Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json)
Hash identifier: QnEj5Eid1ON/D6Zc8dc5mS1SjJ94nrnQFkS1e2xJKZo=
Subject key identifier: 32:35:19:EA:DB:FC:CC:E2:88:F6:D0:EB:E7:2B:BE:EC:BA:0A:D0:4A
Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B
Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B
Certificate serial: 0FAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
Manifest number: 0FA3
Signing time: Fri 31 Jan 2025 17:29:12 +0000
Manifest this update: Fri 31 Jan 2025 17:29:11 +0000
Manifest next update: Fri 07 Feb 2025 17:29:11 +0000
Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: P+PqH32BJPaets7wuyF0USAYlU/hfLUyzSPjJk86uNA=)
2: 378459525C6511E989D03610C4F9AE02.roa (hash: IiQprXM45ceBxjHWm+F/2TXqvKDyfsIZ5gHCOtJkT5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4011 (0xfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B
Validity
Not Before: Jan 31 17:29:11 2025 GMT
Not After : Feb 7 17:29:11 2025 GMT
Subject: CN=679d0867-7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:ab:ca:91:55:e7:07:62:96:35:73:ae:d2:
20:6a:29:0a:08:f3:85:4d:cc:37:81:c5:6c:fd:e4:
80:dc:cd:b9:02:97:d1:af:48:48:d6:47:a5:8f:b4:
79:42:7d:f2:4b:b7:5f:9d:74:b4:52:66:83:5e:32:
cf:04:4a:2d:60:e9:d2:80:1c:f6:93:e5:1c:5a:3f:
06:7d:57:6f:85:76:2a:69:a2:1f:28:ed:72:5e:5e:
37:c3:ad:c2:6b:98:46:4c:68:34:5e:81:05:15:9e:
f1:5b:25:ab:46:08:99:ab:08:e8:38:c4:b8:45:b8:
bd:74:7a:00:47:fd:e3:2a:30:e7:ab:4b:96:39:b4:
c3:cc:86:a7:a6:50:6b:42:3c:0c:78:2e:06:51:2a:
73:44:35:50:d8:67:9d:36:bf:22:8b:cd:1c:5c:1e:
b7:5e:5f:c8:c8:ef:16:e9:6b:e2:34:76:8c:a0:0d:
33:1a:8f:f8:3b:b5:3d:a5:3f:d6:f4:bc:0f:c6:c0:
13:c8:23:b0:c7:58:c7:23:44:87:1a:a5:ce:28:cb:
88:e9:e2:86:c6:7f:15:ec:e9:db:c9:7e:ed:f5:3e:
9e:f2:80:98:cd:d6:56:e9:e2:d4:50:25:52:07:3a:
2a:bd:2b:16:7c:3c:4c:1e:23:2c:33:fa:b6:60:8c:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:35:19:EA:DB:FC:CC:E2:88:F6:D0:EB:E7:2B:BE:EC:BA:0A:D0:4A
X509v3 Authority Key Identifier:
keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:70:b7:95:a2:60:82:d0:e9:99:68:f9:c9:cc:49:33:13:45:
c1:94:99:8e:d0:89:40:72:39:db:e6:06:85:67:ca:7e:23:b8:
dc:be:cc:18:f1:2a:98:fd:ce:2d:bb:e9:9f:43:55:da:16:09:
8e:11:1e:25:95:8e:de:25:16:82:9e:21:50:bf:c6:4c:af:17:
9d:b9:4a:a6:58:12:59:32:63:e6:2e:5b:a8:80:fd:9b:f0:de:
4e:94:85:3c:5a:90:04:d5:66:ed:e0:d4:fe:3d:14:31:6d:30:
d2:fa:a5:ee:51:a2:79:5a:b0:ef:b8:ba:b5:90:bd:cf:c8:66:
6e:26:b2:fa:a7:d8:ec:65:53:5f:a6:be:a0:c7:ed:87:0d:03:
69:6e:5e:84:53:be:07:25:d0:f2:85:2c:f6:c5:21:07:8d:e5:
e6:9f:a3:65:00:15:db:b5:6c:c7:9f:27:d0:23:7f:77:67:06:
66:ff:ec:e6:d3:66:e2:19:66:e7:1d:ea:80:87:94:a5:6f:4c:
dc:f0:38:5b:f6:18:54:08:89:4e:47:bf:41:80:c9:00:54:be:
83:47:88:0c:38:e6:6b:c4:c1:94:69:33:de:79:3c:3d:ac:25:
12:d4:3a:4f:7e:26:f2:ae:9e:14:07:00:31:e6:82:80:a2:0d:
c8:17:75:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:42 2025 by rpki-client