Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json)
Hash identifier: edHysohfqAO2+pBjZcZgFIUhaKcPlY+dejYRc4ZJ3ZY=
Subject key identifier: 46:66:35:68:DE:43:48:C8:3F:BF:EE:50:D8:2B:B7:24:F1:16:91:E7
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial: 0399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 00:50:47 +0000
Manifest this update: Fri 31 Jan 2025 00:50:46 +0000
Manifest next update: Fri 07 Feb 2025 00:50:46 +0000
Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: KiCe78PQPf63LwZTAslGTZpjyhu33JV/yF93BYoP0Co=)
2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: W1x/EXO8bWreNOkmC081MRTGEO62/pX9uJW9+p1JmgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Validity
Not Before: Jan 31 00:50:46 2025 GMT
Not After : Feb 7 00:50:46 2025 GMT
Subject: CN=679c1e66-267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:86:1b:41:93:0e:fd:20:63:08:b6:44:6e:
c5:d8:83:64:57:05:ff:00:5d:84:8f:1a:24:62:b4:
44:00:fd:0a:e5:80:d6:67:c6:75:2d:f3:23:34:dd:
63:91:38:6c:e4:cb:72:58:b9:07:9b:60:2f:77:5b:
82:ea:fa:84:85:bb:e1:b6:39:80:ba:30:8e:7c:b5:
e4:c7:15:70:fc:d8:d4:c0:f4:6f:12:b9:f3:32:e8:
90:f9:d8:f0:6b:7d:2f:8d:4d:8a:72:af:1c:18:1b:
9c:46:4c:7a:ff:bb:74:f1:f0:9a:24:e9:3f:50:05:
2b:68:7f:59:fe:97:9d:06:d2:69:a0:73:aa:41:9d:
48:2a:4e:39:40:19:0e:7f:8e:03:7d:0b:d2:d7:6f:
3f:5d:3a:d5:45:7f:0a:f0:0c:2e:8f:0f:3d:4d:2a:
ea:4e:83:0e:1e:9e:7f:1b:df:57:48:ed:2c:12:ad:
a4:8c:51:7b:58:06:1c:c0:af:8f:2e:04:ec:51:e0:
5a:44:2c:29:da:14:5f:96:40:0c:e4:d4:3f:f4:26:
09:9c:75:4e:85:54:f3:e0:fb:18:c6:6f:93:3f:49:
ac:49:20:f1:ad:46:d6:9e:75:81:c7:7d:4d:9e:50:
c5:89:fd:c8:d0:47:a4:ce:e4:d7:f0:f6:50:40:d9:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:66:35:68:DE:43:48:C8:3F:BF:EE:50:D8:2B:B7:24:F1:16:91:E7
X509v3 Authority Key Identifier:
keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:6d:27:79:b7:e9:04:8f:38:72:12:15:f6:6e:a9:1b:dc:
1d:b1:e6:42:28:0a:3d:48:93:93:6a:c2:6e:31:d6:69:1f:40:
09:b6:99:e9:4a:9e:c5:66:07:ab:c6:d0:ba:07:7a:f3:55:63:
eb:96:63:6a:54:7c:6c:7f:fb:2f:15:80:c7:da:d7:55:76:90:
96:bc:d5:a4:33:14:c0:e0:2b:1e:da:85:8d:0e:e4:28:f3:1b:
c5:ca:40:ba:9e:4a:5c:33:1e:b9:7e:9b:98:ca:a4:98:54:66:
2b:1d:2b:6d:6b:c4:d8:f1:e8:5a:ea:ca:ec:a3:6c:43:65:32:
a7:40:18:2f:47:bf:b1:93:55:dd:85:5e:d7:48:9d:3e:a5:f0:
27:68:28:fd:89:b3:47:ee:d7:0d:13:72:63:9d:97:fc:e7:fe:
94:35:e0:45:3a:c3:c3:10:1d:2a:9f:e5:13:d9:3c:7c:70:af:
78:81:7b:e5:aa:44:d6:bc:47:83:e6:28:6a:bb:f7:67:e4:1e:
0f:28:a9:49:72:60:18:e8:cf:5a:76:86:57:a1:0e:fa:9f:e0:
42:d8:1a:f1:2b:6f:a6:5b:bb:40:7a:93:05:09:55:ed:21:e8:
cf:0e:2f:2d:77:b3:c0:68:0b:fa:47:92:de:07:93:8a:c0:bd:
03:03:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:32:14 2025 by rpki-client