Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft
File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json)
Hash identifier: xL2J7gMah182m5w/4UVGi1THmpBxLZeqXfVHYcbL4mo=
Subject key identifier: 00:F0:3F:A3:A9:78:70:65:A2:F1:8F:13:C1:58:DE:2B:35:6F:D1:9F
Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B
Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft
Manifest number: 015D
Signing time: Fri 31 Jan 2025 03:18:43 +0000
Manifest this update: Fri 31 Jan 2025 03:18:42 +0000
Manifest next update: Fri 07 Feb 2025 03:18:42 +0000
Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: YRv4nMN+Qtwb9STS6OBhp+L+kGO7SRh3giqRLAbhf68=)
2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=)
3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B
Validity
Not Before: Jan 31 03:18:42 2025 GMT
Not After : Feb 7 03:18:42 2025 GMT
Subject: CN=679c4112-0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:3d:df:e1:a5:af:4c:c5:00:cc:2e:ed:56:
5d:52:c7:9c:cf:51:b3:9b:af:94:1b:8a:57:fd:ff:
c3:d2:ff:c4:4d:42:5b:ca:3d:4d:6d:f2:0c:65:9e:
16:9b:d2:e9:11:62:44:63:9e:9d:51:63:8f:7b:7f:
80:10:88:df:55:bf:f0:61:ab:b4:ea:94:74:f4:0e:
8b:b0:1a:89:63:15:84:de:00:dc:39:d4:e2:bd:56:
40:54:c3:b6:b7:bf:62:eb:e8:17:4f:80:7e:75:5e:
84:1b:30:f9:c9:1b:63:e0:7f:7d:87:2a:9c:10:b0:
06:40:1f:c9:50:8b:cf:65:b5:dd:5c:c9:2b:c3:0e:
40:06:88:37:9f:bc:0b:fd:39:23:ad:f7:21:81:0c:
af:8d:1e:40:bf:bf:c0:6c:30:3f:17:00:f4:0e:f3:
b5:a3:be:03:32:93:26:4a:d4:ed:67:f5:23:5b:c5:
43:37:ab:42:dd:ca:26:1a:9f:42:e9:fd:c1:a5:3a:
c2:f2:36:3d:67:52:2d:64:4b:03:66:a4:62:14:a9:
4f:55:14:79:80:47:8e:bd:26:70:8e:e7:c1:ff:a0:
11:71:dd:46:0e:3c:2e:40:91:7e:75:24:ab:a2:b4:
c2:b1:64:46:9d:81:8c:41:d4:1e:ab:da:da:24:b8:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:3F:A3:A9:78:70:65:A2:F1:8F:13:C1:58:DE:2B:35:6F:D1:9F
X509v3 Authority Key Identifier:
keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b7:c7:ee:2a:a7:68:d9:f9:54:c5:66:a1:21:40:8e:ca:4a:
e4:61:5f:3f:5c:1a:4a:84:81:0c:11:04:9b:b4:bc:b0:77:83:
11:8a:56:67:18:cf:41:6b:a9:5e:4d:60:ba:8b:9c:e9:a8:ae:
18:29:76:97:06:fa:e6:79:94:9a:a8:b0:84:43:dd:c2:50:d6:
71:6c:31:f0:f7:fb:8f:d6:20:9b:51:59:d7:8d:92:de:59:0b:
04:a2:90:6e:fd:b8:1a:1f:98:82:23:1a:13:d0:98:a2:95:3e:
69:b0:59:ff:9e:b2:c6:b3:92:25:29:11:ca:1a:fe:e5:1f:6b:
35:df:d3:41:40:ea:60:b5:9e:bc:74:6c:0e:65:63:46:e9:c0:
d2:e9:a7:2c:ad:fe:f9:f0:30:64:6e:48:14:76:57:3c:df:34:
05:b1:ab:89:6b:2d:83:91:a4:a7:74:9a:44:6b:d8:52:cf:21:
f9:08:c8:d1:42:5e:54:c8:e7:5e:1b:80:30:7a:fd:7f:38:48:
13:a2:24:46:18:fa:78:cd:dc:7d:47:0a:d2:35:89:49:fe:02:
67:ec:fb:99:ad:fd:6e:cd:90:e1:2e:bf:68:79:b4:3d:3d:5a:
5c:f7:06:0b:2e:08:42:40:78:8d:c2:13:97:ce:07:47:a9:c4:
68:f8:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:04 2025 by rpki-client