Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier: bVJZYLafWDubVjrRGETFU9YefrX6tDYYnFB0nE6eduw=
Subject key identifier: D0:24:8D:CE:DF:57:4B:28:EA:1D:27:9C:F4:BB:9F:4F:11:D3:C3:FC
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number: 0423
Signing time: Fri 31 Jan 2025 00:24:57 +0000
Manifest this update: Fri 31 Jan 2025 00:24:56 +0000
Manifest next update: Fri 07 Feb 2025 00:24:56 +0000
Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: Anz4L4e4FKDuBYMwY62f7RwuLoypznB46yzef3zsQaY=)
2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: OH+ilqdv9s3kTRrQEcIweA5ha/9ZRdWs4Wko3puaZH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Validity
Not Before: Jan 31 00:24:56 2025 GMT
Not After : Feb 7 00:24:56 2025 GMT
Subject: CN=679c1859-b8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:82:13:28:51:3f:96:6d:47:c4:2e:e4:f5:
27:cf:d0:13:66:bf:a9:f8:a2:1c:15:94:37:bb:f9:
48:88:6a:60:c0:22:8d:fa:13:3a:94:b6:63:d3:75:
fd:1c:52:1b:59:78:31:b1:d3:f3:d8:e3:60:b9:41:
95:d1:2b:fb:af:da:ef:40:3d:ee:a7:22:7c:15:54:
63:77:ee:be:df:d7:3b:92:01:37:e7:ee:27:a9:bf:
26:33:41:c9:18:de:83:90:6d:26:4b:57:6d:7a:ce:
59:88:84:00:27:f1:e8:04:2b:0c:b0:7f:bd:ec:25:
a9:6e:6f:af:b2:47:7e:d5:60:ed:d0:f0:ce:0f:9e:
b8:9c:28:26:e0:8b:fd:ce:98:3f:ea:99:c7:86:5a:
2b:e2:9b:81:c8:1b:f7:d5:e0:82:87:ee:80:36:0f:
de:7d:c8:16:78:36:f4:db:89:28:c6:f9:ba:2e:f5:
c3:34:72:e7:a4:f4:a9:d6:c0:db:22:7f:ee:ac:34:
c0:3f:86:9f:92:0d:36:82:14:e2:d6:f9:a7:53:71:
c6:8e:c3:cb:16:0d:f2:c4:0c:a3:dd:75:66:3c:93:
12:c2:90:c4:3e:2a:ac:ff:80:1a:c2:9a:ed:de:41:
eb:fb:7c:c9:3b:2b:0a:1b:cb:ce:b1:48:ad:57:c4:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:24:8D:CE:DF:57:4B:28:EA:1D:27:9C:F4:BB:9F:4F:11:D3:C3:FC
X509v3 Authority Key Identifier:
keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:26:26:a8:5f:c7:7b:5c:ff:83:44:9b:92:28:2f:da:0c:ec:
e9:fa:fa:2e:49:0d:60:aa:ea:ab:1b:d1:07:e3:e6:a5:6a:e7:
1c:d0:89:c7:4a:da:47:dc:7a:0c:2e:f4:c8:cc:b2:19:b9:d4:
69:f6:04:f9:ce:2e:9f:41:67:cf:5e:1b:3e:b5:fa:c2:ac:05:
65:25:92:b1:76:23:fd:37:8e:81:01:2d:c6:e6:2b:bf:92:17:
eb:93:f6:42:eb:c7:e7:74:ab:eb:eb:75:57:50:6b:15:a1:c2:
92:88:c8:cf:bd:63:df:14:24:d5:f3:1c:85:2d:62:85:fe:fb:
68:1c:3a:90:88:3b:22:38:d5:27:5b:65:f3:e5:ee:d9:7f:aa:
4e:e3:16:19:1f:dc:fd:47:42:6b:a6:94:85:aa:b8:63:a9:21:
f6:13:a9:7d:74:21:3d:ee:aa:1c:7a:48:f3:4c:c3:18:92:17:
25:6b:13:e3:4b:3e:04:5f:e7:cf:ed:43:71:9e:31:71:71:b4:
35:85:ee:86:82:dd:f6:8f:6a:09:30:7a:41:a7:35:64:f6:3a:
9f:83:48:3a:4d:90:65:65:98:b4:5b:8f:6b:3f:91:1a:d6:4e:
04:54:cf:03:58:85:26:28:85:58:24:d6:73:68:31:4a:8a:c1:
81:42:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:46 2025 by rpki-client