Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json)
Hash identifier: 8itLCte6hxlug5omifKUDja7ehbm0a0LaJXT83gc17o=
Subject key identifier: B4:BF:48:8B:D9:B6:CF:AF:91:F4:31:A5:9B:6A:80:EE:49:2F:0A:5F
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
Manifest number: 041B
Signing time: Fri 31 Jan 2025 00:26:53 +0000
Manifest this update: Fri 31 Jan 2025 00:26:52 +0000
Manifest next update: Fri 07 Feb 2025 00:26:52 +0000
Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: U//qmrJUPV5rphBb5GNx0qwW0y7Iu2IuPWykNs8dPfk=)
2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Validity
Not Before: Jan 31 00:26:52 2025 GMT
Not After : Feb 7 00:26:52 2025 GMT
Subject: CN=679c18cd-c769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:52:72:20:f6:07:04:b7:e5:57:95:1e:fe:
05:5f:8f:9b:af:a6:26:0f:45:77:f5:26:b1:94:8c:
50:fd:49:c3:1d:4f:11:96:7b:ac:af:83:93:cc:bd:
cc:95:e6:fa:48:1a:32:29:c7:ce:54:f6:67:74:63:
a2:3f:7d:06:cc:c3:62:41:b8:e5:dd:3c:62:79:a1:
2f:60:a5:61:3b:a3:30:15:52:69:e0:30:d9:40:1b:
1c:b4:6d:d4:22:c8:db:31:17:65:71:0d:b8:eb:ae:
b1:d6:af:7d:61:63:00:39:20:62:b0:d6:5c:e7:f6:
89:e8:e5:15:ae:ee:a4:9c:59:ff:06:72:9c:64:8a:
90:ce:46:72:aa:1d:9d:70:26:73:84:d0:4a:ac:bd:
28:d5:48:03:28:da:86:a8:f9:65:d8:9f:79:c8:c2:
b2:ac:6d:a1:32:23:f8:13:f2:96:a6:32:b4:e4:08:
00:d7:c7:bf:c4:92:55:e6:6f:74:5f:be:a4:1a:e1:
88:f2:dc:f6:17:a3:06:da:3b:29:00:a0:57:6b:08:
64:54:4b:56:ad:51:3a:00:61:ec:69:08:92:cb:d7:
3d:ee:89:7e:8c:e3:59:d4:63:bc:f2:1c:7c:9b:f5:
11:ff:af:29:f0:3e:70:92:d3:eb:4c:20:fb:12:da:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:48:8B:D9:B6:CF:AF:91:F4:31:A5:9B:6A:80:EE:49:2F:0A:5F
X509v3 Authority Key Identifier:
keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:0d:b5:b9:ab:44:83:51:03:3f:70:5f:7d:ed:87:8a:70:
65:98:d1:db:52:8b:ad:46:28:24:7b:bb:b9:ed:06:a2:24:96:
7f:5b:61:e0:71:d2:e6:97:00:df:5c:29:52:59:c9:0b:4e:25:
af:20:9b:a6:61:72:90:a4:65:45:f3:07:c1:86:86:87:81:f5:
e7:78:03:9f:30:a0:97:bf:c1:7c:7e:14:10:25:c4:97:94:3e:
c1:d0:21:43:d2:39:4e:1a:e6:ca:f4:37:73:6a:9b:0e:fd:a8:
55:d8:61:3b:56:46:aa:09:a4:06:bc:ca:d2:59:57:a7:fe:0a:
c5:d5:30:7b:22:df:55:76:6a:0b:2c:9d:2e:57:63:4b:96:b5:
ba:2e:7f:a4:de:d1:03:05:6c:2b:60:8b:a5:f8:b0:d5:6e:01:
1d:9f:cb:6e:ee:b2:98:1d:9b:5d:dd:ab:96:d0:dd:67:e7:cc:
1e:73:6a:38:6e:12:a9:f3:f4:c6:a7:d6:14:79:d4:37:2e:bf:
b8:3b:7f:3b:fc:08:c8:b8:73:d1:f9:9b:18:a7:f0:8d:4f:da:
11:05:c1:1e:6f:40:e5:fc:6d:bf:87:8d:c8:77:85:c8:00:bc:
f9:71:44:90:4c:7c:90:60:24:cf:a2:a0:80:2d:3d:4c:43:14:
af:75:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:56 2025 by rpki-client