Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier: dDMcjwc6IqwDhLYgmXZSsWj87BVtECyjVQ5ZipUAt7E=
Subject key identifier: DE:EF:68:5B:39:68:F3:7E:01:C5:35:76:BD:DF:6D:0D:BC:4A:E7:83
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number: 63
Signing time: Fri 31 Jan 2025 06:04:08 +0000
Manifest this update: Fri 31 Jan 2025 06:04:07 +0000
Manifest next update: Fri 07 Feb 2025 06:04:07 +0000
Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: fEaxOFZw8rr/sQWAhXWOV2scLXKxOj9d3N89r4uFdRw=)
2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: t4ZfZhgJCrUUcwGkxWGjP42WHOWCXQN3AYaH4hz5LAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Validity
Not Before: Jan 31 06:04:07 2025 GMT
Not After : Feb 7 06:04:07 2025 GMT
Subject: CN=679c67d7-83f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:2a:ce:82:63:cb:d1:0d:3f:85:54:70:a5:
74:75:c9:85:e5:69:0f:23:cf:79:21:cb:dc:61:e6:
16:7e:3d:3b:98:45:79:e9:90:60:e2:85:e5:f1:8a:
1d:07:10:64:d4:d5:2f:4e:2d:d5:6b:36:c7:fb:1a:
3c:dc:a0:ac:2a:b0:22:3b:87:b8:25:7a:0f:de:5c:
47:38:4e:f5:2e:7d:f7:d5:ed:6c:bf:ec:36:a3:33:
99:ac:a6:60:4c:94:9b:46:9c:78:66:11:fb:66:3b:
96:5b:43:82:ec:f3:5a:54:50:0d:18:c6:5b:5c:a2:
fe:de:96:51:99:5c:ec:30:fd:9c:40:d4:85:cf:bc:
10:63:c0:69:34:c6:8f:1b:49:a4:8a:77:2d:19:04:
82:69:67:2a:12:f7:08:5e:56:c1:30:a7:85:68:56:
73:e8:60:27:2f:7a:11:05:99:76:6e:88:01:0f:58:
32:c6:32:81:1b:a6:a6:b5:95:15:59:f1:c0:d1:c8:
3a:1a:03:fc:42:2c:31:68:9e:61:56:80:8c:36:b3:
59:5c:8f:59:9e:3e:91:55:b7:7e:c4:e6:66:3a:ac:
f7:6f:95:69:f7:44:35:97:c8:b1:2e:f5:2b:d9:f5:
93:19:54:15:5c:f9:71:79:5f:44:3a:a4:13:1f:e2:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EF:68:5B:39:68:F3:7E:01:C5:35:76:BD:DF:6D:0D:BC:4A:E7:83
X509v3 Authority Key Identifier:
keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:6c:25:d6:9f:cb:97:7b:da:43:23:a9:bf:36:bd:84:91:
4c:97:52:63:8a:58:4d:dd:92:7c:8e:1e:5a:5b:0e:dd:c5:4f:
74:91:cd:b2:8e:3c:f1:c9:36:be:d4:ed:90:73:01:b1:95:4b:
e7:8c:87:f7:08:f1:6e:2c:48:47:13:87:ad:2a:77:0c:c9:71:
d7:c7:56:4b:a5:24:e2:02:38:40:45:7e:c6:42:ec:29:b1:31:
06:8f:5b:2c:b2:03:32:0e:11:d9:3f:f2:6e:1c:d8:76:a5:b9:
ad:74:7d:03:35:e4:55:e0:7e:92:cd:8f:44:f0:e8:99:e9:a6:
c0:47:14:0a:44:0c:44:1a:70:71:4b:16:d7:a6:1c:bb:49:d2:
3b:5e:95:2f:ff:f0:61:df:b3:26:d8:67:00:a8:46:ad:23:1d:
84:59:92:d8:3d:89:8b:62:42:54:32:bc:06:6f:b4:4d:6a:e9:
3d:bf:49:bc:6e:67:99:50:bf:be:50:d5:f8:d9:5f:cd:5c:4f:
21:42:f4:ad:e2:43:ce:f9:4d:f8:65:fa:46:0a:c2:68:b2:ce:
10:d1:87:1c:bd:98:d9:11:e9:33:35:c8:94:02:ef:e5:ba:d4:
26:c1:87:84:cd:d1:fa:85:e1:ff:8d:3c:50:13:c4:3e:2e:9a:
16:09:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:06:02 2025 by rpki-client