Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json)
Hash identifier: 1WKYMbG0yguOtQ6/qYzsqvQv/JKNESd03YHUYxJSWMQ=
Subject key identifier: 3F:55:BD:C9:B3:6C:A9:B6:48:DE:92:C1:30:FD:53:75:44:CA:3F:0D
Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148
Certificate serial: 3450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
Manifest number: 344B
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Fri 07 Feb 2025 15:00:27 +0000
Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: psc+PxyBP+vNk+TU5NFb5H86SoUDXDBBB8PL9cppLEw=)
2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: zCjW74BNINc4Oe8jK6oFEsAHN/HQVGCYlLcNtLolElw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13392 (0x3450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 7 15:00:27 2025 GMT
Subject: CN=679ce58b-d854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:18:74:84:34:6c:e3:da:96:13:35:b6:46:
e4:97:cf:e2:ca:48:9b:a1:9e:6e:bb:7b:58:01:97:
1a:fc:7f:91:df:0d:e5:37:f4:32:9c:c2:1d:2b:fd:
7b:ae:23:0c:f4:58:49:5e:00:ee:30:44:ba:34:0a:
0e:84:17:ad:56:ef:e7:fe:fc:a0:ca:89:78:51:f9:
0c:22:a5:11:f7:17:de:3a:94:6a:3b:1b:a5:8b:83:
97:f5:a4:c6:96:64:66:bd:02:47:db:ac:36:0c:0d:
56:f6:72:f9:e5:0d:f7:08:ce:fa:b6:be:e5:0c:43:
8f:0e:62:10:54:24:7e:e0:50:29:22:ab:65:fc:a2:
29:61:fd:66:c5:c1:02:b9:f2:8e:12:79:ab:58:c3:
52:1f:74:4c:89:eb:e9:d9:c8:f9:cb:0d:47:87:88:
80:f7:11:56:87:2d:9d:37:94:f5:16:59:02:09:57:
77:4c:8a:c3:83:9a:5b:15:4a:84:f9:ff:d6:e0:38:
43:33:4f:fa:c5:27:9c:14:7f:65:90:06:96:76:bf:
07:5d:cc:bd:06:9b:a2:8e:7d:fa:5b:d2:b3:b7:a2:
ac:73:a7:6b:5c:68:01:d6:b4:d5:f0:fd:f4:cf:e6:
01:96:f3:7b:9d:14:c4:2e:91:a0:48:f6:f0:cd:c1:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:BD:C9:B3:6C:A9:B6:48:DE:92:C1:30:FD:53:75:44:CA:3F:0D
X509v3 Authority Key Identifier:
keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:e3:6c:27:38:73:c7:66:2a:9d:cc:9d:68:7e:7a:57:a9:
86:d6:cf:9d:73:9b:fb:c8:cd:4a:f0:52:6b:40:b1:68:ff:c0:
47:43:aa:07:fe:60:cb:dc:40:69:72:f5:ac:a8:c6:d8:6d:12:
02:0d:80:43:01:90:f0:f4:fd:55:66:ea:ed:40:33:9b:fc:10:
ea:bc:05:62:27:ca:f1:a3:a0:b4:60:83:bf:b1:a2:3d:df:4e:
a6:c7:02:a3:da:e8:67:3d:bc:8f:41:b6:41:63:90:e6:b1:c5:
d3:2d:0c:fb:c5:39:16:a4:0c:0a:d1:ec:49:ac:6b:30:6a:d2:
fa:80:b7:1f:0f:4e:3d:2a:91:a3:7d:90:cc:b0:cc:7e:28:50:
04:b8:fe:6f:1d:44:d3:b5:48:83:ed:b5:40:2b:96:5b:fb:1a:
56:9b:c9:f7:0a:36:c1:cf:f6:62:9c:00:3b:23:4b:97:4c:2e:
c5:fe:55:da:ab:4e:69:2e:d5:76:25:5f:ca:7f:ea:0a:9b:40:
07:01:26:db:9f:0f:8e:e3:c0:3a:ff:49:a0:48:aa:27:28:9f:
6f:d3:2e:49:56:76:6b:aa:5b:9f:b3:09:fe:8e:55:cb:30:15:
5c:bf:d7:0f:6d:15:1c:db:99:73:7c:59:3f:58:c8:43:83:94:
e4:f8:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:37 2025 by rpki-client