Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier: EyC0WNzl/1l41gOUAzgmYOTyHkF8x5aIa0nG3AJ1GGo=
Subject key identifier: DD:BC:57:3A:AE:75:10:7B:68:9C:6B:BE:16:FB:7E:70:83:85:05:8C
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number: 011F
Signing time: Fri 31 Jan 2025 03:51:47 +0000
Manifest this update: Fri 31 Jan 2025 03:51:46 +0000
Manifest next update: Fri 07 Feb 2025 03:51:46 +0000
Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: JguXNgi7EF0AbT03OuIKBJ0eu04dCsR+5anQ/6vi/5E=)
2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: yzdUtvoOpzor1zChNyVQLX9zMFFRymcsnAxEoBSEx/I=)
3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: elBvqhAcW8Rp8ZvDkT2Cm7/DYxXxieb+iqtVjsWGJcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: Jan 31 03:51:46 2025 GMT
Not After : Feb 7 03:51:46 2025 GMT
Subject: CN=679c48d3-0890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:0d:41:02:4b:19:99:4f:d0:c1:a4:3b:43:
7b:ee:6f:64:52:af:4e:78:e7:27:e9:bc:c4:e9:e8:
e6:8b:5b:b4:67:9c:28:5a:54:c3:47:a7:35:f1:4a:
f3:57:3d:76:7e:26:75:1a:e6:c1:8b:6a:42:65:23:
00:09:e1:fe:33:0d:33:cb:91:36:f5:79:70:5d:b1:
3c:e0:d5:50:9a:3a:11:d4:56:2f:63:b0:36:7f:08:
79:a3:0c:93:3c:c8:13:2d:61:5b:d8:2f:92:11:f8:
6d:36:af:ce:66:9e:95:6f:b0:d2:ed:ee:75:83:94:
ae:09:fc:6e:bd:d1:a7:97:3b:3f:71:6c:9b:d5:31:
a5:d6:d2:28:b2:77:7e:c9:8f:55:b8:d3:18:84:82:
df:f2:f4:96:a1:c7:7e:30:2f:65:38:11:b2:f9:71:
6f:5d:f9:e4:f1:04:ed:68:52:ab:fd:56:5a:e8:f6:
5c:00:72:eb:dc:0a:c8:d2:d5:ab:76:b7:b4:8f:2a:
91:0e:a3:64:f3:b4:86:65:79:66:a1:50:44:26:2a:
87:73:d8:b4:a6:47:b4:a5:a8:72:05:b6:2d:a9:3d:
16:bb:50:e4:de:22:34:fc:7c:6c:e6:29:7d:23:0b:
7c:1b:7e:67:af:6e:50:aa:d9:63:fb:8e:1a:c6:16:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:57:3A:AE:75:10:7B:68:9C:6B:BE:16:FB:7E:70:83:85:05:8C
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:60:7c:98:77:5e:ad:ae:20:47:76:f1:bf:6e:d5:8f:b7:49:
a1:31:29:1e:52:65:39:5b:77:b7:e4:5a:5d:2b:6d:cf:1b:2c:
36:ac:04:63:48:f0:7d:25:b4:4b:a6:1b:31:ad:78:71:12:79:
70:1f:51:24:f6:e8:1a:70:66:bc:b8:2a:b4:7c:18:f3:7b:ee:
46:ee:8e:f0:6c:09:57:35:45:37:8e:20:ce:59:a0:f1:e0:db:
71:05:71:1f:46:97:71:86:e2:69:47:dc:1b:ce:c3:46:f6:0f:
d8:06:6d:91:cb:e2:64:21:be:27:d7:d6:27:dc:01:7a:69:92:
f6:18:ab:22:24:41:c8:c6:dc:df:2c:31:2b:16:2f:61:54:2f:
1a:c6:19:46:42:0e:73:c8:20:7b:19:f8:d3:5b:c0:23:eb:ad:
04:01:6d:56:43:ef:a5:18:50:b9:d9:50:ca:d1:28:09:2f:dc:
51:ad:c1:c8:17:65:25:05:a4:9e:ac:14:c4:5e:3a:7c:61:54:
7b:fb:be:7e:7d:ed:bb:75:ab:01:2f:68:e0:56:89:28:d6:dd:
b8:d0:4a:fc:2a:d7:3d:c8:f5:7d:bc:d8:11:3a:67:f5:f9:6a:
42:c2:fb:a1:01:78:f2:b1:6d:af:af:60:a2:be:35:6c:f4:34:
be:d0:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:27 2025 by rpki-client