Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File: -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier: dSV0dAh16KY6s5XV2VqVvEGpYa+wagE+69T5AfH70ww=
Subject key identifier: 3E:CE:41:E3:81:E6:4D:3A:E5:D3:3E:95:73:FD:3F:9D:50:66:AE:50
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer: /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial: 03B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 00:45:23 +0000
Manifest this update: Fri 31 Jan 2025 00:45:22 +0000
Manifest next update: Fri 07 Feb 2025 00:45:22 +0000
Files and hashes: 1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: 2lLLQ+SfZuwmsDoc3OrCMwdLR8wK0i2ds7v0wUGE4hU=)
2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947 (0x3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Validity
Not Before: Jan 31 00:45:22 2025 GMT
Not After : Feb 7 00:45:22 2025 GMT
Subject: CN=679c1d22-94a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:de:1c:b4:77:94:1f:5d:7f:0a:49:11:03:
f5:97:d8:36:a5:b2:01:41:09:31:44:bf:31:e8:67:
8d:94:f4:56:d9:6d:0b:26:60:3a:a8:c5:06:3d:e1:
de:bf:5d:aa:c2:af:8f:55:f1:8b:25:c9:ba:9a:6c:
1d:c4:a8:27:90:f5:82:db:0f:08:e0:70:c8:62:99:
35:0a:d8:49:eb:ac:bd:db:d7:d2:c9:bc:27:c5:ce:
d0:f7:ea:4c:74:6f:2b:e2:49:f4:4f:b9:cb:4b:a7:
37:07:01:98:a0:11:79:af:08:a9:21:8d:2b:41:e4:
81:b5:6d:a2:57:ae:41:a6:67:09:f6:99:9d:f2:5f:
1c:3e:10:8d:ed:da:63:75:81:c5:65:e7:97:d4:6b:
84:29:f8:5b:bc:e2:6f:78:be:5f:4a:63:99:bb:81:
78:54:f7:10:a8:5b:ca:da:20:69:27:f3:ce:d6:34:
c1:f9:9d:fe:d6:34:c4:6a:01:c8:f0:92:2e:49:34:
16:c0:62:81:10:28:e0:3d:02:06:1e:36:bc:6c:18:
c2:79:95:07:2d:02:c8:4c:8c:47:ff:02:a0:12:8e:
cf:d2:2d:18:9c:04:db:6c:d3:fa:0f:bb:69:a1:e7:
10:02:6b:5b:00:b8:5c:9c:99:37:5f:cc:fe:f5:b8:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:41:E3:81:E6:4D:3A:E5:D3:3E:95:73:FD:3F:9D:50:66:AE:50
X509v3 Authority Key Identifier:
keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:6b:8c:17:b4:0a:c9:5a:9d:7f:4c:4b:3b:ce:aa:ae:2f:
d5:9d:4c:19:7b:c9:ad:f2:00:31:65:cc:bd:2a:5e:29:5a:3f:
b9:bf:07:ca:e2:e5:28:e2:e8:4c:11:19:74:16:d9:76:4f:59:
dd:e8:15:e0:7c:ec:c6:ff:1a:6e:03:08:55:22:8c:cf:f5:38:
d1:b2:27:9f:0f:a8:97:c1:32:8a:a7:4a:0a:f1:c4:b4:84:23:
73:02:f8:ae:bb:12:42:f7:c7:ed:ce:b6:2e:ca:2b:10:14:4c:
df:24:95:8a:76:53:be:24:8f:71:04:7c:da:65:9f:c9:07:b7:
79:45:c7:c9:f3:70:f9:c2:3d:87:f5:22:aa:60:d7:8f:86:66:
94:c9:50:fd:45:99:a9:69:61:8b:12:1b:47:74:9b:55:d3:3a:
43:66:29:93:b4:44:9c:3e:7f:4e:76:bc:5a:ee:07:1f:fa:b2:
1e:6b:99:5c:43:c0:a1:8f:6e:e7:7f:54:fe:86:d7:0e:6b:c5:
30:36:68:35:27:f0:fe:4d:fb:39:8e:ec:b5:f9:98:b1:c0:15:
a9:7b:f4:66:3e:dd:af:6b:b8:90:9c:b9:ce:56:60:bb:ca:e5:
85:5b:57:95:b0:40:aa:97:e5:15:3c:f2:60:24:2c:77:3a:41:
6f:80:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:33 2025 by rpki-client