Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
File: 2VYp3mJDm7AepHisFcom6ZWpeGQ.mft (raw, json)
Hash identifier: YoTd0iD7sdfIPmaqDarRft/lsavkzoSY3/PKjXnYu5E=
Subject key identifier: C6:7C:A6:7A:85:C9:75:AB:90:4E:61:C8:B1:6A:83:66:6A:5F:76:5D
Authority key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
Certificate issuer: /CN=A913854D/serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 07:03:58 +0000
Manifest this update: Fri 31 Jan 2025 07:03:58 +0000
Manifest next update: Fri 07 Feb 2025 07:03:58 +0000
Files and hashes: 1: 2VYp3mJDm7AepHisFcom6ZWpeGQ.crl (hash: psk61MM78BFljNxgLPI2wZE+Ic5TxAMfqZDpYoJRb+I=)
2: A999E39EC36C11EFAF838D35C4F9AE02.roa (hash: ExkZaSQcYVbQZnYq0oQI5lNxhmBmn7aNpw0QWZM9X5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913854D/serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
Validity
Not Before: Jan 31 07:03:58 2025 GMT
Not After : Feb 7 07:03:58 2025 GMT
Subject: CN=679c75de-bb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:44:1d:b8:73:58:c1:56:51:8d:26:6d:76:
ed:98:31:f2:4b:5a:c1:4b:6f:10:47:b9:b5:d8:00:
8b:41:39:ea:c5:4c:ae:c0:32:1c:20:4e:0b:a5:4d:
b9:2e:5e:21:9f:20:54:c6:d5:4f:20:bb:f3:25:c2:
f0:b8:da:b7:62:3c:db:bc:16:32:68:23:56:e1:16:
54:31:67:a8:3b:3c:b1:09:96:b0:f1:65:f2:f5:85:
b0:0f:7f:55:0a:8d:67:ed:69:ad:90:45:2f:c9:48:
87:82:a2:b6:87:e4:00:ec:22:ab:c8:01:b2:51:5b:
60:dc:82:9e:3a:89:8e:7d:63:e9:a5:98:27:68:4e:
41:b9:22:09:e5:e6:92:ef:bf:97:dc:81:f6:47:e3:
37:73:ee:5b:8c:9c:0c:99:b8:9b:9b:d5:4a:b3:53:
60:d5:cf:f7:51:23:57:6a:91:8b:53:ff:68:a9:6f:
69:5e:ca:54:1e:a4:7f:87:44:10:a4:58:b0:1b:9a:
e8:8f:09:4a:9b:bb:c7:7a:be:ee:00:d4:59:05:b5:
5c:e1:56:ef:28:9b:0b:e6:7e:e7:15:19:8f:7f:84:
7f:83:ad:c3:d9:08:88:e8:f7:72:3f:e9:ec:7e:0a:
c0:18:22:ad:33:2c:f4:95:33:79:5b:fc:5f:50:c1:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:A6:7A:85:C9:75:AB:90:4E:61:C8:B1:6A:83:66:6A:5F:76:5D
X509v3 Authority Key Identifier:
keyid:D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:38:38:99:10:f1:ac:0d:f3:34:b4:45:7d:42:09:44:6b:
0f:8d:8c:bd:b2:ec:fa:1c:43:e0:ef:77:18:c6:b9:8c:6c:df:
18:9f:a8:6b:b4:e9:c0:2c:d4:1e:1e:69:b0:66:34:fe:6f:08:
ae:7d:e3:c7:2a:01:3d:8f:88:12:9c:1d:da:c8:11:ed:65:d3:
ba:ba:fa:62:91:4d:6b:8f:4a:2f:f5:5c:5b:83:1b:04:34:89:
af:d4:ee:af:79:b0:08:51:1c:c9:85:2a:63:30:40:f1:87:c7:
12:13:41:95:2d:1a:5f:4b:d2:37:fa:1b:e1:b1:dc:54:aa:83:
5a:f8:82:62:d3:e7:34:b5:cc:39:26:3d:bd:2c:77:74:52:00:
ef:f7:98:58:db:64:5b:b6:9a:fc:fe:14:6e:f7:a7:ae:3a:91:
48:71:27:32:20:95:1d:1d:e0:b9:74:ee:1f:f9:1a:df:27:d4:
a9:03:58:1a:ab:4f:9a:b8:f6:55:2b:4c:1e:56:d8:48:a8:49:
c5:31:ca:8f:4c:bb:23:81:ec:37:8a:bd:ec:4a:cb:7e:c4:4b:
70:d1:8b:e2:da:dd:da:2d:0c:10:1e:0f:9a:dd:b2:68:c8:c4:
74:dd:ce:f2:86:6e:87:ca:f1:be:51:ba:a4:f0:cd:b3:d6:00:
03:a0:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:27 2025 by rpki-client