Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier: il27cZngnFo6BVJa4TgldJUh/OdFoGRoKsjgGFdKHus=
Subject key identifier: CF:FC:12:27:4F:27:78:4B:D7:87:65:B3:06:C2:F9:47:83:52:F1:7D
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial: 0BCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number: 0BC0
Signing time: Fri 31 Jan 2025 18:43:46 +0000
Manifest this update: Fri 31 Jan 2025 18:43:45 +0000
Manifest next update: Fri 07 Feb 2025 18:43:45 +0000
Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: j8xAfdw6Reu5iFsvJHoF4HXfeADuhd3P85Hro2Bee9c=)
2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: OkLjB8I3eDhRRVfDQZiCj4Sm6JPcO6VJzFas4dJE+v8=)
3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Validity
Not Before: Jan 31 18:43:45 2025 GMT
Not After : Feb 7 18:43:45 2025 GMT
Subject: CN=679d19e1-3203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:6e:77:19:54:fe:ec:07:32:09:cb:63:b9:
56:cc:f1:17:96:04:2f:ef:bd:b2:00:2b:85:3c:75:
b8:3d:5b:0c:46:78:a8:77:4c:8a:15:58:d4:00:9a:
1e:5b:e4:f4:9f:88:50:9e:8a:92:d9:72:ac:b7:7a:
d3:48:83:a9:35:a9:4e:33:09:eb:48:94:9e:72:9d:
7f:1e:f9:e6:6d:ef:84:43:6b:05:c4:78:84:ba:fd:
10:f9:74:0c:f2:9a:fe:a4:7c:5f:83:2c:74:a0:d1:
0d:72:df:37:e1:98:40:91:f8:c3:f7:31:5d:37:34:
df:24:58:71:5a:41:7f:64:52:43:0d:08:f8:78:ea:
1a:e3:a9:87:37:bc:8d:55:de:16:64:2e:ed:23:25:
9b:e3:79:7b:93:fd:fe:59:f8:39:b4:d6:3d:17:af:
2b:c5:77:0b:4c:57:1a:c0:74:d7:7c:f2:66:0c:3a:
b2:62:f1:d4:0a:89:d9:05:30:bf:8e:25:5e:95:c1:
30:3a:d9:72:6a:16:b9:60:67:b6:85:69:80:a0:10:
06:22:ae:48:ef:2b:32:57:50:89:f6:a0:77:08:22:
c6:d1:7f:a3:2c:c4:03:68:de:d7:2e:4d:0c:7b:43:
1f:bf:2b:57:98:4f:f1:3c:b1:4b:12:2f:88:a7:df:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:12:27:4F:27:78:4B:D7:87:65:B3:06:C2:F9:47:83:52:F1:7D
X509v3 Authority Key Identifier:
keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:65:e1:df:78:6c:92:92:87:5a:78:49:db:de:32:35:26:2d:
35:f6:c4:22:c9:fe:85:85:bd:a6:e2:80:40:1b:d6:86:d2:e2:
bf:99:ea:4f:ef:cd:9e:f3:cb:0a:92:ef:da:cd:c3:64:4c:32:
16:40:88:84:1f:2c:8d:8d:63:c3:fd:84:77:73:09:67:76:c7:
d5:96:e0:73:2a:ed:80:42:d3:59:3c:e5:06:70:0e:18:17:28:
b1:0a:d4:6f:a4:56:28:e2:59:d7:6c:d1:0b:d2:b2:aa:f6:78:
77:df:5b:68:ac:5b:63:43:e1:ed:f4:c7:24:26:7e:47:3a:34:
62:4e:0c:84:57:94:b3:3e:d7:42:f3:ce:d0:bf:bd:5d:c8:ae:
f3:d4:28:dc:ea:a7:82:e5:10:d0:07:bf:2c:0a:fc:ca:93:71:
69:71:4f:77:91:6b:e2:ef:cd:c6:f0:25:ff:68:84:c1:29:07:
c1:3b:00:3f:78:89:54:6d:b2:86:2b:c0:69:3b:b3:06:1a:26:
d3:0c:8e:78:0c:9d:26:23:db:a1:39:a9:e3:37:26:29:f7:0d:
51:59:e6:97:ec:fd:95:75:d8:36:e5:6f:46:66:93:5f:f5:cf:
43:7b:eb:10:59:b4:4d:99:41:85:99:91:1f:4e:fc:8f:2d:a2:
60:de:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:19 2025 by rpki-client