Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json)
Hash identifier: o1E40cheDNv6wLB3niresJV8dkdTRz/9fEFgV34Ehp4=
Subject key identifier: 90:D5:87:66:D5:A3:79:0C:22:DA:9E:5F:9C:3A:21:B2:B2:06:1F:9C
Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
Manifest number: 0210
Signing time: Fri 31 Jan 2025 02:10:26 +0000
Manifest this update: Fri 31 Jan 2025 02:10:25 +0000
Manifest next update: Fri 07 Feb 2025 02:10:25 +0000
Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: 1syJLa/gYn3D9MRn+q1xpaqLGlpozILKlId6R3LUkCw=)
2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: YssH476E2tgxPdw+/0l4VE/a3GZaUyUxDjk4z13BJXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Validity
Not Before: Jan 31 02:10:25 2025 GMT
Not After : Feb 7 02:10:25 2025 GMT
Subject: CN=679c3111-4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:b1:b7:da:ab:a4:9d:14:8f:a2:04:c7:aa:
14:ef:4a:c9:00:ba:8e:d0:9d:5d:41:a7:5d:c0:d8:
94:47:f2:4b:03:35:83:76:67:ac:c9:95:4d:16:6e:
7e:3a:55:c2:f5:d5:4a:3f:4f:ea:23:b7:ef:9c:af:
24:20:78:5d:6d:fd:e1:b3:50:39:40:44:b4:7c:8f:
f1:a2:6d:58:08:db:2e:05:c1:76:1a:00:cf:14:73:
0d:9b:e0:6b:d0:0b:54:3b:57:3d:1e:6d:1f:db:85:
61:8c:18:54:de:0b:f6:0d:dd:31:28:f1:a2:75:96:
ec:1d:d7:93:4e:a5:bd:f5:2a:51:5d:b3:ff:8e:b2:
4f:28:0e:73:fe:99:2a:ad:2b:87:39:0e:b5:31:6a:
68:ab:6a:5b:ac:f4:99:8f:8f:0f:f9:aa:ca:09:2c:
5e:6f:0f:73:ad:b6:86:d8:10:4f:09:cf:2a:71:15:
d2:29:31:2f:82:87:24:9b:4e:86:4c:34:ad:a0:cc:
31:3c:7b:0c:28:0a:a8:c0:4c:44:06:7d:cf:68:5a:
ca:5c:7e:93:92:7a:27:db:9f:71:fd:db:d1:1f:f7:
1d:94:56:8f:f3:d8:04:e7:a2:41:bf:54:68:96:6b:
f6:e8:77:df:ac:b1:bc:54:11:62:db:cd:9f:b7:50:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:87:66:D5:A3:79:0C:22:DA:9E:5F:9C:3A:21:B2:B2:06:1F:9C
X509v3 Authority Key Identifier:
keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:96:72:82:f2:e1:d4:6c:c1:c8:d4:51:fc:b5:af:0c:52:
3c:69:7d:29:03:c5:28:47:7c:f3:65:fb:5f:fc:52:83:2f:6a:
57:bc:87:04:44:58:8d:de:f0:e4:c7:85:c3:be:35:16:56:b0:
08:49:b1:dd:4c:56:d3:e1:58:45:1e:92:7d:1a:19:83:fe:cd:
b1:bd:8d:69:41:2e:83:b5:bf:fd:a7:74:ad:a0:c7:d7:32:8a:
de:03:69:92:f2:5e:4d:62:2f:c5:84:c9:c3:81:b7:78:ac:be:
5f:bc:ac:ce:35:d7:33:30:c2:ec:a0:f1:c2:22:34:2f:bb:9e:
2c:2d:ea:93:49:d3:b5:9d:f1:58:7c:be:87:56:bc:17:bc:62:
01:da:52:da:08:f1:20:98:52:a8:ad:9a:12:23:b9:51:71:82:
ad:9d:eb:c4:b9:bb:61:69:48:0e:35:f5:5b:9b:8e:77:af:48:
17:30:14:5f:84:f1:73:82:ad:09:b2:60:af:95:3c:e8:1e:05:
8a:81:f4:41:b5:c9:be:3f:4a:9b:65:ee:1c:23:c2:eb:31:a8:
ab:6f:e5:ba:96:eb:62:18:f0:db:dd:05:a1:19:e1:00:ff:36:
44:6e:64:b6:58:a9:ac:c6:f8:31:7d:d5:0e:b1:94:41:b6:30:
43:72:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:42 2025 by rpki-client