Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier: YrehRO4tP/Q4pyZB3YmuUwz1cRaa2BL9sCpD36lAYTM=
Subject key identifier: 26:EE:E6:51:4A:06:DB:7F:E1:CD:32:31:DF:FC:40:C4:2A:1C:E5:FE
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 34B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number: 3477
Signing time: Fri 31 Jan 2025 14:49:32 +0000
Manifest this update: Fri 31 Jan 2025 14:49:32 +0000
Manifest next update: Fri 07 Feb 2025 14:49:32 +0000
Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: JZi9SLv5tEq6QNLbLVcQTejFD2caT8Nzlk9aR/xbyAs=)
2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: JRmfeJomvQSzfrIXjYmMHFlugXE6bFe42lyJQeKQfX4=)
3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: CejZncFNpgWH2BgJHmjLHA0HzP35tdBhuZ2TN28KyAw=)
4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: ++KskV0PPNEiZEaTeUOZbL0iJBq0mAX/g0VHSQfJFGU=)
5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: /yUj95kJkPDjakWPdMSLk/tFuL1bJXsSQl7hw6ucO/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13494 (0x34b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Validity
Not Before: Jan 31 14:49:32 2025 GMT
Not After : Feb 7 14:49:32 2025 GMT
Subject: CN=679ce2fc-f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:79:5a:32:60:c8:2a:61:ff:44:ce:5d:77:
ba:f2:4f:a6:55:95:bd:5f:2b:fd:9d:50:f9:57:9b:
79:53:72:30:44:da:01:87:16:9a:30:1e:d8:3c:29:
fc:ad:2c:5f:9e:b8:40:f2:a4:7d:40:e1:66:79:4b:
06:72:d6:40:21:27:49:d4:78:c0:a0:df:f6:15:a7:
11:84:14:e8:75:60:81:36:cd:c9:1b:a2:b9:9c:78:
39:31:7c:ed:ba:c2:13:e9:53:d4:53:5d:98:db:4e:
bb:f4:17:13:a8:08:78:30:5c:01:03:f0:d0:c9:4d:
91:db:dc:4c:0e:ea:60:ae:7e:41:68:cd:cc:a0:01:
b6:22:db:e6:ef:b2:3e:6a:ca:a1:48:7c:bf:91:51:
ca:10:cf:57:38:98:2b:e1:ad:26:a7:86:19:8b:ee:
0e:8a:17:80:c0:29:eb:24:6d:d5:8c:99:6b:ec:de:
77:b8:48:78:97:8b:0a:15:0f:66:d7:f4:a0:a6:86:
07:0f:a9:64:70:33:bb:ed:19:93:a1:61:6c:0b:88:
dc:ff:16:f2:e7:56:c6:80:c3:92:e9:5f:56:3c:6d:
7a:cd:ef:ac:72:e7:38:d6:e8:71:c9:68:c6:a3:31:
54:9c:8a:66:af:a4:39:97:98:db:6c:0a:41:0e:c3:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:E6:51:4A:06:DB:7F:E1:CD:32:31:DF:FC:40:C4:2A:1C:E5:FE
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:a7:01:c7:eb:7b:e4:95:fb:b8:bf:d0:c5:fb:7e:6f:20:
c0:fb:73:21:40:8f:89:3a:3a:7c:43:9a:e4:5f:96:1f:da:04:
30:b6:9c:99:16:01:63:c3:1e:a7:53:77:3c:94:58:ee:9f:98:
ef:00:d3:d9:3c:c7:b3:5d:27:54:9c:97:dd:62:ba:dd:77:b8:
b5:91:5c:c9:06:67:10:02:e7:78:62:96:75:c9:ba:23:01:8a:
0a:df:11:3c:7a:42:e7:9a:f9:b0:e1:a6:fe:e3:d1:0a:d4:b6:
2c:f8:3e:e6:b5:67:39:1a:97:cb:d6:38:92:ba:e3:b4:4f:d9:
ce:dd:ad:2d:63:09:0c:e2:4e:db:c5:56:ce:73:8a:dc:72:04:
ce:8d:b5:62:39:69:79:8e:51:61:51:5f:fe:22:bb:4c:22:5e:
65:83:6f:80:bb:9a:f0:3f:9e:65:f2:19:b2:8c:be:70:97:7c:
6b:aa:ec:ff:62:8e:15:78:e5:aa:d1:8b:3e:bd:07:a5:08:21:
c1:4c:38:5f:c8:ad:08:76:5d:49:05:62:6a:3e:f9:a9:9e:76:
77:9e:9a:e3:71:72:16:2b:aa:85:a4:9f:e5:b1:22:e5:70:31:
de:02:47:8e:4d:64:09:52:bd:5e:72:35:cc:d0:85:26:83:62:
eb:b4:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:39 2025 by rpki-client