:77:7f:e6:59:b0:07:12:73:2a:b7:2f:65:
de:26:dc:61:36:f9:00:9b:db:7f:b3:ed:ae:3e:44:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:8D:54:C9:77:66:8C:A6:3F:64:4B:D0:7D:14:95:34:77:18:20
X509v3 Authority Key Identifier:
keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a2:ab:04:6d:c3:fc:48:1c:e6:84:17:ad:f0:59:bd:ae:47:
05:20:5a:1d:f5:a7:77:58:07:2e:ac:46:9a:87:82:aa:67:75:
85:b6:ee:92:09:34:f9:27:79:e1:9a:6c:61:e9:82:1f:c9:bd:
6b:e2:31:54:88:d5:aa:fb:47:c1:16:dc:3b:97:71:d3:1a:7a:
47:d8:1b:2d:13:60:5c:7e:c2:0d:05:7e:d2:a0:c8:44:6a:fc:
24:cb:4c:e9:4f:41:df:e2:c5:98:64:f6:81:13:a1:2d:ea:09:
d8:22:4d:d5:c7:6f:6c:dd:9e:ea:d4:a3:e7:d9:82:21:22:f9:
cc:9a:17:99:a4:cd:8b:f5:ba:f0:ed:02:fa:30:1c:da:f4:95:
6e:15:bf:fb:9a:9d:65:aa:9e:30:79:78:2e:d9:f1:df:86:50:
6b:28:53:4b:14:1a:87:13:20:42:4d:25:a3:63:21:b6:36:0d:
3a:2e:09:10:96:31:ea:0b:8c:d4:86:1f:51:a8:9f:26:21:ce:
19:69:f6:e5:73:4a:1c:dd:8d:35:0e:6b:b2:07:2e:9f:d9:d9:
04:cc:62:54:28:96:af:50:65:7a:6e:92:0d:5c:e1:2e:3c:9b:
fd:bf:c6:38:45:97:e7:58:bd:2f:95:8e:3d:8b:c6:be:71:09:
35:2d:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:47 2025 by rpki-client