Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json)
Hash identifier: pnyWuZKxSO7QlcbmlRX7UHjjrWuZY9jFmBipvygW6BM=
Subject key identifier: 7D:DB:61:66:75:DC:EF:80:C2:F5:16:04:DB:48:23:40:D4:51:52:E5
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Certificate serial: 0CA8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 15:36:33 +0000
Manifest this update: Fri 31 Jan 2025 15:36:33 +0000
Manifest next update: Fri 07 Feb 2025 15:36:33 +0000
Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: I/zz7cQM0WBvvQBtBddLiOPSgQgxR/gfZXsOI9HDbzo=)
2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: lu8oWRNPgJxFZ7Lozlet3TlMRukqbbGr2PrraLSuCsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3240 (0xca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Validity
Not Before: Jan 31 15:36:33 2025 GMT
Not After : Feb 7 15:36:33 2025 GMT
Subject: CN=679cee01-1713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:65:ff:3f:53:ad:d4:45:96:c2:cb:78:3b:
26:ce:d1:f9:a7:f2:4a:72:93:f5:e2:8d:61:e5:fc:
3a:bd:62:b6:db:0b:ba:f3:4f:3a:59:1d:72:24:71:
91:04:f7:7a:33:b0:bf:73:94:9f:81:f6:66:83:f2:
2c:f8:47:a7:2b:02:e6:e1:80:d2:e2:d0:ce:b0:9e:
d8:ad:d1:de:9c:54:fa:16:7e:6c:bc:05:af:3a:f5:
dc:e5:2e:64:96:16:a8:2d:f6:7f:51:8b:69:a3:69:
70:3f:33:4b:30:2b:5a:67:8d:6e:6e:62:36:19:f0:
84:a7:34:fb:7f:81:05:38:95:81:87:d6:c5:53:dd:
08:a8:d5:f7:9b:97:5e:9a:d2:f1:a0:69:5c:13:9f:
bc:77:81:64:ed:77:fe:0d:24:cb:91:9e:fd:ce:10:
4e:15:5d:89:f7:a1:1d:e0:6a:12:82:d9:d7:38:cb:
4a:72:92:36:5d:14:81:84:66:d1:aa:f4:ba:66:5c:
61:c8:95:af:24:8a:8c:4b:43:19:73:b9:25:47:30:
43:8b:ea:05:0b:5e:1f:87:f3:2b:ae:ea:f3:94:18:
00:78:35:f1:a2:96:5e:1b:11:27:a3:c2:a7:98:b4:
a6:4a:0e:03:69:9e:f1:d3:3e:af:1e:3e:15:91:ad:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:61:66:75:DC:EF:80:C2:F5:16:04:DB:48:23:40:D4:51:52:E5
X509v3 Authority Key Identifier:
keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:3d:36:62:de:c9:5f:9c:a9:27:6e:ca:2f:a9:d5:bc:db:1a:
ac:60:0a:4f:e4:93:b3:ef:b7:a9:15:da:38:f9:c0:97:ac:70:
b9:b8:8f:ba:c5:67:5b:e9:ad:b7:60:45:dc:2c:01:4f:f6:84:
a9:e7:e6:a7:8a:aa:42:c3:1a:e6:c1:40:75:4c:02:de:94:16:
f7:4c:2b:13:4a:e9:b5:56:8d:01:23:f4:3f:4e:f4:81:97:c3:
cf:d1:5a:ad:8e:08:a1:a2:bc:43:47:92:db:41:8b:7b:b2:fb:
1d:3d:cb:57:f8:95:23:69:8f:23:9e:c6:aa:5e:96:60:f9:2c:
b5:0e:d6:21:85:82:ba:0a:41:f5:25:1f:72:60:9b:ac:d8:db:
02:1a:73:db:2d:f3:25:e9:5f:bf:0f:ff:49:27:01:d1:a6:da:
9d:d0:5b:ba:75:6b:e0:f1:19:3f:7c:5d:a1:2b:ac:4f:2c:4c:
5b:d2:e6:4f:e9:02:1f:4e:2e:dd:12:ad:ae:fb:57:23:c9:7b:
2c:72:dc:e6:09:bf:7f:54:ee:d6:f2:02:12:4d:de:04:5f:cc:
5e:2b:bd:0f:44:62:1d:c8:a3:b5:c7:1b:85:2c:dd:1c:9a:c2:
41:fd:3d:43:95:a9:87:b3:ea:67:fd:c9:10:f7:20:11:0b:f5:
7a:06:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:03 2025 by rpki-client