Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
File: 320AK7yrolDSrmtEVOPL_WfSx-o.mft (raw, json)
Hash identifier: 6XjI31J6lmAqXhgdXCOrY4otJHfEk7gF8El9OOCNrzQ=
Subject key identifier: 22:9A:30:FA:F3:24:5B:1B:01:7A:6C:56:C7:D1:9C:31:C1:13:30:A0
Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Certificate serial: 0952
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
Manifest number: 0948
Signing time: Thu 30 Jan 2025 20:19:33 +0000
Manifest this update: Thu 30 Jan 2025 20:19:32 +0000
Manifest next update: Thu 06 Feb 2025 20:19:32 +0000
Files and hashes: 1: 320AK7yrolDSrmtEVOPL_WfSx-o.crl (hash: 4X0oVbsRtQP3FZqTyxaMfKS7JSPsef1zvbdAM7AS7Xk=)
2: C07738FE9F4511EB88EBCA76C4F9AE02.roa (hash: EW5gw++/Nv/7XkyhmrGAdJFCyCQBgQSX+Pdw0qIT5p4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Validity
Not Before: Jan 30 20:19:32 2025 GMT
Not After : Feb 6 20:19:32 2025 GMT
Subject: CN=679bded4-b682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:66:ac:aa:b7:fe:9c:1f:d7:f0:6f:88:6f:
25:da:af:10:ff:3d:ef:22:9d:aa:43:e8:0b:7e:c1:
78:9c:07:0b:5b:8d:c5:c2:e8:d5:84:a1:f0:ce:9d:
23:a8:38:87:4b:93:80:b6:76:6a:7f:d8:15:01:d0:
af:78:7c:bf:e0:c9:90:18:ee:a5:b2:89:05:01:08:
89:df:01:42:05:07:33:0b:a4:66:e9:a8:07:d8:97:
ae:2c:94:46:47:c9:e4:c7:18:b1:c5:43:79:b2:d4:
83:55:3c:21:27:67:46:a2:e3:21:6f:8d:c1:5e:f7:
95:f5:f1:f3:ee:5d:22:c4:f3:31:58:ff:1a:0f:15:
f7:d8:82:c7:e0:51:64:11:ab:19:50:14:a4:9d:97:
9d:3d:4d:e5:5a:0e:ee:38:a1:a3:8a:73:ee:26:86:
32:f4:b4:3d:3d:63:21:31:f4:12:6c:57:7f:a9:b6:
83:e4:f8:3b:aa:16:75:f8:36:e2:dd:b9:c9:09:78:
ec:b3:e3:1b:41:43:7b:21:8c:06:d8:73:f2:f3:27:
34:f5:4e:93:13:b2:3f:07:67:59:d1:df:46:27:00:
e2:7f:4b:36:fa:6e:9f:ae:20:ef:23:2b:06:ff:94:
2c:21:1b:26:f3:37:13:06:e9:2c:7b:a9:f0:d9:03:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:30:FA:F3:24:5B:1B:01:7A:6C:56:C7:D1:9C:31:C1:13:30:A0
X509v3 Authority Key Identifier:
keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e4:d7:ac:af:68:fc:4c:e1:09:a4:a5:3e:eb:a9:cf:34:36:
e4:5f:9a:db:56:5c:40:85:3b:59:99:6f:ec:58:80:d1:ae:43:
1b:61:f7:12:0d:4f:90:30:26:78:8d:6f:ff:d4:14:83:27:03:
d3:f8:fc:9d:fa:6d:2c:8f:bd:33:1a:7a:49:db:00:e2:00:40:
bb:20:34:47:62:bc:34:bd:49:e5:66:a7:3c:52:fa:f7:79:58:
25:a4:8e:6b:6b:0e:94:8c:f1:c1:98:e8:4b:3b:15:42:4d:b7:
43:96:a3:0d:d9:3a:a8:8f:59:13:5f:f6:87:e7:2f:68:0f:96:
4f:9f:c4:40:9f:c1:a3:ea:95:9d:a0:a8:c7:78:f3:0d:54:f7:
26:d1:17:a1:22:18:cc:bd:a7:86:9f:59:91:64:22:17:07:0a:
ef:72:7a:6f:45:79:d1:be:bf:c8:bd:c6:12:60:55:a3:bb:17:
d1:e8:82:88:f6:9c:e9:dc:e1:f9:b8:e3:a2:80:c4:51:ce:18:
dd:a8:15:59:0b:4f:dd:62:b4:17:cf:83:e6:d2:06:58:8a:4d:
7a:08:90:8e:0e:0d:50:0d:84:37:f8:21:32:f5:e4:07:8d:4a:
04:ed:20:17:62:10:e5:4d:f1:57:0d:78:2e:c8:77:24:0a:39:
4c:b5:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:40 2025 by rpki-client