Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json)
Hash identifier: PE+wzOPmfqHPqnC02m0WHRr52DxAKS2+KRUxit72yPc=
Subject key identifier: 7B:1C:31:73:F8:A4:45:75:23:7C:8C:67:AA:25:3B:CA:DC:05:4F:F4
Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA
Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA
Certificate serial: 1CC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
Manifest number: 1CB8
Signing time: Fri 31 Jan 2025 16:10:59 +0000
Manifest this update: Fri 31 Jan 2025 16:10:58 +0000
Manifest next update: Fri 07 Feb 2025 16:10:58 +0000
Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: 6vQLZg/0/nDz50IeL6Mt9E/ULtho5KAuP+SN8XGA/hs=)
2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7362 (0x1cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA
Validity
Not Before: Jan 31 16:10:58 2025 GMT
Not After : Feb 7 16:10:58 2025 GMT
Subject: CN=679cf613-f7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:2c:8a:8e:1f:23:b0:dd:ea:ba:28:a3:60:
c1:70:02:b3:79:21:96:b2:9f:3e:8d:e1:e4:31:7e:
ec:8f:e5:c1:62:2b:fe:2b:1d:d9:c4:3d:5d:5a:ff:
7a:a9:22:65:b2:a0:2d:b3:63:2c:80:c1:0c:9f:9f:
b5:00:2f:07:7c:ae:da:31:50:6b:ae:09:c2:2b:90:
89:2c:70:36:d4:37:6a:0a:62:62:00:f8:c3:62:12:
db:46:9b:85:73:7f:86:d0:01:26:13:1b:3e:25:f6:
7b:00:c8:63:44:ba:27:32:fa:76:32:7d:8e:6c:49:
fc:cc:77:2d:1c:10:40:10:3e:af:4f:45:b1:e5:63:
5c:28:32:cb:fe:6d:76:a3:77:69:d5:ab:13:3b:41:
e0:e5:4f:44:6a:50:43:4f:d3:b9:a5:63:3a:38:d3:
f6:fe:d3:d8:ff:c3:00:a9:47:6b:92:1e:ad:9e:55:
90:ff:92:28:05:08:70:bf:5b:c5:0d:51:f7:4a:5b:
f2:9a:a1:9c:4b:51:a2:f2:87:b8:2f:12:61:9f:47:
f8:89:52:7f:7c:5e:65:c6:57:c5:c4:08:59:ad:44:
26:5f:f7:17:88:36:5c:70:37:83:97:09:f7:cc:91:
53:41:0e:60:45:5a:fa:f0:5f:65:5a:69:9b:26:42:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:31:73:F8:A4:45:75:23:7C:8C:67:AA:25:3B:CA:DC:05:4F:F4
X509v3 Authority Key Identifier:
keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:45:39:f5:54:b9:95:32:53:a8:c0:16:ef:91:18:01:7d:47:
56:c0:e1:1e:12:06:c1:43:d8:84:b3:f6:81:74:76:bd:a0:97:
9e:bc:0b:98:93:b8:69:04:73:d7:be:8b:3f:49:6a:f6:84:12:
98:2d:0d:d8:f8:13:e4:a7:d3:32:3d:21:71:cb:c1:49:32:cd:
59:39:04:4b:e2:b5:a7:e1:59:45:61:77:f4:ca:8c:e3:de:1c:
1b:54:be:ec:cf:2d:75:6a:3a:b6:64:17:4d:d6:98:b4:9a:73:
dc:d0:2c:ec:63:5a:97:cf:cc:c0:81:32:22:d2:a0:7b:5c:00:
5d:5f:d4:17:e9:87:ec:f2:fa:ce:ae:e0:b1:14:f7:96:e6:c9:
ae:18:18:81:ae:07:77:ff:71:83:19:f5:75:81:94:95:b9:b3:
9a:d1:30:f3:de:07:d1:aa:75:d0:72:2a:b8:e0:2f:24:c5:d3:
10:f8:c9:ab:a2:16:53:9b:9e:cb:3a:ba:64:de:f6:0d:ad:a6:
3e:4d:b9:38:23:d8:15:5d:02:fd:a0:d1:fe:d9:d4:0d:07:4a:
24:f9:bc:b6:13:e7:6a:a6:10:94:9d:f7:66:86:56:70:5d:56:
fc:bf:15:7e:79:a3:91:d1:8f:bf:f3:e4:9d:ea:d2:f6:92:d3:
03:68:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:04 2025 by rpki-client