Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
File: R2lFsh8liffnEnUf50f6IUOlI1s.mft (raw, json)
Hash identifier: hD9DjYV+q9vEXw5pgVK9klOYQz3HmRLLBG3Hs/D0TVw=
Subject key identifier: F3:16:27:68:F3:DE:D7:B8:B8:AD:52:4C:71:FE:97:F1:F1:C2:83:94
Authority key identifier: 47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B
Certificate issuer: /CN=A9132B1D/serialNumber=476945B21F2589F7E712751FE747FA2143A5235B
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
Manifest number: 0223
Signing time: Fri 31 Jan 2025 02:06:35 +0000
Manifest this update: Fri 31 Jan 2025 02:06:35 +0000
Manifest next update: Fri 07 Feb 2025 02:06:35 +0000
Files and hashes: 1: R2lFsh8liffnEnUf50f6IUOlI1s.crl (hash: VWLLqnNm3MbZLhxuQgMpdvrJJ/fOltGF0n1kzJOHx9I=)
2: A917D87217A711ED8D17FC7CC4F9AE02.roa (hash: Zl1OdprsSbZO6kJ93156dFn5LZrbdumG7KQVdLYJ1W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1D/serialNumber=476945B21F2589F7E712751FE747FA2143A5235B
Validity
Not Before: Jan 31 02:06:35 2025 GMT
Not After : Feb 7 02:06:35 2025 GMT
Subject: CN=679c302b-b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:47:26:86:06:c4:1a:89:8d:59:38:c5:50:
6f:e8:45:70:7d:5e:39:16:25:55:27:08:18:67:fe:
a7:07:5a:b4:5a:b3:7b:84:c7:2c:96:b6:4b:43:d4:
61:76:5f:85:f6:60:af:7e:7e:63:f4:ff:01:e1:ce:
c6:0f:25:30:48:f2:f4:59:b7:a6:96:d8:2b:0f:d3:
b8:06:04:54:e7:b7:89:a8:b9:16:fc:bd:31:c4:57:
82:22:bd:06:ab:08:51:80:27:a2:dd:44:37:be:5d:
8a:02:f4:97:ee:a1:f1:aa:b4:87:cc:84:4b:6c:11:
99:c1:4a:bc:b8:a3:a0:71:1e:02:9b:49:14:89:c7:
6b:63:b9:45:28:8c:15:fe:4f:37:36:6e:ad:ba:06:
3e:85:9f:6d:41:ff:a9:1a:5e:1d:2b:a6:32:08:5f:
01:49:b3:23:12:a5:ee:79:c7:a5:25:23:91:b1:b4:
e8:f8:fa:68:81:49:b2:13:df:82:c8:a2:42:fd:b1:
fc:a2:cf:6d:c9:75:8f:0f:5f:21:d5:25:2b:81:e2:
44:56:97:7a:80:38:0b:d2:9d:64:c9:78:6c:6b:66:
ac:f9:48:44:39:cf:59:50:06:fe:79:4a:94:bd:db:
57:a1:57:a2:92:cf:21:d5:00:8d:3a:21:69:7e:13:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:16:27:68:F3:DE:D7:B8:B8:AD:52:4C:71:FE:97:F1:F1:C2:83:94
X509v3 Authority Key Identifier:
keyid:47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b0:4c:29:f2:11:6c:dd:33:bb:b0:e2:fe:24:d8:af:89:6c:
05:d0:ac:61:1a:c4:02:71:1c:17:c3:d5:42:de:61:ec:d1:c0:
7f:39:06:45:1a:9e:51:b0:d5:0b:a0:44:8a:3d:fb:2d:0f:01:
f3:1f:0f:0a:6d:7f:3f:9b:8f:ae:0a:4e:bc:b8:d5:9f:98:f5:
71:07:eb:02:0f:fc:69:19:72:0f:45:3c:04:c7:f3:62:d9:71:
62:ea:42:90:82:71:7e:65:a2:d5:0c:bb:6d:80:78:9f:53:c6:
fd:83:d4:03:cd:5d:f4:7c:b9:0b:73:93:93:4b:e1:a6:00:ca:
da:32:1e:27:8a:a0:33:f6:dc:44:10:e9:20:24:d1:4d:ee:db:
df:5b:53:bd:4e:c9:cb:8d:11:6a:1a:30:dc:4e:cb:75:4b:ba:
9c:0d:65:59:16:57:cf:c4:fc:82:1a:23:7a:fa:c9:fa:c0:26:
3d:45:a2:53:f4:c8:0f:da:50:08:f4:2f:69:d3:2b:f8:f8:b0:
97:71:87:42:b8:72:59:fc:48:8c:96:4e:25:dc:d2:8b:d8:4c:
30:93:62:14:d7:96:d7:85:b1:58:0a:45:70:70:ff:37:1c:66:
90:71:47:32:63:de:81:b7:f9:37:3f:9d:26:a9:53:db:28:18:
d8:6b:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:49 2025 by rpki-client