Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier: MCcZb7tx3QLVwpiKMk8AZyNZrOmkJYKNtMcmwehpxQ0=
Subject key identifier: 87:FF:70:8C:D7:26:32:0D:A9:9B:41:07:28:98:54:5D:05:31:09:DB
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number: 011D
Signing time: Fri 31 Jan 2025 03:56:19 +0000
Manifest this update: Fri 31 Jan 2025 03:56:19 +0000
Manifest next update: Fri 07 Feb 2025 03:56:19 +0000
Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: Ay6s9vrBzIu4D4JIcxn33N8vw1WQEmDZaBFYLkFnH0Y=)
2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: FoAylNmdesRHU3oexctbCd7CtqneWbl6QUSlHnFcNTI=)
3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=)
4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Jan 31 03:56:19 2025 GMT
Not After : Feb 7 03:56:19 2025 GMT
Subject: CN=679c49e3-88bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:59:cb:d3:07:c4:01:08:3c:e1:8d:a6:8d:
82:d7:e4:45:28:89:c3:1c:41:80:02:af:39:9a:e6:
9a:90:38:ad:d9:79:2f:45:cf:28:05:b1:ad:84:6f:
73:d8:32:19:49:e1:9b:0c:fe:80:7b:57:7c:01:d7:
0a:86:30:fa:6c:2c:2b:79:70:55:d1:82:65:78:4b:
cd:6f:4b:ae:97:d9:46:c7:c3:ca:96:5a:3f:f1:d9:
d5:f4:25:16:cb:4f:6b:55:3c:2b:ea:ff:4c:20:e6:
ac:2f:73:ba:ec:53:3d:cc:ab:f7:86:36:9b:fd:2f:
e2:16:d9:e6:16:07:7a:b7:7c:a3:20:dd:b7:9c:ce:
17:d6:0c:64:e4:e7:57:40:39:65:61:0c:03:1f:40:
74:20:14:35:56:64:30:63:94:7a:07:11:b1:fb:3f:
db:01:e1:06:0f:fb:62:ab:a6:62:54:80:fd:0e:c2:
0a:a9:d8:bc:22:ea:76:de:94:13:8d:7f:88:e4:e8:
05:94:ed:7c:c2:ee:f0:35:cf:10:25:25:12:f5:ad:
77:37:df:cc:13:81:dd:bd:34:ae:d0:f4:83:14:3f:
8d:93:56:99:b0:d9:7f:30:75:a4:f0:4a:1c:79:83:
0e:07:f7:42:a0:55:38:c7:e9:18:06:3c:f3:2b:62:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:70:8C:D7:26:32:0D:A9:9B:41:07:28:98:54:5D:05:31:09:DB
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:3f:66:1a:75:cc:64:ab:fc:d3:1f:3b:f4:c9:bd:74:1f:a0:
a4:26:b9:0a:89:86:16:50:b4:d7:68:18:dd:95:d6:fc:f5:b3:
f5:c2:c8:45:5d:c1:57:9c:11:c5:8e:92:3f:87:11:7c:21:01:
ed:55:e6:0e:6a:26:c3:ff:34:73:22:5c:ee:16:55:1b:0a:ae:
f5:30:a1:37:41:11:7f:ef:b4:d9:b3:02:42:8b:41:1c:a8:08:
2e:de:f6:73:27:ef:e9:2e:5e:04:a2:1a:1c:23:76:8b:32:13:
32:85:87:c7:85:62:25:7f:e5:0a:cd:d1:18:bf:a5:61:17:c5:
3f:dd:85:4e:f4:db:f0:e9:6a:74:36:d6:34:2b:31:e5:3d:24:
e1:50:49:71:49:b7:bc:81:63:b0:09:70:b8:c3:7e:39:74:8d:
63:68:4d:a4:7b:13:df:e8:bc:73:1a:85:8b:31:3d:92:18:b2:
ca:3d:69:ae:3d:9c:37:c7:c3:57:c0:c6:e6:90:a0:3b:18:fe:
5a:8f:6b:65:ca:ad:9a:13:39:52:d6:d2:1a:c8:02:f0:7f:d4:
c7:d4:49:59:d5:7c:ae:87:a1:ae:02:3c:b4:d5:0d:34:0b:36:
39:2f:cd:6d:a8:7a:86:4d:88:d4:c7:e2:50:b1:ab:43:97:4c:
3e:0a:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:15 2025 by rpki-client