Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json)
Hash identifier: fc6mDPl7y16v/+OUwSPlfjs4ExicIDcAfGp0bF8lfk8=
Subject key identifier: 05:E6:F3:9A:F0:4F:2E:AB:33:A5:AA:B1:F5:BF:80:F5:42:B4:87:FA
Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
Manifest number: 0CDE
Signing time: Fri 31 Jan 2025 18:03:54 +0000
Manifest this update: Fri 31 Jan 2025 18:03:53 +0000
Manifest next update: Fri 07 Feb 2025 18:03:53 +0000
Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: aTIQGM3UAiZ5Sd4oE8BxjIZ4fZj/MDu1GNsyoEtMxYI=)
2: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: VFfqyxdTSmRGDAsrReEN4XSTEsTAqCMGdU7ARvjjS+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Validity
Not Before: Jan 31 18:03:53 2025 GMT
Not After : Feb 7 18:03:53 2025 GMT
Subject: CN=679d108a-91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:d4:b2:08:8c:48:00:48:96:b9:00:53:a9:
7c:e2:0c:ca:41:f0:e2:c1:de:d0:d4:38:dd:a7:f0:
90:25:68:df:98:e3:3d:35:5b:ac:1f:3a:c8:b1:ad:
85:30:fc:ce:37:ad:b0:4b:06:45:18:39:65:fb:43:
03:a2:76:06:5e:c4:5d:71:ca:24:d1:9b:0f:f3:d7:
c5:cb:21:65:3d:58:7c:79:c0:c3:3f:20:89:32:39:
a8:6f:c4:3a:e5:c1:33:94:0e:39:a7:8b:35:ee:7f:
fd:a3:af:f6:e1:3f:19:8f:8e:87:59:2f:d9:10:9a:
67:60:82:f3:e1:90:4b:a9:0c:fd:2e:40:a3:38:2c:
ac:cf:49:21:ac:59:e4:fd:53:d3:5f:8d:41:6e:09:
91:8d:4f:a5:a8:e2:0c:75:46:73:4b:bc:f0:5d:1a:
5e:fc:aa:d4:5a:e0:f4:f5:cf:68:ec:4e:6a:81:cf:
4a:86:bd:13:54:48:ea:9c:41:bc:c9:7f:9c:1a:b6:
61:5d:22:71:05:3e:05:2f:a3:15:fa:9d:21:9f:37:
99:71:03:bc:f2:b7:26:0c:f7:91:91:33:8d:cb:97:
2f:40:e9:77:4f:91:a7:1d:94:80:43:59:fc:cf:88:
d4:0d:b5:10:37:30:96:c6:67:d4:ca:98:7f:6b:af:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E6:F3:9A:F0:4F:2E:AB:33:A5:AA:B1:F5:BF:80:F5:42:B4:87:FA
X509v3 Authority Key Identifier:
keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:88:51:f1:1c:9e:46:00:3d:26:86:37:d9:f7:0a:0b:b9:f7:
38:69:61:37:d4:74:3d:0d:15:64:62:e3:e6:46:59:e0:1b:c4:
5c:2a:0a:8f:6c:90:59:91:ae:4e:ee:74:88:88:21:fd:1f:f7:
d9:74:fb:b7:3f:3a:c6:ae:de:73:67:26:e6:b0:8b:9e:30:b5:
e6:e4:24:28:27:e3:8a:0e:3d:79:b0:e1:ad:b8:86:26:ac:50:
d0:a6:28:4d:11:f0:22:f3:f9:ae:d2:76:3d:49:e9:79:d3:09:
8c:10:a0:aa:4b:36:ac:d6:a1:9d:45:ca:1a:82:33:a5:6b:9a:
7f:25:1b:83:aa:44:39:42:1c:4c:5d:d0:16:4d:f3:72:15:b4:
f5:c0:7c:72:ba:b0:be:80:06:17:c8:ef:69:1e:82:35:2f:56:
7b:25:f0:2b:5f:a6:e0:8f:04:c5:03:57:3f:ae:ad:eb:3e:e4:
f5:87:ea:c2:6a:d2:c4:db:6a:65:10:49:95:8a:03:9c:40:8e:
4b:ed:e0:ff:d0:b6:30:7c:13:80:31:68:63:ec:83:37:12:91:
ca:fd:1d:ac:56:a2:c8:5d:ae:4e:5d:22:71:61:a8:f6:92:b3:
aa:c7:0d:9b:58:54:7f:a1:0a:3d:e5:44:d4:4a:42:a2:6f:66:
41:41:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:03 2025 by rpki-client