Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier: HrWaxIEPNOSAnzmvN+egv1XP1qCQMcOOmn7bwKy0lXQ=
Subject key identifier: 74:59:12:0F:0B:57:EE:64:C6:D5:6A:44:A9:C3:76:B7:3D:A5:AA:59
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:09:34 +0000
Manifest this update: Fri 31 Jan 2025 06:09:33 +0000
Manifest next update: Fri 07 Feb 2025 06:09:33 +0000
Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: 7d0VZguLx5Dxqfk8DJwba7A7nGTNK6FdN5ZUf0d+WlM=)
2: 7490D0DE5AE111EFAD7EB82CC4F9AE02.roa (hash: 2zLHgEDWGwo9zlyqNnj3rIHawpIWGW43p4pSnf/kapk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Validity
Not Before: Jan 31 06:09:33 2025 GMT
Not After : Feb 7 06:09:33 2025 GMT
Subject: CN=679c691d-916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:b2:02:a9:71:f1:a4:e9:94:ba:0f:31:d8:
05:78:50:0d:80:4f:ff:1a:e1:cc:90:a7:9d:f7:ab:
7a:12:22:8c:52:e9:bc:2f:e8:e4:e7:5f:9d:80:1d:
b0:9f:42:97:d1:b8:9f:c7:58:a8:15:25:7a:5c:b2:
73:d5:70:c8:2b:7a:fa:79:1f:8a:ae:37:f7:31:c2:
54:f2:e0:aa:fc:a4:94:6e:88:88:7d:7a:da:bb:fd:
e2:69:71:99:d4:01:09:ed:3c:14:81:25:4c:e7:95:
fb:7a:30:fe:3c:88:16:65:c9:3f:9b:58:ad:ea:18:
9f:47:45:fa:f5:ae:8a:06:3f:e4:8f:d4:f3:46:54:
73:97:b0:9e:0f:ea:a3:3d:3a:f7:86:05:99:4b:f4:
e2:e5:26:2a:fc:b6:5a:54:a8:97:23:27:f1:0f:98:
00:e5:4c:f9:dd:32:3b:65:a4:24:79:66:f1:7b:ca:
f0:85:a3:6f:95:f6:9b:1f:db:1f:64:2d:ca:6a:9f:
2d:a5:55:b1:aa:8e:40:a7:80:23:47:10:e1:49:ac:
e8:e9:69:69:54:70:20:51:57:6b:be:2d:f4:f4:57:
87:11:97:e0:ee:f0:b8:82:1b:56:9d:59:c6:7b:1a:
9f:34:ea:86:75:03:0e:0e:73:33:d9:81:83:45:34:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:59:12:0F:0B:57:EE:64:C6:D5:6A:44:A9:C3:76:B7:3D:A5:AA:59
X509v3 Authority Key Identifier:
keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e5:d6:cb:33:cb:fe:3b:2b:70:9e:f3:45:a9:4a:39:38:8e:
a4:43:e0:bb:42:5f:da:e3:4d:33:22:ca:cb:d9:f4:53:88:a8:
60:e4:ee:35:ed:ea:32:d7:e0:7f:d8:8b:c7:a0:e8:ef:d5:dd:
bb:5e:64:c5:ef:a0:b0:b1:64:56:4b:ae:10:9a:3a:c8:25:20:
fd:7e:98:91:65:dc:6c:2a:12:21:77:9f:4b:5c:dd:82:d4:c9:
a9:66:c7:7d:da:90:bf:d0:24:21:6f:b6:b6:f4:9a:99:eb:30:
5e:a9:84:9e:63:45:2b:e1:6d:48:66:b0:4e:11:58:01:c3:bb:
e0:61:86:3e:04:44:f7:0b:4f:e5:c6:57:43:42:0b:e1:cb:1c:
0a:ca:e4:01:49:1b:a0:ca:4c:7b:41:9a:e4:60:b3:5d:54:ac:
d9:60:ea:cf:58:ad:a8:fe:13:31:f7:32:5a:49:d4:98:7c:b5:
da:89:9f:d5:d1:5f:d9:ba:7f:37:8c:eb:10:13:eb:15:e2:15:
a0:4a:dd:03:66:65:df:3a:92:80:8e:3a:e7:1b:3b:ae:de:ea:
b4:de:38:26:4e:28:d2:b0:e5:ab:00:4b:69:38:bd:50:27:63:
61:a6:87:29:c4:72:49:ff:a1:09:7c:65:67:d2:8d:91:3e:28:
07:74:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:21 2025 by rpki-client