Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json)
Hash identifier: SjlMyWe8OFACXZL1LiPuZh0LFgIH/uPS9DPwo/kzjoI=
Subject key identifier: 21:F5:40:69:40:84:91:6A:CA:46:8A:E6:4B:1D:96:99:C4:42:F9:85
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial: 066F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
Manifest number: 0663
Signing time: Thu 30 Jan 2025 22:25:54 +0000
Manifest this update: Thu 30 Jan 2025 22:25:54 +0000
Manifest next update: Thu 06 Feb 2025 22:25:54 +0000
Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: cQkjKyiFqXwX26nS+F0whWLmT5fxOeiKwwtbbp9faOs=)
2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: bUEFcWWEthH2dGpW3Xt9iTlsxlX2KvsaSYzX/E7H+u0=)
3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: fNsbv4N3JzHNbFquq5S7j59gDujh4p1pSaR5Q8JvdKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Validity
Not Before: Jan 30 22:25:54 2025 GMT
Not After : Feb 6 22:25:54 2025 GMT
Subject: CN=679bfc72-d98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:18:7f:56:e0:93:b9:5d:54:3e:75:22:9c:
df:1e:c0:de:fc:f3:cc:58:10:56:7d:e9:fc:e4:a8:
c4:76:42:8b:39:f6:2a:d6:26:40:b1:ca:d0:7e:be:
0f:ba:3e:8f:ce:4e:d0:fc:a1:43:b6:1f:0d:1b:30:
43:f0:d0:12:5d:ad:1a:2a:44:70:ab:af:62:96:d8:
da:7a:c0:08:8a:85:92:bb:3d:7c:6d:7d:0f:0a:ad:
ec:cb:56:57:13:41:a0:f5:78:49:f0:a7:0d:7f:1b:
5a:98:e7:fb:46:df:13:ea:dc:89:7c:7e:26:c4:3b:
c9:2b:86:e5:e0:ca:1a:2f:38:87:32:52:ad:56:c6:
25:01:ba:13:75:e1:80:f1:33:89:6c:b8:b6:62:9e:
ed:e4:45:62:61:74:54:20:19:29:38:2b:7f:d8:bd:
be:2d:d1:a5:f3:7e:13:59:0a:b8:3c:33:ea:68:92:
c1:51:4a:39:f5:d5:52:65:cd:2e:06:c3:93:7e:ad:
cc:14:5f:7c:cf:f7:b2:80:af:8a:42:3d:b8:7d:1e:
05:9d:4d:ff:83:bd:79:13:1e:54:95:62:ce:34:cf:
5d:5a:3a:a9:6c:2c:82:a1:01:cd:52:f3:cf:a6:ce:
76:99:50:f6:85:1a:c2:62:b3:c0:21:a3:c8:ed:85:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:40:69:40:84:91:6A:CA:46:8A:E6:4B:1D:96:99:C4:42:F9:85
X509v3 Authority Key Identifier:
keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:0d:f9:fa:2b:dc:f6:cd:e8:66:15:35:19:a0:3a:85:dc:74:
b3:bf:bd:f9:28:72:ad:3b:7b:26:82:42:c9:4c:35:05:5d:c0:
74:04:d6:0c:4f:62:20:00:b7:0b:f2:d3:cc:b3:77:f1:e3:7a:
fb:77:4a:b8:10:bf:f8:d0:70:6e:24:d5:64:ea:f5:df:18:31:
1b:23:5c:7a:f7:86:5f:6f:f8:68:e8:2b:4a:a0:f6:49:10:e2:
b2:a1:f4:b5:43:8b:23:89:71:97:af:80:ca:da:2b:b9:e8:c2:
a6:b3:1b:a0:07:e3:84:af:0e:ac:20:7e:ca:dd:8b:5c:a5:1a:
af:99:02:b6:6a:2c:e3:bd:58:85:0e:99:61:3c:3f:1d:bc:9e:
0a:45:17:b7:6d:f2:30:43:5a:de:0c:ac:74:e6:83:5a:dd:84:
94:af:97:24:78:a0:ed:08:34:3b:07:2d:0f:0f:04:4e:d2:7c:
85:92:b2:b2:80:87:e0:71:f9:48:d7:28:7c:62:0c:78:89:89:
49:78:13:24:6b:83:64:bb:4c:39:04:18:13:b4:f3:14:5d:2a:
89:1a:6f:f9:37:2d:29:09:12:89:59:46:7a:9d:a8:d2:af:7b:
01:dd:5d:1e:79:5a:94:37:17:b0:47:31:d5:58:1c:b6:19:e7:
a7:df:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:24:11 2025 by rpki-client