Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: TlP6CbwPviiARDddjPK7Uzr4DW98y6B7haYfDqYNr9o=
Subject key identifier: 62:28:4C:2F:74:BD:CF:CE:1E:63:00:03:42:F6:B9:C1:1B:10:94:08
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 070F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 070A
Signing time: Thu 30 Jan 2025 21:48:43 +0000
Manifest this update: Thu 30 Jan 2025 21:48:43 +0000
Manifest next update: Thu 06 Feb 2025 21:48:43 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: niP+E/xJnVAxxOJMB5elzyq1vIHn5nIFvYWM7q0Vrng=)
2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: SJfatYjVkNsGa5A40/Z5VuaU5eA8HwIwMiF3CgmDhpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Jan 30 21:48:43 2025 GMT
Not After : Feb 6 21:48:43 2025 GMT
Subject: CN=679bf3bb-0b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:4e:7a:21:b6:85:b4:05:e3:b1:c4:13:a7:
5b:58:d8:58:da:3e:de:d8:da:00:70:01:51:cc:7a:
b9:b8:47:aa:7a:3b:ed:90:d2:24:e1:29:eb:57:c1:
82:5b:48:a9:ca:a5:d7:a2:39:2e:04:f0:18:f9:e1:
94:2e:7f:da:e9:7d:bb:bb:9e:fc:ee:54:c8:ce:d9:
80:2f:35:db:bc:64:5f:77:f5:36:dd:73:33:d2:41:
1b:a5:81:1e:14:c1:c7:72:4a:90:bc:b8:52:a6:6d:
ea:af:7d:a1:81:46:68:de:1e:36:a7:7f:09:9a:2d:
a9:3b:9d:b0:b0:c2:aa:09:86:f0:2c:34:f9:4f:3a:
70:57:51:7d:7f:69:21:45:a8:44:79:09:97:94:40:
7c:46:65:c1:08:3c:c0:59:7d:c0:84:c4:67:6b:fc:
a2:fe:7b:c6:e8:9b:bd:26:10:14:55:06:87:85:f0:
fd:3b:c3:85:10:ee:d1:1c:ed:95:9f:f2:2c:43:46:
48:a3:8a:74:9d:fe:25:8b:3c:eb:c4:2f:79:86:83:
b8:63:af:51:cc:9e:70:d3:e9:c3:8c:53:2b:72:1d:
9e:65:c4:ab:ca:ed:1f:cc:f3:5a:1a:2b:39:22:f7:
7f:0a:35:49:8a:53:7e:5e:c8:4c:36:48:07:fe:c3:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:4C:2F:74:BD:CF:CE:1E:63:00:03:42:F6:B9:C1:1B:10:94:08
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:21:ed:84:f3:57:17:5c:f5:f3:97:7d:6b:c7:a0:67:f0:06:
17:d6:9e:75:13:b0:89:e7:2b:14:89:1a:fc:17:fd:f1:15:cc:
50:ec:ab:20:07:52:c5:fa:50:f7:36:f6:11:b3:f1:46:1b:da:
50:0f:6d:6f:4f:40:aa:8a:94:a2:41:76:1d:e6:56:6e:75:8c:
86:b6:ef:1e:f5:75:37:c5:92:17:b2:ae:7c:7e:96:4f:3d:ac:
77:52:0f:54:c0:a2:a8:dd:ad:f5:9a:6b:7b:f3:57:f2:df:4f:
0c:52:5a:39:e5:ca:6e:28:07:30:d3:13:a3:7d:c5:cb:cb:37:
17:8e:b3:08:aa:74:80:b5:dc:a2:de:44:ac:d4:e1:54:89:a6:
96:15:d1:59:0e:22:b9:96:7b:52:de:45:1e:d4:ea:e2:b3:d2:
ce:bd:85:7c:16:e9:aa:1f:7a:4c:ca:42:96:1b:fd:e7:5c:18:
bd:f2:a9:f3:28:28:3f:04:a3:ce:00:eb:d7:b8:e9:c3:cc:09:
d6:96:f2:09:d3:d3:76:59:60:7c:fe:9e:7a:ed:81:c5:39:c2:
ec:2a:fe:32:7a:7f:e8:92:d6:74:32:ba:ad:ac:b4:7f:66:6b:
6f:9c:4e:9d:60:63:36:c1:72:1a:f1:7d:13:0d:fb:25:af:0b:
f7:03:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:35 2025 by rpki-client