Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
File: D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft (raw, json)
Hash identifier: ya+SRpBXCVEq+yD7xTwRhRH7QlF5gS0ZsXoJf0KZLj4=
Subject key identifier: C7:3F:42:75:7F:47:9A:D3:55:1B:E1:8F:67:25:83:83:FF:25:68:30
Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
Manifest number: 0133
Signing time: Fri 31 Jan 2025 03:40:58 +0000
Manifest this update: Fri 31 Jan 2025 03:40:57 +0000
Manifest next update: Fri 07 Feb 2025 03:40:57 +0000
Files and hashes: 1: D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl (hash: TegiJkJ3iq42LUIHtjageopPEu9lVxgbfHyAKJVlvTo=)
2: 075B4CC80AC511EEB25A152AC4F9AE02.roa (hash: WMsnJeKRDE/E3eYU+nh3vcngfITTgAj3NVw90NWzGkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Validity
Not Before: Jan 31 03:40:57 2025 GMT
Not After : Feb 7 03:40:57 2025 GMT
Subject: CN=679c464a-a538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:62:30:31:be:d0:21:5f:b2:ab:6d:e4:04:
c9:e0:cc:5c:b9:57:a7:c9:c5:e4:9b:cd:3b:14:a5:
67:0f:d2:b7:6f:c9:13:5d:56:b4:07:cd:4f:e6:9a:
82:fe:96:bc:bf:c0:ee:37:b0:aa:c2:61:48:ad:c6:
22:10:f8:49:68:e9:66:12:c2:3f:cc:4d:ac:99:84:
c5:5a:29:db:e8:11:e1:0b:66:6f:3f:46:a1:d2:e8:
ba:4c:b4:7e:94:8e:0d:a5:05:02:c5:82:a8:13:a7:
5f:e1:2a:e5:f6:d2:a0:36:50:fa:f6:6b:b6:f6:34:
ac:51:53:d6:f2:f6:b7:30:f8:ee:8b:c9:c0:4f:ad:
86:11:22:a0:15:a2:06:72:9b:3f:20:a8:26:da:90:
29:00:b6:e1:c0:73:6e:d9:55:20:03:01:6f:54:bd:
95:57:55:df:a1:4e:d6:21:dd:31:51:4b:c2:23:0b:
9a:53:77:24:55:04:71:d5:9d:ca:bf:24:49:d4:4e:
a1:57:46:ce:84:65:a9:f5:65:d2:5e:1d:80:23:e8:
49:0a:28:71:a1:41:51:d5:bb:e2:5f:a7:a4:d0:30:
e1:41:9f:d6:8f:0a:d0:48:21:a7:43:6f:28:9b:09:
fd:f7:a5:f2:6d:95:3f:98:47:d4:95:f2:19:82:3f:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:42:75:7F:47:9A:D3:55:1B:E1:8F:67:25:83:83:FF:25:68:30
X509v3 Authority Key Identifier:
keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:8d:8e:11:be:9b:e5:20:94:d3:d7:ee:4e:32:52:b7:5b:68:
aa:99:f3:c7:f5:c1:cf:0f:66:5f:43:ba:a3:a0:bf:97:9c:4e:
fe:c1:ab:63:b1:90:f3:da:3c:a4:b5:60:cc:98:9f:a0:a8:63:
f6:58:95:3d:5e:09:bb:34:ae:47:54:40:aa:8e:bc:f1:73:89:
9d:8a:1a:6e:0c:ce:8c:f3:65:68:13:e2:aa:cd:32:9c:2f:e8:
ac:6a:01:af:5f:45:12:de:ba:18:cc:14:08:f3:a0:9f:ea:e4:
cd:b1:97:6f:f5:28:11:1e:92:6a:7e:97:21:60:3d:a6:b7:40:
ae:7e:5f:db:21:ec:7d:8c:08:f7:03:36:54:97:e9:35:61:fb:
77:84:17:b5:06:e0:33:b0:80:c8:32:0f:d2:69:7f:5d:c8:e3:
4d:37:1f:94:3e:5f:cb:bd:62:15:84:09:14:e1:21:fa:76:fe:
ae:05:f9:e7:81:22:e0:b3:ea:e3:9b:3f:dc:73:d6:c6:ec:d6:
42:3f:22:a0:6c:e3:f0:45:a6:13:58:ed:a9:52:80:a7:8e:2d:
7d:4e:72:c2:1b:bc:7e:e1:c7:6d:01:c6:01:aa:05:53:51:7c:
72:93:91:b5:46:f9:50:4c:3e:bb:1a:7e:78:ad:ff:13:cf:df:
20:15:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:48 2025 by rpki-client