Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
File: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft (raw, json)
Hash identifier: O0EmdEZYpp1Wy+NPUvp/hcUZdCJ4L4B1s/6G+ttTJjk=
Subject key identifier: A1:73:69:D6:06:C7:38:8D:EE:B8:50:CC:36:F8:C4:F3:48:8B:E6:6E
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
Manifest number: 0234
Signing time: Fri 31 Jan 2025 02:00:57 +0000
Manifest this update: Fri 31 Jan 2025 02:00:57 +0000
Manifest next update: Fri 07 Feb 2025 02:00:57 +0000
Files and hashes: 1: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl (hash: ikzasUbMeERSXxLEq84nWpra59BHSAL8wxxDshs4G1o=)
2: 2541D62A7F9811ED93508538C4F9AE02.roa (hash: FUd/qskXH7I3VsZeo9p50JOxxkxMPP4+8p2jo1T6M4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Validity
Not Before: Jan 31 02:00:57 2025 GMT
Not After : Feb 7 02:00:57 2025 GMT
Subject: CN=679c2ed9-565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:77:01:37:e1:f2:13:ab:b3:b3:64:a4:f9:
2a:38:24:26:62:c8:77:14:cb:94:db:7f:91:a7:c7:
d7:0b:a2:1e:6e:22:a9:02:a8:4b:ae:b8:8c:e6:de:
bd:a4:93:7f:bd:7c:b1:41:4b:9b:2b:df:e7:2d:63:
17:d3:cb:21:f0:66:28:a2:26:69:ef:65:b6:09:b5:
76:53:ca:ae:26:d2:a4:3c:c4:e2:13:8e:17:ca:40:
f6:f1:bb:66:e7:20:90:33:04:6e:aa:5a:e8:26:73:
ac:6c:bd:b2:54:fd:16:55:16:15:fc:b4:3a:49:03:
ef:d9:b1:39:64:af:c7:9c:7b:3e:df:69:e6:0c:4c:
61:4d:d6:7f:d2:6b:1d:26:6b:08:da:1c:4f:fe:28:
b4:70:4f:2a:c4:55:d5:52:de:37:02:de:7a:56:e6:
80:c9:83:cf:8f:ca:47:f2:f1:06:51:4c:9a:82:7e:
cf:f1:6b:7b:32:13:f9:be:db:00:46:f3:a2:b1:b4:
73:87:d4:2f:fc:46:b0:18:da:f3:e2:46:eb:db:3f:
ce:53:2e:27:f2:93:06:c5:75:d3:28:09:9a:8f:0e:
00:79:0d:1e:96:1f:2b:cd:47:ca:1b:a4:67:07:2a:
c2:28:22:c2:78:cf:da:77:dd:10:ac:4f:3d:23:cc:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:69:D6:06:C7:38:8D:EE:B8:50:CC:36:F8:C4:F3:48:8B:E6:6E
X509v3 Authority Key Identifier:
keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:52:e0:7f:24:05:84:67:d1:f1:d7:21:d1:70:c6:e5:b9:e4:
8a:62:4c:8d:90:a1:2c:ce:79:9b:b8:86:cf:55:6a:41:75:ba:
56:30:4f:3a:0b:84:60:72:72:ad:46:e7:68:20:92:f9:b6:6c:
d5:4f:ef:ac:35:62:10:f7:82:b1:41:8d:94:5f:3a:15:60:15:
08:d2:3c:c2:04:fd:2f:f8:74:a4:0c:8c:dd:7f:a3:79:8c:16:
54:01:76:50:01:15:59:54:4e:48:85:e1:0f:a4:14:8f:7e:9c:
1f:2e:1b:ea:d3:be:10:ae:c0:c2:91:f5:b7:d3:3a:66:a3:aa:
72:43:66:d5:de:05:e4:4d:b9:43:30:48:5b:41:5b:aa:42:70:
69:d7:e4:b1:cb:2a:7c:a8:d7:7a:b6:4a:2e:39:3a:bb:b5:e6:
ab:88:67:db:cf:bb:72:96:b1:84:73:82:00:42:68:2d:7a:73:
5e:4d:58:8f:d8:d6:49:5f:b0:3f:44:7e:f0:6e:62:89:1d:f7:
27:8d:ff:36:42:42:c2:a1:3d:84:5b:9c:b6:d1:77:d5:ff:ad:
b9:74:01:1e:55:f1:e7:d9:ed:fe:7f:c4:fd:9b:ce:fc:40:b2:
83:66:d4:3f:63:a2:6e:fd:f5:93:19:07:4a:e4:7b:d2:14:df:
77:d9:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:02 2025 by rpki-client