Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier: b2m+JMSAGcG+2fb93LkWfV3DS8nRILDbxPaLp6HL9vE=
Subject key identifier: E4:31:CE:A2:DE:3E:EF:14:07:A5:86:A3:A4:31:B2:F8:37:5C:25:94
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number: C8
Signing time: Fri 31 Jan 2025 04:57:00 +0000
Manifest this update: Fri 31 Jan 2025 04:57:00 +0000
Manifest next update: Fri 07 Feb 2025 04:57:00 +0000
Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: 9/aYoJsr9EVusJZxf+ao3SVwMcGvV3IznNPSwFglrRs=)
2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Validity
Not Before: Jan 31 04:57:00 2025 GMT
Not After : Feb 7 04:57:00 2025 GMT
Subject: CN=679c581c-43b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:c1:49:d1:94:4f:e5:07:f7:97:bf:ff:e4:
ad:76:d3:6e:da:14:1f:6d:8f:4f:71:04:e2:6e:8a:
2f:c4:58:c2:04:76:2d:80:66:f5:06:dd:16:e6:f4:
fa:5c:a9:53:e2:8e:03:5b:d5:26:31:f6:d7:bc:f3:
53:ff:12:76:9f:3b:e5:d9:4c:ea:9a:fd:15:4a:cc:
fb:59:4d:1c:c2:da:5f:6b:32:32:f0:30:dc:5c:db:
84:33:5b:a2:d1:55:ce:50:9b:68:2f:06:80:68:1d:
59:78:86:fe:4a:13:24:25:f8:66:36:47:73:13:3a:
4d:59:2d:f7:a5:e0:bc:fa:00:6d:e5:0d:a1:7c:e4:
c3:9f:09:1d:c8:d8:85:f7:3c:6e:1c:ba:64:01:33:
ac:ac:6a:79:41:f0:eb:69:f0:13:d6:93:e7:84:01:
2c:04:85:54:8c:d9:34:fb:59:0d:c5:a3:67:f6:66:
e3:06:ff:1a:3e:71:5e:10:e1:69:8f:e9:82:2e:a1:
16:f6:9f:83:89:9a:d0:fd:25:2c:ff:46:bc:e3:dd:
e4:45:34:29:9d:54:4a:cc:5a:8f:c7:55:a2:7a:68:
39:64:02:80:a4:c6:8a:6e:ab:ed:f9:4b:ca:11:50:
38:4d:50:af:c2:6d:99:99:a4:ed:4b:45:9f:dc:39:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:CE:A2:DE:3E:EF:14:07:A5:86:A3:A4:31:B2:F8:37:5C:25:94
X509v3 Authority Key Identifier:
keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:60:2d:4b:d5:98:56:29:81:fe:9f:70:64:d9:ab:d9:64:e3:
da:ff:01:2c:fc:e0:77:d3:5f:9d:fe:3f:b7:1c:94:20:6a:b9:
47:2a:3f:90:ff:ea:5b:d3:f6:a0:9a:f0:3a:07:2a:51:79:1e:
db:25:8c:bf:0b:e1:5c:ec:9b:f5:ba:43:56:64:2a:4d:02:78:
3c:0f:bc:62:d3:3a:0f:3e:e2:84:5e:c8:78:76:b0:9c:0f:de:
4b:c8:fd:8d:ef:b8:a2:df:01:a8:f9:20:d6:18:62:6b:b1:5a:
bb:37:99:8c:da:47:af:01:2f:51:58:07:0a:0d:6c:8c:8c:a7:
4f:91:bf:98:0b:49:cb:de:85:f4:af:47:03:eb:37:ab:58:30:
c2:0a:a0:bc:f3:79:7c:6b:55:50:32:8b:57:ef:f4:03:d4:85:
18:77:67:d4:a9:ac:c8:a4:59:4a:6f:fa:b3:5e:74:0e:67:b1:
b6:64:4b:62:5f:c1:9a:db:93:d0:4d:a8:4d:a6:9d:c0:fe:1a:
da:f0:5f:13:a8:1f:c7:d1:d9:d3:97:c9:ea:d2:dd:ba:21:24:
c0:a0:54:2e:c2:aa:e3:3b:6f:2f:e4:c4:f6:3d:0a:bf:b1:3e:
06:49:5f:81:f9:f9:4e:fd:5c:24:67:ac:51:e9:ac:d9:d8:5e:
89:5e:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:54 2025 by rpki-client