Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json)
Hash identifier: gfpAVoQdFxR3u4XK9ImzFQOEwho0jqM7LxBj66mfz1g=
Subject key identifier: CB:AE:30:62:E9:37:C4:B2:66:00:C8:BE:E9:49:C2:49:1E:EF:A1:29
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial: 0350
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
Manifest number: 0349
Signing time: Fri 31 Jan 2025 01:06:40 +0000
Manifest this update: Fri 31 Jan 2025 01:06:39 +0000
Manifest next update: Fri 07 Feb 2025 01:06:39 +0000
Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: Q4EV5BTIIOFJz+6CHizGvs3KcF4WxnDyz50/RAoMBl4=)
2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: yfcp/+vcXd92Y/eY7SRY/CR1e0r/AdIrFespQFyYzR8=)
3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: N4dFIKbp/UkPFYHASL0V+O/a94lreYQtC/E1dslsMzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Validity
Not Before: Jan 31 01:06:39 2025 GMT
Not After : Feb 7 01:06:39 2025 GMT
Subject: CN=679c2220-fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:48:cd:10:52:ad:d6:f4:ef:10:b6:6a:57:
4e:e4:99:69:43:9a:20:a5:15:54:a6:73:f9:82:de:
3b:f7:97:9b:58:90:3f:5b:2c:83:a9:7f:26:f9:68:
84:6b:a6:d9:49:a2:b8:e6:7a:e2:76:3c:fc:c8:25:
27:1d:df:cf:21:d1:c3:b1:e9:22:a2:b3:cc:22:cb:
bf:77:b7:63:6a:da:78:87:7b:0c:57:98:c0:8c:d5:
8e:69:ee:09:ef:2c:9d:bf:de:9e:3b:bf:c1:f1:76:
d3:66:b0:7d:b0:01:da:d3:32:1b:7a:6c:eb:37:de:
74:11:2c:ca:db:05:bd:85:a6:bb:11:ed:b5:7b:43:
99:11:3c:d5:a1:05:b0:a9:5e:10:61:3b:84:12:dd:
fc:e7:fd:e7:ba:71:c1:e8:32:47:d4:22:49:44:27:
85:c2:53:7f:d1:06:0c:53:06:84:c3:aa:04:6a:47:
40:a7:27:65:f9:46:0b:f3:28:f5:9c:f5:48:27:eb:
ff:3a:9e:46:c9:34:c1:18:9a:c7:db:5c:d2:64:83:
c7:aa:be:c7:b1:88:b6:72:9a:62:e3:19:4a:33:5d:
0d:b3:ef:6f:fd:0a:0b:3a:c5:4c:c9:11:04:5a:13:
dd:1e:23:c8:d6:47:ba:73:14:36:ad:17:f4:ae:2e:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:30:62:E9:37:C4:B2:66:00:C8:BE:E9:49:C2:49:1E:EF:A1:29
X509v3 Authority Key Identifier:
keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5e:7b:34:73:63:44:bb:9b:07:7b:ca:f7:ec:a1:76:ae:d8:
64:12:1c:f9:e3:65:f0:09:64:d4:6c:a4:94:1d:70:2e:e0:3b:
b1:4a:fb:6a:cc:28:92:54:b1:ee:80:c9:d6:fe:88:fe:cc:35:
e8:33:06:98:2e:15:02:57:b5:df:1d:5e:8a:04:b5:40:1f:d3:
7f:b6:47:eb:06:0d:32:85:97:77:5f:4b:3f:3d:51:45:25:b6:
94:7f:93:8c:78:05:b4:72:6c:16:2e:f6:d3:7b:06:d8:c3:34:
36:2e:38:43:80:93:b3:c5:00:63:da:34:45:18:e2:89:1e:4b:
96:e2:84:97:f9:08:a4:2b:8e:a5:80:0d:40:7a:80:4a:da:39:
77:05:6f:4c:67:6f:89:6c:1a:04:fa:2a:9c:8a:46:5d:9b:5e:
af:68:5b:05:93:d1:c9:e4:6d:a5:c7:ee:1b:43:8d:86:69:05:
27:73:cb:09:53:8b:0c:86:07:9b:3f:fd:33:57:a1:ce:14:74:
0d:89:00:7f:ee:89:a6:36:e0:30:7d:3d:0c:0c:cc:dd:53:51:
3f:fe:a7:9d:79:f7:63:98:09:6d:14:a0:fc:fb:b6:0a:9f:ac:
ef:df:31:31:f9:c5:49:92:12:da:45:39:6e:61:3b:1d:2d:eb:
0d:be:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:18 2025 by rpki-client