Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft
File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json)
Hash identifier: d83Ta9p/elV7MH2sWJLsVG+yrd2HJZJuVh2FVckP9k8=
Subject key identifier: CE:E8:6A:2F:AC:47:4F:0D:E6:F4:AF:CD:A3:7C:6E:44:AA:24:50:B7
Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9
Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9
Certificate serial: 2C74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft
Manifest number: 2C5F
Signing time: Fri 31 Jan 2025 15:33:54 +0000
Manifest this update: Fri 31 Jan 2025 15:33:53 +0000
Manifest next update: Fri 07 Feb 2025 15:33:53 +0000
Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: BxncS0hUv22ZHCf5CDNwftD8RuwX9KKH+lPKVA/Z6gA=)
2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: skjzRKV2yiK6mRZi2jO6tjX3v0zfq/yBAWOKemHERmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11380 (0x2c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9
Validity
Not Before: Jan 31 15:33:53 2025 GMT
Not After : Feb 7 15:33:53 2025 GMT
Subject: CN=679ced61-e472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:89:59:b2:96:78:45:89:2c:38:71:f7:50:
9f:56:f1:9e:ee:d8:c0:34:3d:1d:ea:08:e4:d6:92:
a7:66:1a:da:f1:57:6c:ac:b5:a3:35:d4:6e:fc:cb:
62:c7:42:29:73:25:94:25:f3:40:71:62:7c:73:a1:
5e:95:16:8b:c4:4a:0e:dc:aa:db:91:be:ab:25:41:
6c:4b:09:b3:90:7e:9e:99:b6:d6:15:9b:d1:f8:21:
96:58:8a:25:9c:55:b6:34:2e:5a:c3:e1:06:3b:be:
ca:ad:1b:4b:2f:e0:80:1c:31:ad:d6:76:5c:c2:90:
2a:97:a0:c8:e7:68:50:a5:6b:1b:86:fa:37:ed:ca:
5d:ba:35:63:d4:f8:4f:2d:27:0d:bf:ba:cf:00:5a:
c3:a2:8b:5c:db:24:82:47:bd:8a:01:14:b3:02:cf:
2a:24:81:48:be:59:e7:52:47:85:64:d9:25:40:d3:
85:26:63:d4:ec:e6:78:2f:0c:5c:34:da:c9:f1:77:
84:5e:be:51:b4:73:0b:64:bf:33:ea:82:4c:7c:94:
17:fe:c7:12:2e:0d:e1:5d:0a:82:b2:dd:4c:98:e8:
59:0e:5c:a5:fa:1e:07:8f:2a:ea:25:ec:e8:d5:39:
8e:33:f7:1b:33:7e:2c:94:1c:06:e2:8d:37:fb:a1:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:6A:2F:AC:47:4F:0D:E6:F4:AF:CD:A3:7C:6E:44:AA:24:50:B7
X509v3 Authority Key Identifier:
keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:22:7b:b3:58:a8:59:71:bc:32:ea:10:2e:ab:02:ee:3f:
66:f8:b4:97:29:c9:34:a4:c1:35:ec:38:1c:07:6d:c3:dc:9b:
ed:72:bc:7f:67:f0:d6:09:01:39:cf:26:e1:eb:23:14:cf:78:
c8:15:69:08:f6:ae:83:d6:0f:ad:1f:9b:c1:b9:d7:8a:50:28:
c1:e7:7e:cc:22:00:f3:e4:76:2b:a3:8d:ac:1b:96:ef:a0:a5:
45:e1:f1:af:ce:50:12:c4:3c:a8:3b:ae:50:35:fa:6b:f6:24:
fb:fa:4a:ed:3f:13:5e:a7:01:27:be:27:cf:53:8d:79:05:7e:
fd:16:41:f1:16:fb:95:84:58:53:4e:db:81:3b:34:62:d1:4e:
db:c8:24:96:d9:ec:a4:35:91:ca:46:d2:b0:4a:f3:10:cc:d8:
8c:69:7c:20:5a:40:35:32:ff:b1:d0:b4:e8:71:58:48:42:33:
36:8b:4e:c4:64:ea:26:ff:80:be:32:cc:0f:53:c5:32:ae:99:
80:37:85:44:30:4a:29:e8:b6:91:c7:3d:b1:29:9b:5b:1d:0f:
bb:3c:df:8d:c6:e0:15:0b:32:50:07:f0:f2:59:53:6d:0e:c1:
db:ab:85:c3:36:a9:78:49:74:51:22:08:87:83:16:a7:57:7f:
9f:59:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:28 2025 by rpki-client