Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier: RczqknWnrPdNaAr5hX8xuvYyI7mLF4aeCX8eJz2u1w8=
Subject key identifier: E6:B0:2E:D5:5A:84:AD:5C:B4:B8:37:29:F7:DB:BE:D8:89:37:7F:3D
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 07D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number: 07AC
Signing time: Fri 31 Jan 2025 15:58:33 +0000
Manifest this update: Fri 31 Jan 2025 15:58:32 +0000
Manifest next update: Fri 07 Feb 2025 15:58:32 +0000
Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: mwGdDxIzlqkVU9ZpwollM1xiZ4QXCVw+CAf1uG7Wohc=)
2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: 8D5ksmfc3aXF/CCypLFYWvFyrGXF0UBfGXqLK0BT+9c=)
3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: p/AuYRiNnSg4t0PmmsqbbQiBX6hKVTQkj6NVyO5NMng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jan 31 15:58:32 2025 GMT
Not After : Feb 7 15:58:32 2025 GMT
Subject: CN=679cf328-de97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:a3:fd:ec:da:58:71:ac:a8:d3:61:77:e0:
7c:1f:d8:c4:78:ff:97:99:e3:e9:88:da:15:56:b5:
bb:80:a1:24:b5:81:74:3e:2d:69:11:64:74:33:f5:
57:40:fb:70:2d:62:8d:aa:b7:75:5a:1b:b0:64:f4:
2f:6a:45:ec:cc:aa:92:0d:dc:82:a5:6b:58:44:c8:
b6:70:2e:5b:9a:96:51:92:1b:88:6c:5e:39:70:2f:
2d:f2:28:18:b6:b7:73:ed:af:2f:4f:51:2c:b1:4a:
e2:37:c2:6a:24:98:85:f0:40:9f:2e:de:19:85:5c:
08:ef:93:d3:4b:66:b2:46:7c:a8:63:47:72:8e:15:
f5:7a:bd:4a:34:9f:fd:0a:05:4a:96:43:85:b0:d6:
71:4d:fd:e8:b7:3f:a1:69:40:1e:2c:ac:2f:82:f3:
ba:88:7c:57:24:f2:7b:c0:e2:83:77:1b:f3:0d:89:
76:f1:db:ea:14:71:92:89:e5:53:7b:d2:20:14:8c:
dc:bb:bd:9d:b6:4f:af:25:3d:51:cc:bd:71:a3:bc:
d7:4d:4f:93:80:7e:73:bd:88:47:af:3b:3f:09:ee:
76:67:a8:7d:83:22:b6:36:d7:67:8d:f3:f0:a5:46:
2d:b7:9e:02:6b:d4:3f:96:ee:4f:09:d2:73:58:d7:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:2E:D5:5A:84:AD:5C:B4:B8:37:29:F7:DB:BE:D8:89:37:7F:3D
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e4:2d:7a:ac:76:61:29:f9:5a:2b:49:71:0a:3a:5e:e4:08:
80:3f:6e:26:11:84:18:6e:4f:22:ed:96:65:63:de:e4:4c:69:
52:9f:35:b8:55:b5:45:f6:cd:73:1e:1b:82:72:84:4e:37:08:
8c:0c:cc:5f:b5:15:bb:f0:f7:86:6e:47:82:b6:dd:3c:1e:3e:
d1:fd:e7:4d:58:10:51:45:46:a3:b8:5a:ab:06:77:7c:c7:c9:
e9:84:e4:7f:0d:24:b7:af:aa:5d:bf:7c:7a:c6:09:b8:63:b0:
e0:af:9d:86:50:7d:c7:fe:31:00:ad:a4:96:17:4c:fc:dc:14:
cd:ed:29:31:2f:bd:1f:38:75:1c:57:0e:7d:07:75:f0:ab:d5:
8c:e6:be:54:f5:60:a1:94:2d:62:ca:37:9d:ea:b9:20:30:7f:
23:5d:92:7c:bf:4a:5b:19:32:d6:55:cb:4c:5f:92:91:14:e7:
6f:d1:d9:f3:f3:ff:31:57:e0:a6:85:48:36:29:31:a5:23:b5:
d7:02:1f:a4:47:96:51:91:de:dc:19:f9:aa:e6:8e:ea:85:3c:
6c:77:cf:b4:ba:8c:79:52:1d:83:49:71:4c:7a:91:88:f0:18:
0a:d6:3b:f4:db:a3:78:fe:30:41:2b:25:c5:d6:b8:7e:03:cc:
1c:81:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:23 2025 by rpki-client