Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier: gAM8S8ERvxksuJ8zK5YPq3NQZ3kq69akLBPsVd4sOsI=
Subject key identifier: E8:1E:2D:32:60:0C:5F:10:BD:B1:68:8F:B0:21:A1:10:D6:9B:AC:BE
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 06:33:37 +0000
Manifest this update: Fri 31 Jan 2025 06:33:36 +0000
Manifest next update: Fri 07 Feb 2025 06:33:36 +0000
Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: d++2PlvV4JW2l8Ntsr9NS+/t9nZFoI+TGUNNO0tmcPQ=)
2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: q92cRpTpYuTn7sZTn7J75VBEAOI5W+lV4dg/tHrggGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Validity
Not Before: Jan 31 06:33:36 2025 GMT
Not After : Feb 7 06:33:36 2025 GMT
Subject: CN=679c6ec0-a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:95:b8:e2:84:97:dd:e8:2e:81:c1:22:bc:
ae:f6:e4:e8:82:af:19:2b:08:70:32:c7:cc:eb:9d:
5d:14:9a:1c:28:59:b0:38:bb:69:e1:b4:75:fe:da:
9b:81:2e:24:09:24:cf:0c:19:aa:ad:18:9d:19:89:
3a:5f:4a:75:6d:34:71:65:5b:da:78:23:20:76:78:
cd:0d:52:c3:68:d9:53:76:d0:94:11:9b:66:44:f4:
b1:78:8c:6a:23:41:f6:5b:85:d2:39:91:27:fe:3c:
65:aa:13:77:35:b1:8c:c1:bb:86:33:5b:93:b5:fa:
09:23:22:33:90:a2:3b:ed:34:64:c9:88:1a:ae:f8:
ac:05:16:77:8f:b2:41:96:1f:89:8f:1f:d6:6c:81:
81:1a:16:e0:f4:f7:49:42:c1:02:33:9c:87:9e:bb:
0e:c2:99:45:96:d9:0c:66:ac:19:b4:70:51:cd:96:
9f:f3:40:2f:ab:1c:f2:e0:1e:e8:60:13:b9:54:cb:
7d:1f:ed:6b:3e:2d:47:c2:d6:9c:24:9c:16:5e:ca:
4e:16:0e:52:22:6e:b2:8c:8c:dc:34:8d:2d:c4:fc:
55:f8:fd:e4:ad:ab:46:e3:34:93:8c:77:1d:8f:0c:
45:65:55:1b:53:dc:9a:06:0b:29:fe:07:bd:36:2c:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:2D:32:60:0C:5F:10:BD:B1:68:8F:B0:21:A1:10:D6:9B:AC:BE
X509v3 Authority Key Identifier:
keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:1e:96:b5:d9:f5:92:4a:79:c3:5a:df:a9:e9:ff:18:68:f6:
a6:7d:9d:7e:4a:64:89:d8:35:d1:86:d9:cf:e7:d9:9c:bf:7b:
9e:ed:d1:34:21:36:3a:98:01:69:fb:3e:55:90:db:27:38:f6:
14:fa:ad:35:5b:1f:ff:95:26:00:f2:1f:c2:ee:e7:44:9e:29:
e4:c3:60:c1:3c:69:d2:64:36:04:7a:c1:06:0a:d0:cf:14:e5:
cf:89:58:5b:96:89:8b:89:27:61:ee:42:59:18:b3:6d:66:0c:
5f:27:29:e4:8b:30:45:3e:9f:4d:9e:1c:a8:02:c3:1c:5c:ed:
8e:20:fd:3d:b7:73:48:a1:04:e8:79:0e:56:59:6a:22:2c:8f:
a7:64:34:7a:b5:6e:f7:c3:de:dd:88:d4:91:66:2a:26:3c:b2:
74:fd:05:98:dd:6b:b1:e5:c7:6a:41:67:79:5a:94:24:29:6b:
e9:a6:b8:73:09:fc:b7:be:a1:0c:1b:6c:a3:8a:78:58:7b:d2:
da:cf:78:84:0b:62:73:3c:26:00:a1:af:d6:f3:2d:b6:3c:20:
f8:71:c8:35:65:21:c3:a6:c3:3a:88:5d:a4:6e:de:d9:01:2a:
61:f2:a7:f0:be:b1:63:f8:69:35:9d:f2:ee:f1:d4:0e:a7:e1:
a8:99:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:11 2025 by rpki-client