Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json)
Hash identifier: AL/ZM05+OnQmNDRhPRUOS/UAJIa9Igr3IsQdwsz116c=
Subject key identifier: 2E:42:E5:BF:09:43:F8:7A:87:5F:A9:0A:4A:28:12:14:D3:3E:31:9D
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
Manifest number: 01FE
Signing time: Fri 31 Jan 2025 02:12:34 +0000
Manifest this update: Fri 31 Jan 2025 02:12:33 +0000
Manifest next update: Fri 07 Feb 2025 02:12:33 +0000
Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: AIiamjeR+tTs2zuQGLpYGMNqb4byT5pIoRfuXuIIgV4=)
2: 1C01E3AC16C811EF93505027C4F9AE02.roa (hash: gX1RFdM6L0xVdVLajGB/oH2K4uQtJ5f4FrAj0PayxUs=)
3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: GaP/RT3Ulee6uYT6wWpVO9XwFdzYE/to+5L81/i25gk=)
4: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: LNco69whcJuv5jsE70tc7QqVuBZcBpM3mp1egCHWs8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Jan 31 02:12:33 2025 GMT
Not After : Feb 7 02:12:33 2025 GMT
Subject: CN=679c3192-8dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:68:47:82:89:f8:bb:f8:9d:f0:41:75:c9:
52:74:f9:0a:5f:20:ae:4c:02:fa:35:66:7e:94:77:
aa:74:83:d1:44:83:e6:20:73:ce:45:8f:d9:80:c4:
39:a7:09:76:ac:51:ed:f3:d6:aa:1c:4e:54:9f:6e:
8e:4f:74:df:e0:01:85:d4:21:9f:9e:24:07:0d:55:
f7:c3:23:55:f2:b7:ad:ee:ce:56:7c:0c:91:cd:3d:
02:bc:e0:e5:aa:40:22:61:5b:38:2d:33:1b:04:c6:
17:81:4a:36:13:e5:2d:84:39:67:91:6d:36:9c:21:
23:fc:5a:3a:d7:13:4b:c0:b8:d7:12:a4:96:c7:5f:
b8:78:69:50:58:b1:15:52:52:e6:09:c7:d5:1a:9d:
db:63:3a:88:62:a6:cc:f9:65:2f:ad:e0:01:9c:b1:
e0:a6:e5:58:cb:e3:02:e0:da:f6:5f:90:c6:50:ab:
f1:a5:50:0e:4e:9f:2f:9f:12:20:04:84:7d:87:3c:
56:0d:59:4e:94:36:3f:8d:6b:ea:64:58:68:74:c7:
17:cc:51:42:ac:f2:50:16:48:0f:42:0f:9a:ed:c2:
a0:4c:8a:25:15:06:a4:41:1c:2b:5b:2f:54:ec:36:
50:1c:6b:92:cc:10:bf:4f:fb:60:c3:0f:e8:90:e1:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:E5:BF:09:43:F8:7A:87:5F:A9:0A:4A:28:12:14:D3:3E:31:9D
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:55:9e:24:d4:a6:10:69:b0:58:0a:1d:6a:d6:b3:96:12:
02:75:4c:a6:d8:24:86:76:90:e2:63:c3:5b:29:d7:56:4a:b9:
e7:1f:1a:e2:f7:5e:a0:e8:fc:e7:d5:d4:86:d2:6b:6e:2e:f7:
87:c6:f7:73:51:bb:92:0f:31:9c:53:9a:7d:86:7d:9f:0a:1b:
4f:f3:4a:08:6c:86:ee:27:60:19:03:25:45:3b:ba:1c:72:57:
f1:71:bf:cd:00:d3:b4:07:90:21:1c:47:ab:45:8e:3d:20:9e:
4d:a2:b7:82:54:6c:0f:06:0b:00:5d:ae:b1:a8:11:60:d5:95:
8d:98:70:5a:25:36:f8:59:6a:27:c9:52:a8:8d:74:f8:db:01:
fa:dc:a1:1f:d4:4e:40:71:42:88:07:d1:00:d1:6d:58:b9:f0:
b4:5f:59:33:9f:4f:07:65:75:10:0a:c0:75:11:2d:34:26:e0:
cc:ed:a3:d0:d1:10:0b:62:64:24:0b:19:af:b5:a5:1b:b9:84:
e6:41:aa:7d:88:03:5f:90:3a:57:61:59:49:aa:de:b8:47:6a:
c7:9b:ff:53:97:16:06:11:50:aa:4d:f5:75:ac:29:5e:36:e5:
c9:8b:87:aa:dc:91:00:67:66:f8:b6:29:72:bf:3c:23:18:87:
5e:fd:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:50 2025 by rpki-client