Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json)
Hash identifier: eeFZ9cWRB0TsRqeAbofsCERkMaBckJ9UBQtB+Y13bvI=
Subject key identifier: 7B:67:E3:C7:72:0E:D6:E9:36:0D:19:2E:CA:13:B4:AB:3B:19:87:92
Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Certificate serial: 090B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
Manifest number: 0905
Signing time: Thu 30 Jan 2025 20:25:45 +0000
Manifest this update: Thu 30 Jan 2025 20:25:45 +0000
Manifest next update: Thu 06 Feb 2025 20:25:45 +0000
Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: w6XLXj0ob8p4oKM7oBRnfiDLI5vIWmPCkADDTexq1UU=)
2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Validity
Not Before: Jan 30 20:25:45 2025 GMT
Not After : Feb 6 20:25:45 2025 GMT
Subject: CN=679be049-df82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:52:2d:1f:4d:60:1e:d6:c5:25:af:4d:cc:
d9:4d:a3:74:91:4c:e1:14:59:49:02:4c:0b:09:49:
6f:73:9d:76:2b:3f:96:8c:51:94:46:8a:f0:ba:fe:
dc:ff:b6:ea:17:70:25:10:f4:06:9a:46:8d:24:52:
ac:d8:78:bf:48:10:83:15:66:69:cb:d1:c7:0f:f0:
94:7b:a1:5e:97:9b:4e:48:a2:1e:c5:dc:02:a2:89:
ef:5d:6e:f1:12:b7:55:e3:0c:df:f8:14:25:51:86:
fc:da:c5:3d:86:3e:50:cf:87:97:39:35:0e:ca:18:
b9:ee:44:6d:ec:41:76:89:ea:2a:97:49:0e:c9:36:
fb:e8:10:de:4a:c9:2c:d2:0b:89:96:51:c3:e6:3c:
16:48:e9:04:a9:70:11:6e:14:cb:2b:89:27:49:15:
78:b5:bd:e0:cd:a6:e0:fe:a8:86:eb:98:b2:0b:79:
d2:32:2e:ac:c8:f0:9f:c1:9b:e2:70:29:76:61:e6:
f0:b9:65:5d:bb:0c:e6:1a:81:86:c0:dc:0b:3a:64:
d0:9b:5b:31:3d:94:c8:95:4d:7f:38:88:72:d1:9b:
43:4d:9f:1a:cb:56:b7:ac:a8:65:23:78:9a:da:0d:
3d:fc:19:45:ef:7c:60:dc:a1:1c:b5:66:9b:4a:da:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:67:E3:C7:72:0E:D6:E9:36:0D:19:2E:CA:13:B4:AB:3B:19:87:92
X509v3 Authority Key Identifier:
keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:86:2e:e0:e9:64:73:89:5f:bf:1e:52:c5:9d:45:28:24:
e5:d0:c2:8e:da:9a:38:7e:eb:a2:1a:21:14:82:80:da:4d:92:
a1:04:14:bc:8b:0e:64:6d:30:0f:43:95:02:25:33:fb:82:e5:
18:ff:9c:c0:84:ac:3c:8b:91:72:0a:0b:6e:61:bd:bf:73:dd:
66:ad:41:14:f9:26:f4:13:ba:38:1f:cb:e1:d1:98:1f:0b:8d:
2b:8c:62:83:bf:21:ed:c3:cc:d8:07:bd:45:28:88:3b:07:47:
22:a2:cf:80:a3:b8:c8:2d:bf:c3:75:bf:8a:3d:f8:58:c5:82:
34:b4:7d:d3:f1:98:24:04:a8:b5:2f:d2:85:ae:a0:0f:49:17:
b6:1c:61:27:c3:1c:b8:7b:58:e9:fa:ee:98:e6:46:0e:6f:0e:
c7:fd:ac:ce:16:a5:3e:e8:cf:f8:14:e0:94:2a:f5:c7:1e:e9:
fc:b4:d4:a1:35:18:90:f6:ff:8c:5e:63:33:fc:27:c7:7e:51:
2b:80:ae:e1:a7:34:ae:2b:9d:50:ef:98:09:1a:40:42:dd:eb:
fc:7e:49:99:0a:c0:42:43:eb:d1:2e:32:cd:4c:b9:9d:13:12:
2d:10:d3:da:fc:7a:20:68:6e:86:04:77:25:f3:40:a3:27:3a:
34:8b:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:15 2025 by rpki-client