Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json)
Hash identifier: J3Tl6fN+7JXQ23soB1Sok6ig3e2B2RTPKP3oS/8GvuI=
Subject key identifier: D8:73:59:60:89:E6:01:F6:8C:8B:BB:74:F6:2A:F4:D6:71:AF:DC:3D
Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
Manifest number: 8A
Signing time: Fri 31 Jan 2025 05:37:25 +0000
Manifest this update: Fri 31 Jan 2025 05:37:25 +0000
Manifest next update: Fri 07 Feb 2025 05:37:25 +0000
Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: CySuenR9alRH/MHPQBl/6nJRjR2Eo+AN8poyvbQJK/o=)
2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: hXpBoYToApPmmdPekjKleadge49SIJY0fjcaISdG6yE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Validity
Not Before: Jan 31 05:37:25 2025 GMT
Not After : Feb 7 05:37:25 2025 GMT
Subject: CN=679c6195-db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:13:ec:a2:38:d0:1c:d2:3f:1d:3d:c2:ca:
df:d9:56:bc:9e:f2:83:e7:8f:59:17:ef:98:2e:96:
3f:88:fe:17:6e:c6:b0:b1:2b:cc:c3:fb:c3:32:e8:
e6:f3:a0:a2:51:8e:ef:2f:fa:df:7a:e4:85:40:ce:
d6:28:9c:99:bc:79:c4:5e:f0:87:2d:4e:5d:eb:dd:
ab:a8:c9:d7:e3:38:94:8e:aa:8d:67:0e:31:c2:2f:
83:a5:1b:ca:ae:b4:81:a8:53:f7:3a:10:3b:9b:86:
5c:1f:c1:74:67:d0:7b:64:0e:5c:36:a9:87:1c:93:
3e:37:a2:d3:d3:18:7e:ef:b9:aa:ce:f5:05:03:19:
64:95:fa:da:28:e2:b4:23:0e:d5:3d:8e:17:9e:66:
2a:c7:e3:30:72:f5:f5:3b:cf:ca:01:60:e1:23:d8:
a2:8a:b9:19:19:21:1e:bb:04:c7:9e:d4:83:4f:2c:
69:54:c0:34:c4:8a:8f:e7:4a:79:4b:a0:5d:bf:23:
ef:4a:44:bc:6a:78:c9:5e:bd:70:6c:75:16:04:43:
be:32:c5:e9:6f:19:38:0e:1e:77:e2:3a:1a:f2:4e:
d9:c4:e8:e7:ca:2e:1c:17:81:6a:db:d9:5f:8b:f7:
36:1d:24:4a:58:b4:0e:bb:9e:94:df:be:d1:b6:66:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:73:59:60:89:E6:01:F6:8C:8B:BB:74:F6:2A:F4:D6:71:AF:DC:3D
X509v3 Authority Key Identifier:
keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:38:08:7c:bf:77:ab:cb:d8:dc:42:2b:ba:fe:f9:8e:12:03:
84:23:d2:92:c6:42:c4:55:ba:65:29:e0:9b:ae:7a:44:5b:31:
3e:18:8a:8d:9e:e7:e9:8c:f8:12:8e:b2:dc:ed:e2:ca:ee:2c:
a3:b1:5f:82:2b:a4:18:5e:d9:e9:d2:4e:33:0c:aa:a6:70:1b:
c3:23:be:11:c2:e6:b1:89:14:3b:c4:74:0f:4e:c0:fb:cc:e1:
28:b7:e0:8d:71:be:58:6a:f3:8c:18:b6:c0:3c:be:ae:b4:0e:
2d:3b:91:6c:56:b1:cd:86:45:c6:1e:26:0e:6c:15:ef:9a:7f:
dd:d1:63:76:d3:d0:7e:d1:97:fe:2e:41:50:14:5b:b5:58:77:
9b:79:fc:5d:27:49:d3:30:c7:c6:ec:de:18:c3:d6:f8:da:46:
87:aa:a0:cb:63:4b:2b:1e:3c:97:6e:5d:78:bc:b3:1d:8f:fb:
33:b5:4d:ad:18:1e:a4:c4:26:2e:0f:93:95:2e:0a:dc:4d:97:
b8:ac:da:0a:e7:f6:7f:3b:8a:e3:3d:10:eb:40:73:ce:33:2e:
28:d2:16:6c:02:44:f6:b4:0e:45:8a:6f:82:6d:03:3d:2f:05:
d0:0b:d2:ba:09:fa:f1:dc:47:27:61:18:ae:11:bd:ab:a2:0d:
3f:fe:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:58:00 2025 by rpki-client