Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: Mpcf8lPmNeOhT5AEjg4uYlQK1AiBHP7c9XZxg7S6Lwo=
Subject key identifier: AA:F2:62:38:39:8D:97:E6:B4:6D:19:31:D2:12:36:58:9B:EC:C4:99
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0AC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0AB3
Signing time: Thu 30 Jan 2025 19:38:15 +0000
Manifest this update: Thu 30 Jan 2025 19:38:14 +0000
Manifest next update: Thu 06 Feb 2025 19:38:14 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: CTJgx649lzsqF0GNwt9F+BVglKQOdEVgYli2qtuldLg=)
2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: 8H7Nb6RrKAdvN5EHtztaBVfV6WjB5E2CorO6gN96tZ0=)
3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: Fz0CDYPtXNYhgB9YTjI1zGiOeMCYZZOlR8VF0yZ8kZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: Jan 30 19:38:14 2025 GMT
Not After : Feb 6 19:38:14 2025 GMT
Subject: CN=679bd526-f70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:8d:63:c8:1e:2b:1d:bc:67:2a:d7:da:0a:
3a:14:8e:63:9f:43:2a:06:0a:13:18:61:67:dd:54:
fd:46:ec:35:1f:28:51:58:cb:bd:56:f1:95:30:65:
e2:f3:3e:98:63:44:7c:44:9e:18:a0:6e:c8:fa:8c:
f2:93:d2:16:81:6e:2f:f3:c7:3c:7c:db:0e:c9:c2:
7e:58:bf:8e:ae:f0:78:ff:eb:17:a4:83:90:7b:22:
23:d0:90:6c:38:d8:87:20:df:53:0d:89:b6:c6:6a:
f0:19:70:56:2e:60:48:7c:8f:e0:bb:b7:5e:23:7b:
3d:e0:44:f9:b5:36:6b:06:3a:92:48:6c:10:81:37:
fe:f3:c7:b1:0d:e5:21:2f:b6:74:20:1d:4e:a6:0c:
04:b9:85:e1:46:d3:a8:f6:9a:36:05:07:b5:60:e1:
4e:f0:eb:1d:1c:77:a3:69:52:19:3e:20:ab:74:b4:
e0:54:73:ec:58:b0:36:35:01:ef:57:ba:a4:00:4c:
6a:87:0d:2f:d5:8d:37:3f:5a:92:8f:63:7b:40:13:
1d:b8:a9:91:db:64:54:92:53:66:6f:63:36:ba:1f:
91:1b:a7:b4:8a:c8:73:4f:e9:23:5f:d0:84:b4:67:
2a:5b:1e:3e:8e:e2:14:2d:62:60:1a:cf:d1:88:74:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:62:38:39:8D:97:E6:B4:6D:19:31:D2:12:36:58:9B:EC:C4:99
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:9a:46:b0:f7:49:ca:ae:18:b2:3e:b9:45:db:d5:00:09:10:
d7:42:df:e0:73:a6:c8:f6:1c:2d:0b:29:d7:d2:1e:a2:78:b7:
07:b6:6e:fd:b2:9b:9f:81:05:84:f9:2b:32:9f:c6:da:79:37:
c4:19:b8:9f:a0:7c:78:a3:ad:75:42:da:7c:f8:6b:ec:51:50:
14:5e:10:6f:f3:c0:fd:1f:12:de:13:25:dc:62:04:ae:96:cb:
e7:f8:30:3d:6b:7c:b3:20:e8:e2:11:98:ca:34:23:f6:84:fa:
08:d4:08:99:a9:70:d7:f8:4f:b7:d2:3f:81:24:c1:c2:68:f1:
72:18:d9:e3:65:82:d8:1e:65:df:8a:44:51:c7:a7:5a:b0:15:
54:d0:e6:22:99:e2:81:3d:3b:a6:4c:ed:13:c7:94:23:6b:a5:
53:4f:4b:45:50:67:1a:9e:c3:d6:97:a1:0b:04:c3:af:ba:7c:
00:84:3e:6a:e3:80:e4:48:e0:45:3d:80:22:00:1d:68:17:d6:
d3:76:1b:b5:7d:6d:fc:f4:73:c8:6b:7b:3c:4c:7d:94:66:61:
45:8a:62:f1:d5:10:ae:0f:90:70:e3:c0:99:d9:e5:d4:b0:d1:
18:ec:b1:46:d0:11:85:16:73:b1:22:fd:fd:47:fd:2a:ea:26:
65:7b:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:47 2025 by rpki-client