Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json)
Hash identifier: 7oWYaPJM7D5BrI6YhEA1i68O7FNY/a0H76elmd2eF2s=
Subject key identifier: 61:6A:A2:2C:DA:29:FE:C5:84:71:91:3E:A7:70:4A:4E:40:AE:D2:2C
Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Certificate serial: 0B9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
Manifest number: 0B92
Signing time: Thu 30 Jan 2025 19:00:23 +0000
Manifest this update: Thu 30 Jan 2025 19:00:23 +0000
Manifest next update: Thu 06 Feb 2025 19:00:23 +0000
Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: bZKP5UApSfF2T/CxsX5XjtXIkVOX7AddNzalgdH/3Uk=)
2: 2CD5AAF8060311EBBE15EA18C4F9AE02.roa (hash: mW8L1FLDXuwnCDk5B3rFgpB45GljzNSPgwbjM/e2Wu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Validity
Not Before: Jan 30 19:00:23 2025 GMT
Not After : Feb 6 19:00:23 2025 GMT
Subject: CN=679bcc47-94b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:48:74:75:58:fc:18:da:ad:48:24:95:82:
33:1d:f1:c6:de:f8:c3:f5:7c:22:38:b3:c9:b8:9b:
60:b1:e7:74:bc:b3:eb:d8:b0:ee:79:ff:94:8b:9c:
3e:d7:c7:7d:e3:85:46:6d:d5:6f:e0:58:67:eb:16:
6c:71:b4:a9:00:77:b3:b6:b8:d4:8a:4c:62:80:a9:
20:c9:8f:6a:60:4e:e2:d4:e0:42:57:23:be:42:ce:
b1:e8:37:c4:c4:ae:99:ff:e7:ee:72:9c:b3:80:19:
f6:d7:0f:e1:e9:d1:90:45:5f:24:e9:2c:79:dc:8f:
7d:5e:b6:e5:5e:2c:12:0b:9a:27:c7:9d:e2:c0:9a:
3e:57:75:3c:69:d9:3d:56:54:ae:c7:f0:52:8f:62:
2c:86:3c:09:f7:77:1d:34:e0:0f:b1:f1:4b:e6:e3:
c3:30:23:96:dc:81:d5:af:35:d5:bc:9d:52:27:3f:
d2:f2:53:ea:0d:be:ef:b9:1d:74:b0:79:51:84:16:
b1:7c:0b:77:10:ae:c6:1e:53:47:35:82:5e:bd:e7:
fc:19:9a:ac:c9:7d:59:b2:60:3c:cc:b2:1f:26:33:
d5:ef:52:3f:44:6f:c8:dc:12:b2:f4:93:73:11:98:
0d:6b:90:eb:22:8e:d4:cb:20:56:63:ff:b2:1c:38:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:A2:2C:DA:29:FE:C5:84:71:91:3E:A7:70:4A:4E:40:AE:D2:2C
X509v3 Authority Key Identifier:
keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1b:f4:4f:18:89:b0:f7:fb:61:29:ae:39:d0:86:7f:b3:3e:
49:8e:bb:c1:4e:a9:0b:eb:8b:12:51:6b:ee:e5:1e:cb:b0:06:
98:1a:5b:c7:dd:b9:20:b6:55:c6:95:f5:c2:7f:11:3d:7c:30:
d7:21:28:cc:44:a7:9e:29:aa:5f:76:00:23:85:e6:8b:0e:5c:
b3:70:06:51:be:01:94:37:01:0c:9a:53:fa:71:c9:4f:e2:40:
ab:c2:49:f6:74:a9:79:56:30:b5:12:50:6c:73:6f:3a:83:17:
f6:ba:c3:e5:5b:58:a2:4a:67:9d:ba:13:fc:60:c3:d6:bb:33:
55:44:e6:8d:74:f5:d5:a4:00:3d:f8:c1:3a:4b:bd:84:88:06:
ab:76:89:8d:11:e9:e9:76:7f:6e:11:2b:3c:4c:ce:96:18:6d:
ae:c2:c0:57:a4:98:b5:51:f4:4c:72:61:da:68:1a:cf:0c:26:
22:6f:47:0a:7b:07:74:f5:f3:97:57:99:1e:59:cf:64:61:de:
32:9f:11:8e:15:e9:54:b1:08:ac:00:32:e9:a9:1c:db:f5:37:
bc:26:2c:27:79:c5:dc:e3:0a:89:27:83:e1:c7:16:f9:21:db:
a1:81:73:3a:b9:3c:0b:1e:dd:7b:53:39:5b:b2:b2:fa:62:40:
94:b8:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:15 2025 by rpki-client