Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json)
Hash identifier: yb0uhHamXID3khMSFOpImja5RHzbv8cs5waNU/Xp76s=
Subject key identifier: E6:97:15:5B:55:2F:FF:9B:88:1A:9A:CC:BF:06:32:92:76:69:E1:94
Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
Manifest number: 0BFE
Signing time: Fri 31 Jan 2025 18:30:07 +0000
Manifest this update: Fri 31 Jan 2025 18:30:07 +0000
Manifest next update: Fri 07 Feb 2025 18:30:07 +0000
Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: sLjFtdepiOHrdTDWWuYId/nLVp1IuNS9J0DkNXk6nwc=)
2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Validity
Not Before: Jan 31 18:30:07 2025 GMT
Not After : Feb 7 18:30:07 2025 GMT
Subject: CN=679d16af-ef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:bf:6f:a1:7a:40:7e:60:21:32:f2:47:f2:
67:49:3c:9d:45:3a:e5:c4:54:63:84:5b:a3:1a:11:
1a:59:7b:3d:33:7e:d6:28:05:f0:6e:42:e2:a6:b3:
7d:9d:43:6e:64:50:c6:d9:bd:81:99:eb:81:ff:88:
18:21:6e:73:38:d3:52:f1:e1:b3:2c:a0:ce:53:47:
a4:75:1a:78:51:7c:7d:31:84:d8:34:1d:09:07:ea:
78:0e:0b:ed:7e:84:4c:0a:f2:01:3d:57:f8:ce:ac:
66:cb:05:f5:57:a4:aa:dd:47:e9:7e:36:97:31:a6:
cf:c6:5b:96:66:ba:c0:f6:ba:d7:dd:d6:6e:b5:5a:
ad:ba:06:04:74:5e:1a:7f:04:71:43:05:cd:04:a4:
af:b4:83:99:cd:66:aa:c1:71:22:10:36:94:2d:9e:
3c:e8:3b:63:b6:24:20:49:ca:bd:0c:4b:50:d0:94:
63:46:00:80:d8:4a:15:26:5e:8d:b0:30:52:9c:65:
ac:00:b3:e6:cf:1f:ab:b9:57:bb:0f:7d:46:30:10:
ed:40:ca:de:3e:70:d4:83:b9:bd:57:d3:ed:c1:19:
50:26:e5:df:b8:d1:56:59:62:57:e1:fd:0d:0d:7e:
0c:c4:55:14:c5:0a:d4:7e:8a:2a:6e:2b:f4:ef:96:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:15:5B:55:2F:FF:9B:88:1A:9A:CC:BF:06:32:92:76:69:E1:94
X509v3 Authority Key Identifier:
keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:6a:d5:e7:45:8d:5e:fa:54:fc:e7:36:1d:bd:32:22:ed:bc:
a0:17:b2:d7:d1:4f:b1:02:c5:25:5c:b3:46:f9:2a:02:b9:37:
2b:41:09:a5:9a:a1:83:71:b0:d0:4c:8e:20:2a:5d:82:f2:ea:
11:17:93:d3:e2:cd:d4:86:b3:bd:b2:2f:41:26:8e:a0:0b:f2:
11:fd:29:ae:ba:ed:8a:a1:b0:d6:8b:9c:1f:ae:88:ca:5b:97:
a2:68:bc:55:9a:e7:ea:08:7e:66:7b:bf:4d:40:48:18:b9:c8:
c0:29:2d:2a:e1:7d:00:df:fc:6d:be:8d:1e:0e:0a:ab:22:b4:
2f:da:88:2f:02:df:8a:d4:c0:55:3e:7b:93:c0:5f:ad:5d:c0:
1e:0c:6d:eb:b7:c2:0e:17:22:0c:d4:49:24:7c:8d:2e:9e:0c:
8c:7a:56:63:8f:b6:de:8e:4c:27:18:14:43:14:66:2b:fb:90:
fc:87:a7:aa:3b:1d:38:20:d2:f8:c5:dc:5d:c2:a2:b8:77:71:
f7:6f:8e:f0:63:16:6a:b7:37:cc:34:f0:c4:21:bb:fc:09:8d:
2f:e0:9c:ba:7b:3a:d8:fc:28:8e:ff:25:ac:98:6d:40:d9:8a:
96:75:80:64:50:42:16:ac:0c:ff:9a:49:a0:b2:27:97:52:ed:
88:cd:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:54 2025 by rpki-client