Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier: PcnEg5pS2dP0lKrhq3sifye8qgnWn6dBDFBJn7ko4xg=
Subject key identifier: DD:50:E8:EE:57:61:69:F0:EE:26:9F:9F:8A:20:CA:8D:7A:B6:3D:F7
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial: 0D3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number: 0D14
Signing time: Fri 31 Jan 2025 18:02:07 +0000
Manifest this update: Fri 31 Jan 2025 18:02:06 +0000
Manifest next update: Fri 07 Feb 2025 18:02:06 +0000
Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: 10Hq3/gf7qy7Z/CM++CxVCKUu4hGF6GpCEfPX5h1LVs=)
2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: yCxqzmWa893doOfv6hENPdTITWlM9j+UWoyn6s0IOuA=)
3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc=)
4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: UjEhrY6BSDNfZnVVPw3EjbmEipeGvEYmxIV0JR9ypjw=)
5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Validity
Not Before: Jan 31 18:02:06 2025 GMT
Not After : Feb 7 18:02:06 2025 GMT
Subject: CN=679d101e-5ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:dd:62:63:84:53:b5:e9:d7:0d:f2:17:b1:
8a:4d:3d:3f:80:0a:e3:7c:9f:e2:34:da:2d:cd:be:
89:03:19:30:e9:47:ca:db:93:15:e7:73:ed:6f:25:
91:e5:00:f5:4c:7f:b4:0e:27:15:6e:74:09:2a:c8:
0d:51:88:18:ce:52:0c:ab:8d:de:69:d6:5d:47:42:
0e:21:5d:d4:f0:0e:1e:05:5a:36:7e:ef:a1:b9:15:
86:b0:37:58:82:4a:cf:ee:82:f9:f8:07:b5:05:d0:
a2:16:67:9c:61:fb:8a:37:8d:e4:47:1e:84:64:06:
db:0e:f3:2a:af:56:ab:f8:a8:42:69:26:c9:d4:34:
ab:2f:21:82:42:92:4f:7d:73:86:0c:21:0c:96:4f:
d6:52:a0:fe:f7:6a:bd:0a:20:72:f1:d0:8e:0e:86:
23:f0:b8:76:2a:09:be:f1:73:00:d0:63:9c:f1:de:
26:3f:f7:81:94:11:8e:31:87:68:d5:45:60:66:39:
53:e2:29:f5:a8:52:9d:c9:42:b5:15:d2:51:8e:6e:
4a:46:f3:ca:82:98:45:49:c3:84:e8:d9:f5:a9:bc:
84:cd:c0:46:01:7b:5b:31:c0:cd:0a:87:0d:5f:34:
60:af:9d:2d:bc:6e:06:a3:1a:fd:26:e6:49:19:67:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:E8:EE:57:61:69:F0:EE:26:9F:9F:8A:20:CA:8D:7A:B6:3D:F7
X509v3 Authority Key Identifier:
keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:46:32:57:d4:33:fe:dc:00:1d:b3:b1:01:26:7d:b1:d6:35:
7e:58:92:d8:93:18:c2:ba:18:30:6d:1e:b6:b7:2e:60:b7:40:
21:a3:54:9c:ef:b0:6a:d3:52:da:3f:83:57:14:41:16:98:b9:
c0:ae:d3:4e:a6:e1:56:1e:04:29:25:46:f8:70:d9:b5:23:3c:
06:40:2f:f2:10:d3:6a:06:2d:53:97:92:7d:24:61:a9:f8:1c:
34:f4:9d:ce:80:f2:32:1b:bd:7e:ff:d4:46:2a:ca:04:e1:4d:
78:28:ef:af:89:51:aa:0a:a5:76:02:9a:8a:0c:9a:5a:44:90:
77:5f:cb:21:bf:a8:55:6f:b9:f3:ff:42:0d:53:05:a4:79:15:
66:6b:23:93:ea:c2:51:92:1e:ce:df:5f:a5:30:83:11:af:99:
bb:cf:d1:6b:1b:74:6a:5b:eb:89:d4:d7:af:e6:ae:21:65:41:
da:e1:73:fa:19:fa:bc:d3:cc:fc:f2:a8:83:f2:1b:5b:cb:96:
44:12:c4:23:80:34:df:6a:63:b9:87:b3:62:aa:ac:5b:6b:d3:
cf:55:c0:18:e3:88:fa:b7:5e:d6:25:bb:78:67:8b:d3:87:52:
47:69:9a:03:86:ef:88:52:f3:f6:01:e8:e1:c0:5f:89:be:22:
95:a5:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:26:09 2025 by rpki-client