Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: oTmjPJ7vuvIGiXU2YzdgqOldLoPctRk2wnw78QSf0L0=
Subject key identifier: 56:4A:2B:08:25:31:EF:A5:93:C5:74:DB:60:0F:CA:98:C7:FF:45:0A
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0BEA
Signing time: Fri 31 Jan 2025 18:32:46 +0000
Manifest this update: Fri 31 Jan 2025 18:32:45 +0000
Manifest next update: Fri 07 Feb 2025 18:32:45 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: 4/sZsJPNEfQciiFlKGUGesDSeoQJXnuFMb7DMmf2pU0=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: oFYr2yy9dMefE9Z1wzHmLqOiXmS6OATdYeTX4qCFAV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Jan 31 18:32:45 2025 GMT
Not After : Feb 7 18:32:45 2025 GMT
Subject: CN=679d174e-4180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:64:07:d3:f0:b3:8c:b4:b0:ef:f5:ed:1a:
04:c2:11:28:78:a3:d7:7a:ce:cf:5a:81:ac:e2:51:
92:d3:80:93:2c:8e:75:f7:22:b9:7a:02:32:89:e6:
87:98:f1:36:d3:65:37:9f:1d:51:c3:0d:0a:62:ec:
50:a5:92:6b:d1:06:92:f8:36:ee:05:60:e2:6a:0c:
54:19:c6:3d:84:aa:c5:24:d2:74:7a:3e:45:09:bb:
a4:cb:75:08:d6:f0:51:c1:91:13:9d:8e:2c:45:94:
42:ef:39:86:44:87:22:6a:ca:e0:ff:02:b2:75:49:
96:c6:79:dc:1b:ff:8d:77:43:a2:af:69:a3:06:9c:
0b:b4:8a:7b:6a:55:04:08:09:4a:08:53:f2:5a:94:
0a:dc:20:e1:fc:9a:24:bb:f1:5b:6b:b9:b5:cf:58:
72:b2:6d:0c:ea:10:87:96:6e:a4:e7:d5:c2:86:62:
0f:6f:3d:40:a6:9a:8e:e8:a3:b7:ae:f1:0e:5b:0b:
89:de:ed:eb:65:42:15:d8:7f:41:13:75:64:39:db:
7b:62:d3:6a:9f:dc:3e:77:41:1e:c4:e1:f6:50:b7:
68:1c:da:73:e0:b2:46:cd:97:96:6f:22:e3:0c:a9:
a2:07:4c:7e:57:2f:7b:77:60:c6:b2:d5:24:12:8e:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:2B:08:25:31:EF:A5:93:C5:74:DB:60:0F:CA:98:C7:FF:45:0A
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:0c:62:f4:06:e0:33:c8:69:a9:f5:0d:58:25:a1:85:e1:
37:c2:31:fe:9d:4f:7c:ec:d0:35:1b:c7:12:bd:ae:20:ec:27:
27:cf:b9:0d:5d:c9:12:3d:eb:15:78:04:76:79:5f:6e:c7:c0:
22:e2:7a:fa:80:0f:b0:7b:3d:54:80:8f:62:1d:53:84:e0:37:
0d:e4:9d:ff:83:68:44:c8:00:0e:5f:76:12:07:e3:fb:1c:9d:
a1:f5:cd:33:cf:43:0b:62:65:31:07:6f:08:67:68:6d:9e:18:
41:b1:4f:d0:72:45:96:ef:66:76:bb:19:23:c2:44:20:53:e9:
94:d7:ec:fd:fd:d0:b5:4c:b4:95:51:ca:8d:05:b4:ec:fc:70:
0e:c6:05:fb:a0:11:85:c2:d1:6b:c3:7b:61:3f:27:01:48:3d:
0a:80:2e:54:5c:e7:e3:60:e8:14:a5:78:78:54:ed:ca:6c:d4:
2e:8e:f6:38:a4:d9:c7:5b:58:05:63:17:38:24:2f:7a:2e:4a:
83:0e:de:a6:b4:d9:09:46:15:ca:7b:a4:d3:48:7b:83:bc:c1:
ad:60:23:80:b4:03:86:e6:e2:7c:31:1a:f1:05:ef:56:c6:b6:
d9:e6:7e:0e:ed:9f:ec:70:46:5b:34:b2:bd:bd:03:15:a0:a3:
67:93:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:23 2025 by rpki-client