Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json)
Hash identifier: 7YICT5kE3NkteqvkmmSdw2jHvhJEBn/2aFQidAPvMcU=
Subject key identifier: 59:6A:14:FA:AB:B9:72:05:41:DF:F7:5F:F1:BC:FD:B3:37:A2:29:8D
Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Certificate serial: 0814
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
Manifest number: 080F
Signing time: Thu 30 Jan 2025 20:52:54 +0000
Manifest this update: Thu 30 Jan 2025 20:52:53 +0000
Manifest next update: Thu 06 Feb 2025 20:52:53 +0000
Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: 9JEMPj875TXH1wkRAZcZoyCfB5udYKLw4JR/3FRpuJc=)
2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: 1PEJ4sy6m3jD5n86rE6dAKdWlwIOSXY6DJ5I2/lZi8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Validity
Not Before: Jan 30 20:52:53 2025 GMT
Not After : Feb 6 20:52:53 2025 GMT
Subject: CN=679be6a5-5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:79:55:06:7d:34:b7:1b:77:61:a3:ea:9a:
d4:57:f6:76:3e:cd:d3:f6:49:bc:29:cc:95:e7:25:
68:f9:14:e0:c5:cf:71:a4:68:f0:74:95:5e:ee:2c:
d6:c1:fc:f9:fc:6f:54:73:21:ab:63:3a:a6:0a:94:
95:bb:2c:96:0e:b9:73:88:5e:97:78:21:df:35:ac:
df:d6:f5:34:0c:ae:b6:c2:ca:ea:2d:15:cb:a0:5a:
d0:78:3f:76:6b:b3:cd:fb:c5:c7:02:aa:bf:6a:46:
3e:7d:d5:fb:c8:1e:b5:63:68:05:d0:25:f0:4c:1f:
89:1d:f6:f5:47:5e:59:ee:d8:1b:1b:23:99:04:84:
22:b0:e4:c9:a0:45:37:4f:3d:1e:42:c5:a9:be:ef:
ec:8d:d7:23:46:0a:de:ec:9d:fa:23:d3:71:d8:1e:
06:45:56:af:b0:7f:1d:0a:b7:54:f2:3b:dc:3b:88:
f7:9b:ac:9e:e5:c2:38:c4:2e:c9:ec:d2:b4:76:d2:
2e:26:76:60:00:85:d3:33:1a:d4:08:b7:02:97:06:
43:33:d4:a9:ec:f8:60:0e:e5:50:ae:d3:fa:9d:17:
54:8b:20:3f:e2:be:07:41:79:60:d9:aa:82:6c:c0:
e3:5a:e8:52:3d:39:24:92:7b:5c:7c:4e:b3:48:df:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:14:FA:AB:B9:72:05:41:DF:F7:5F:F1:BC:FD:B3:37:A2:29:8D
X509v3 Authority Key Identifier:
keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:32:95:1e:7c:bd:59:81:b5:07:f8:30:1a:af:b7:34:98:3c:
d5:67:39:05:b4:85:88:24:e8:d3:64:ac:2a:79:99:ee:02:59:
1e:26:71:54:b5:ce:87:64:2d:87:39:cd:80:db:49:bf:46:7d:
64:83:b1:2f:00:ea:41:d2:4c:17:3c:98:5f:bf:d4:ee:9e:53:
bf:d3:4a:27:56:62:b6:91:48:d9:47:f1:05:dd:86:34:10:16:
08:bc:92:f4:82:70:ad:b3:2a:24:b3:29:e6:57:4e:99:b9:a0:
be:32:c5:c7:2c:12:3a:e1:70:28:de:7e:d0:b8:6c:6e:64:c4:
ef:90:48:c6:96:ed:1b:ff:68:60:2b:d1:c2:db:96:7d:72:e1:
60:9b:7f:a1:97:1a:b1:a9:69:e2:71:ba:72:33:19:b2:88:ff:
7f:63:d3:5a:a0:0a:de:47:7b:75:bd:07:6a:8b:58:5b:7c:11:
e3:c7:2c:a8:fd:e9:85:e8:9f:d4:14:37:a6:ca:ee:ac:12:e8:
26:2a:a1:18:08:a8:eb:86:4c:f1:87:cb:f1:3a:fb:7a:84:3e:
42:5c:83:2f:dc:3b:ea:6a:92:fe:c3:64:05:b8:ca:26:ed:04:
f9:2c:dc:9d:6e:6a:6a:06:b0:a0:1b:dc:21:27:5c:0b:eb:66:
f0:8a:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:55 2025 by rpki-client