Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
File: -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json)
Hash identifier: xK/a2/YVl0zBkG/AmnqLzrqMs27sxDI55NVk6OenUsU=
Subject key identifier: E1:6C:C3:A5:43:C6:50:D8:26:7E:FF:E0:86:CB:79:54:3A:15:28:CA
Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Certificate serial: 030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
Manifest number: 0309
Signing time: Fri 31 Jan 2025 01:18:36 +0000
Manifest this update: Fri 31 Jan 2025 01:18:36 +0000
Manifest next update: Fri 07 Feb 2025 01:18:36 +0000
Files and hashes: 1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: 7zYQEdi5x8n5O2ckz/7k7gTKH7xJOjJg50Q7KQdKLy4=)
2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: M8EeCK4wseDGRAVaayv2SdcAD2UENUp0dQWvk3BdYlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Validity
Not Before: Jan 31 01:18:36 2025 GMT
Not After : Feb 7 01:18:36 2025 GMT
Subject: CN=679c24ec-16de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:65:db:9c:9e:a8:0e:76:25:54:45:d2:65:
6f:92:f4:32:d7:44:c4:f9:2b:2c:40:f1:cc:36:a1:
eb:bb:50:6c:a8:bb:35:39:8e:51:b2:79:ef:f5:fb:
bf:30:4f:0d:fb:b5:ef:11:e5:69:ac:cd:91:60:c9:
3f:a0:db:24:75:29:a7:f6:de:fe:07:21:a5:a7:34:
12:3f:66:86:5d:19:62:dd:c6:51:b1:fc:6d:3a:f1:
82:33:bd:7a:a6:aa:8f:30:77:40:c2:de:eb:02:b8:
70:22:90:66:aa:ed:64:99:37:b5:f3:15:aa:a4:8e:
b8:6c:87:b2:73:69:a9:45:33:d8:3c:39:49:93:0f:
09:ef:03:52:ae:aa:83:d0:52:4e:aa:a6:c4:2e:2b:
6b:99:da:a9:18:7c:48:cb:fc:2f:3d:4b:e5:1f:29:
f2:dc:a9:c3:05:11:44:96:82:1a:db:f9:de:a2:7d:
06:ec:fe:db:84:b5:a6:55:b8:76:7f:69:32:30:71:
0b:d2:d1:40:36:fa:25:bc:33:d8:18:ad:61:af:8f:
a4:c1:7f:dc:c4:18:38:5d:ed:1d:41:98:a8:6f:ce:
f2:42:68:05:99:14:05:34:2e:2e:e7:fc:b7:c7:a0:
3a:f0:23:f6:cc:60:ed:62:39:6a:82:55:77:37:86:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:C3:A5:43:C6:50:D8:26:7E:FF:E0:86:CB:79:54:3A:15:28:CA
X509v3 Authority Key Identifier:
keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:99:35:ae:12:6b:33:e1:13:f4:b2:b1:7f:85:e0:f6:b7:
18:f2:22:62:9f:be:30:cf:ca:ce:73:85:9a:2a:c7:c6:47:9c:
64:a9:ae:df:a3:37:f1:c0:ff:94:c7:03:fc:07:67:67:9a:7b:
11:42:4e:b0:aa:47:37:b6:28:22:0d:e0:8e:11:ec:ad:92:17:
8a:df:aa:bc:6c:cc:8f:52:58:1f:b8:66:b3:74:41:f8:b1:31:
f7:a4:52:3d:9b:cb:8b:fa:61:ae:a2:9a:cd:f5:c4:67:73:f3:
c7:d3:76:be:e1:a7:4a:ab:00:9c:59:1b:13:17:ec:b7:0e:cc:
0b:f9:64:50:19:84:b9:8c:5e:e5:cd:3c:f5:2d:a7:f9:e6:ab:
2b:2e:e2:7d:17:fd:a0:2c:64:2b:bb:94:62:9b:43:06:8e:8d:
2c:95:2f:49:d9:14:2d:74:d6:1f:ce:51:4f:ae:d3:bf:37:44:
e6:7b:55:2b:c3:c4:3e:6d:3c:62:5b:d3:74:17:5a:7f:5f:f8:
95:6e:95:28:72:2a:b2:f0:86:c7:4f:d4:ff:8e:26:f1:57:79:
72:34:0a:52:d6:92:54:b7:69:b1:bf:c5:b6:88:ab:a8:eb:a7:
60:1f:cc:75:2f:35:fc:6d:45:ae:fa:5e:df:fc:a7:a5:b6:fe:
50:a0:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:23 2025 by rpki-client