Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
File: ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft (raw, json)
Hash identifier: r0R594DHNbQoxOCgxPhB0e74jgnlJ8I8xz8tfJpejUk=
Subject key identifier: 73:A2:A7:98:F0:00:C0:34:70:AB:34:64:8D:76:67:5C:31:E9:45:7D
Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
Certificate issuer: /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Certificate serial: 1035
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
Manifest number: 102C
Signing time: Fri 31 Jan 2025 17:23:43 +0000
Manifest this update: Fri 31 Jan 2025 17:23:42 +0000
Manifest next update: Fri 07 Feb 2025 17:23:42 +0000
Files and hashes: 1: ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl (hash: h8TO7NTGGLm5jRMNmrHkULLR12HVfvyFOAaFe7/cQ1U=)
2: 39C6EF3688BF11EABC04973FC4F9AE02.roa (hash: E3ZTe2bEAycjBIVFstyPiPS8lw3hN6h/g285ab56Ew4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4149 (0x1035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Validity
Not Before: Jan 31 17:23:42 2025 GMT
Not After : Feb 7 17:23:42 2025 GMT
Subject: CN=679d071f-bf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b6:cf:6f:0c:33:f6:a1:aa:3d:07:7c:7e:4e:
66:6a:e4:3c:c7:59:72:e5:31:bb:8a:7d:de:68:be:
3f:aa:0f:02:ae:50:33:32:51:55:a1:27:28:6a:be:
37:ea:fd:52:e8:f3:da:38:7b:e3:a4:fa:84:93:7a:
05:1a:06:c3:e6:ae:8d:7f:a3:7c:22:5c:d4:9c:99:
43:14:40:0e:6e:bb:ac:38:4d:27:05:33:17:d2:78:
8c:72:4d:86:d3:25:0f:21:61:e6:9d:e6:03:07:99:
8c:47:83:99:83:37:04:1e:71:85:a5:96:d9:a0:d3:
ac:05:34:38:5e:14:b3:ac:a0:be:09:7d:cb:dd:4f:
1c:bf:42:fa:69:ce:6f:9b:4c:64:22:79:9e:ae:76:
c3:40:2a:8c:31:1c:8d:ec:e1:c1:1e:5a:9c:6e:8d:
83:f3:48:ff:27:fd:f3:cd:ee:2e:47:91:e0:fd:d2:
fd:3e:6f:d7:84:ae:d4:99:81:91:10:90:12:9a:a5:
9f:79:77:92:ab:b1:6f:f8:52:15:de:d2:33:bc:7e:
ab:a0:a1:ca:97:3f:f0:63:0c:66:88:ae:8e:71:84:
18:0e:fb:8f:6d:3c:ae:57:82:99:99:a8:f0:b6:e5:
c9:c9:6d:f3:09:7c:91:81:b1:f0:9b:4a:f2:b1:7b:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:A7:98:F0:00:C0:34:70:AB:34:64:8D:76:67:5C:31:E9:45:7D
X509v3 Authority Key Identifier:
keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:55:aa:bd:29:1b:f2:82:5f:fe:81:57:16:82:6c:c3:32:52:
9b:21:95:bd:db:f4:79:9f:49:56:b9:dd:41:ca:47:f5:35:15:
2a:19:89:de:a5:9f:44:be:78:31:67:bd:00:76:f8:cc:ac:cc:
bc:b1:d9:67:f2:df:a0:49:d6:c1:ef:f2:e6:7f:03:80:62:9c:
c1:42:a8:9b:6f:a1:42:f3:0a:8b:08:b5:ca:c3:38:87:0c:d4:
5d:d0:f7:3f:50:8d:6b:55:79:5d:2d:c5:4a:c6:b4:8c:42:a0:
4c:fa:b1:cd:92:14:89:ec:a5:17:9d:e6:59:6d:59:2e:08:9d:
bd:02:68:e0:5e:26:15:12:f2:5d:62:6d:0d:f0:32:4f:22:94:
04:17:eb:65:bc:1d:fe:2c:a7:6d:75:a3:e0:df:dc:06:ae:94:
65:2b:7a:5a:df:d4:62:d7:f7:dc:26:39:d5:8e:de:58:23:80:
39:21:e0:90:8a:78:24:bd:26:1c:83:cb:74:eb:8d:8b:ae:2f:
61:ab:49:fd:5e:ca:c1:39:53:51:c7:73:3c:60:4f:89:55:11:
d0:ba:7e:da:f7:c9:99:d5:1d:db:be:70:64:15:1d:c9:f0:33:
ea:86:8e:e4:48:3b:e9:a2:05:41:2c:e3:f6:54:89:e0:6d:59:
ee:8a:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:30 2025 by rpki-client