Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json)
Hash identifier: vdXWMl7Er4cw4rWkcfGShpUT6g3p/JtD6A9FROeVEI0=
Subject key identifier: 5E:0F:A2:FE:75:77:B1:5A:B4:2E:DE:36:03:1B:1E:40:A3:DB:3C:13
Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
Manifest number: 0CD1
Signing time: Fri 31 Jan 2025 18:05:19 +0000
Manifest this update: Fri 31 Jan 2025 18:05:18 +0000
Manifest next update: Fri 07 Feb 2025 18:05:18 +0000
Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: i276L6/2tg0QGIhDP1fccvpRSpcMRiK5y6BGdba+zBo=)
2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: O1kd0Y8YHGAuQNE1wq4lO26tfNPiZv4mNi6pAigMPUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3
Validity
Not Before: Jan 31 18:05:18 2025 GMT
Not After : Feb 7 18:05:18 2025 GMT
Subject: CN=679d10df-a9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:17:97:ce:c4:34:0d:24:d2:d5:2c:c9:07:
8d:64:c6:1f:2d:56:8b:22:20:47:39:1a:c9:f7:59:
ec:de:eb:1e:9d:68:a3:b3:c0:0f:56:f9:48:b4:b6:
b7:67:42:55:e2:ba:fe:c0:4c:5a:c3:cf:00:37:77:
68:6d:f9:2b:54:c5:f5:c2:dd:ab:89:ac:2a:58:9c:
c0:d6:8d:59:81:d2:ad:0e:bd:fc:55:1a:ab:a8:c7:
8e:9e:e1:8e:71:6d:4d:e0:54:a9:d9:69:9a:8f:1e:
bb:ce:27:c4:d7:4b:a1:a8:5a:51:b2:2b:13:1c:57:
40:2e:11:1d:bd:0e:2d:a9:c5:be:3b:4b:c7:9a:5e:
04:4a:d7:87:e2:70:b7:3b:1e:99:27:08:70:88:42:
96:df:71:98:05:f1:04:40:b8:49:b0:47:83:ec:ca:
95:72:a7:36:4a:06:d6:55:3e:24:aa:4f:e5:31:47:
25:28:7e:6e:41:33:78:bb:0d:dd:1f:28:6e:2a:99:
b5:c2:d6:0e:78:61:c0:41:41:3f:be:f6:bf:3c:9a:
1c:ea:f8:e4:28:4e:4f:56:b2:be:0a:df:49:6a:8b:
45:c8:f1:09:90:a0:d4:e9:f5:ee:bb:97:6f:99:ee:
83:10:67:64:fd:78:bd:4b:25:3f:3c:e6:99:f0:7c:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:A2:FE:75:77:B1:5A:B4:2E:DE:36:03:1B:1E:40:A3:DB:3C:13
X509v3 Authority Key Identifier:
keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:f2:d0:a3:f4:81:2a:18:87:80:84:6f:1e:11:ca:f5:fd:
10:8c:6e:21:a2:64:c9:e9:4b:a0:8e:55:d9:34:a1:7f:01:a1:
62:60:b9:dc:e0:80:8d:ea:62:85:5c:4d:03:fd:a3:91:a8:95:
7d:0c:4b:4d:5f:e5:b5:29:5b:fe:8f:0f:80:b6:31:5f:2a:50:
b8:e3:65:8c:ee:1b:8d:7b:a7:2d:a0:94:ea:bd:2b:88:13:1f:
e1:7f:76:cf:83:72:9e:8e:de:55:50:91:be:4f:b7:2b:71:f6:
59:2c:59:09:a3:ab:1c:6e:91:0e:bc:fb:97:e7:59:24:c7:6a:
91:64:96:f4:67:08:ac:7b:cb:4d:da:92:5a:15:18:a5:44:fb:
84:ab:e5:0e:0b:d6:3e:ea:3a:f9:c5:6c:35:fe:d2:62:0e:ce:
55:f6:04:f6:e4:fb:d7:7f:ea:02:bc:e4:96:9f:fc:47:3b:46:
7e:bb:86:18:33:f6:3b:4a:d4:5e:de:3c:cc:2c:94:36:34:55:
ca:41:63:29:d9:36:df:65:ff:89:4c:48:76:64:fe:5c:bc:8b:
48:b1:f6:71:9f:6b:7f:55:60:35:4a:24:41:5d:09:ac:91:aa:
7f:b3:56:d4:ff:12:fa:85:05:b0:7f:f6:6f:dd:33:ce:b6:37:
63:bc:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:09 2025 by rpki-client