Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier: rszkgBoGDjJ+wlKOPtWaUeaaLxDQepVDvPcKBLDiGMg=
Subject key identifier: 15:35:75:AE:4D:BF:C3:DA:60:4F:C4:8E:67:53:5F:CB:37:4D:60:C4
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number: 0244
Signing time: Fri 31 Jan 2025 01:56:26 +0000
Manifest this update: Fri 31 Jan 2025 01:56:26 +0000
Manifest next update: Fri 07 Feb 2025 01:56:26 +0000
Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: B0aNnbEAQo7ppQJ6fFYHZ2BEtmiE0wIMB7BDLiOMnoM=)
2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: aPI8mVL7Dstx7y3IRo2S4CN1FA4wN8FwOnV7yts7LdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Validity
Not Before: Jan 31 01:56:26 2025 GMT
Not After : Feb 7 01:56:26 2025 GMT
Subject: CN=679c2dca-00ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:c8:3c:15:78:c5:9e:38:2e:81:a6:ef:ab:
db:f7:da:d9:ef:91:6a:01:a5:96:7b:fe:63:da:a5:
4a:fe:ef:b3:41:04:98:01:93:bb:97:bb:49:d5:15:
63:86:61:aa:57:fc:f9:0a:02:4b:d8:9f:d2:a0:7f:
c7:f2:a1:9a:45:05:e9:77:02:fd:95:f4:04:a4:30:
ae:cd:a8:b4:8c:92:62:eb:ad:c3:51:f2:d9:b8:67:
43:e4:bc:02:a3:85:16:ec:73:9c:da:b2:d8:99:f6:
3e:11:c9:f2:ad:a1:90:a8:d4:41:76:71:28:be:46:
d7:6b:d3:ff:c7:80:0a:b0:35:66:13:b8:b0:69:1c:
82:7c:bc:95:eb:5a:54:b2:d2:37:07:bf:34:4a:cf:
77:cc:5d:0f:38:37:fc:55:f1:4e:0d:78:48:4f:f9:
79:24:7a:1c:22:8c:a6:07:11:d6:4c:9d:83:7d:0f:
f9:e0:34:64:5c:db:c5:e4:c6:ba:f4:61:98:51:d7:
3b:11:7f:5f:d3:41:51:8d:7a:52:a6:5d:02:c0:75:
c5:3d:a8:f0:a9:e9:41:cd:ff:64:b6:54:7c:fc:e0:
ae:46:a6:ba:c4:45:23:d7:0e:f0:1f:23:de:6c:76:
87:4e:f6:c3:99:f3:59:70:95:97:a0:09:ed:27:9d:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:75:AE:4D:BF:C3:DA:60:4F:C4:8E:67:53:5F:CB:37:4D:60:C4
X509v3 Authority Key Identifier:
keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:32:64:20:42:7d:36:5e:a2:28:06:46:64:a3:bd:77:c0:17:
0b:75:c8:b3:4f:55:9d:30:69:f3:b4:d9:11:38:2d:86:27:bb:
79:5b:2f:0c:d1:8c:f1:0f:f1:da:5f:16:0b:27:14:d5:a2:ab:
90:02:30:b0:5f:98:15:cb:5d:77:96:80:f9:23:74:1f:04:b5:
87:c6:64:07:47:f9:7b:13:12:57:e7:37:6a:2f:5d:bb:be:18:
be:1f:fb:9f:db:48:6e:c5:ca:1e:35:65:5f:d7:21:99:f2:18:
76:1b:48:48:76:d7:dd:44:5d:7f:9a:28:9d:9c:bb:9f:b3:b6:
50:f0:e8:3a:44:f9:df:13:8a:26:1e:b9:06:bb:2d:7f:0e:bd:
95:33:52:97:40:56:a2:59:25:8f:cd:12:3c:b1:ba:d7:79:ec:
98:14:ad:28:21:be:d9:fd:f2:3c:30:8d:62:b8:91:bf:94:a1:
e2:cc:44:f9:b7:43:ff:6d:1e:98:d5:8c:f3:e3:ff:c8:ab:de:
17:bb:a8:c9:eb:2c:3a:d0:c7:30:cd:aa:ce:02:65:d2:e1:4a:
7b:b2:ad:a3:52:ed:9d:2a:46:cb:d2:ca:6c:23:da:65:0e:84:
97:f9:43:e4:79:04:25:52:d2:c4:6f:6c:97:9e:23:b1:8f:d3:
7c:e7:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:54 2025 by rpki-client