Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
File: xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft (raw, json)
Hash identifier: AEa1GU7statOamFRnO6WINh9fEYesqGbeKjTJYy4qeg=
Subject key identifier: 31:86:D3:24:18:80:C9:D8:67:17:FB:DB:EC:07:14:A7:E8:9A:04:AC
Authority key identifier: C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B
Certificate issuer: /CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
Manifest number: 0147
Signing time: Fri 31 Jan 2025 03:29:42 +0000
Manifest this update: Fri 31 Jan 2025 03:29:42 +0000
Manifest next update: Fri 07 Feb 2025 03:29:42 +0000
Files and hashes: 1: xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl (hash: n46zPc9lU/gJfyTgapMJrElPV0PvtdCtPl5XqwgC/AI=)
2: 59AFB718ECB911ED99732649C4F9AE02.roa (hash: +N1Z+YRZBmqUzAg48fb4th5gmmSesIwu/VfApSVKW6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B
Validity
Not Before: Jan 31 03:29:42 2025 GMT
Not After : Feb 7 03:29:42 2025 GMT
Subject: CN=679c43a6-c195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:4a:f6:42:41:fb:c7:63:42:23:89:fa:29:
c5:ac:78:41:3d:1c:43:9d:f2:6b:1b:7f:52:e5:cd:
9c:a7:d7:86:28:76:c9:79:37:cf:cc:65:1b:30:28:
b9:c7:ab:e6:fd:2f:8e:42:21:fb:d4:0c:2c:ab:4a:
94:15:2a:7e:71:72:92:d6:11:f7:29:dc:f2:54:c7:
2c:0a:ae:ca:13:02:ab:fd:31:85:e2:84:4c:4f:d4:
9b:b4:84:e8:a2:b6:fe:03:a4:89:13:37:5a:91:75:
51:e3:c5:ee:a6:18:e7:cd:a9:56:e3:52:48:50:74:
49:e2:c3:76:39:6e:13:89:4a:ca:29:0a:5f:ac:0c:
97:bf:e6:58:cf:25:e9:96:16:2f:a2:bb:47:09:e8:
c0:b3:88:01:71:18:d9:31:a5:e6:da:43:67:df:ef:
72:cb:b0:80:ef:e3:58:c4:f7:37:fe:e5:26:80:d9:
09:a5:f1:5e:8d:cc:00:1d:bb:59:57:28:ab:42:2d:
eb:97:66:57:00:e4:51:82:b3:13:c4:cf:aa:68:fd:
70:9f:7e:7f:04:50:24:af:ca:c3:0c:d8:ae:58:f4:
2d:4c:10:1f:68:3c:70:bd:dc:d2:9c:ee:57:07:7a:
8d:55:7f:5c:fb:89:6d:ce:32:80:dd:0b:46:7d:74:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:D3:24:18:80:C9:D8:67:17:FB:DB:EC:07:14:A7:E8:9A:04:AC
X509v3 Authority Key Identifier:
keyid:C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:cb:16:5d:5b:80:d1:93:d8:b9:bb:16:f5:6c:b5:48:87:
1c:ce:f4:1c:ab:95:af:f9:1d:e0:9f:6d:61:74:da:f5:de:aa:
e7:2a:8b:cc:36:46:2a:21:ad:da:1f:03:a4:79:23:0e:4e:92:
62:ea:f3:9b:e2:10:26:84:20:f4:82:45:e4:75:27:18:a6:ba:
f4:ab:08:ee:c8:a7:a3:fc:0b:b4:38:13:9b:f6:34:a5:3c:f4:
d1:91:57:2d:f9:9a:c1:09:d8:55:c9:09:f8:54:e9:77:89:d2:
24:36:e9:13:8f:56:2f:85:f1:00:4b:20:74:b7:17:c5:e3:de:
50:52:dc:9e:2b:8e:3d:2d:0b:0a:5d:93:aa:42:15:88:06:cd:
f0:e2:8c:de:81:3a:4b:a8:59:b5:78:18:e5:ec:6f:8e:f2:28:
59:95:27:bc:2d:3c:ac:b3:26:02:67:94:d4:c4:df:36:1e:40:
c9:d6:94:07:af:6c:96:3f:91:2c:70:9a:65:e4:2b:8c:8c:d0:
22:fe:43:fe:7e:77:02:ff:d9:01:71:85:e0:7c:81:27:e9:6e:
f4:bb:e0:07:c5:44:6c:77:ce:ce:b3:ed:99:36:99:b0:de:a6:
c5:aa:48:a0:86:64:65:ff:b4:41:ca:7f:9f:91:16:61:63:21:
98:89:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:58 2025 by rpki-client