Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier: /XJVig9CcS/GwW7aoeq5SAyXc8EfQF76Km4zPOLN9/s=
Subject key identifier: 85:E3:92:C5:EC:BC:CF:AA:D3:A6:39:1A:3D:9C:C3:D6:36:EA:5B:CD
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number: 0120
Signing time: Fri 31 Jan 2025 04:02:10 +0000
Manifest this update: Fri 31 Jan 2025 04:02:09 +0000
Manifest next update: Fri 07 Feb 2025 04:02:09 +0000
Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: TQYkoYUoyv5VuQRXF0CTXHtIZCSFhq+kz3KUbv0/r7M=)
2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: RH2tA+pDkL65URt1jd9V89/t/7TTanl0u6hNZrCKG3I=)
3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g=)
4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: mR/q70Jk2CRrQySn0SCNQ9Ok1ptByPEBAf3/SOp/6zs=)
5: A16CA728B9EA11EFACF35552C4F9AE02.roa (hash: LIplw0gjYt5TLtVYJx2JRQCdxPLCfIKOl8NOlftLuUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Jan 31 04:02:09 2025 GMT
Not After : Feb 7 04:02:09 2025 GMT
Subject: CN=679c4b41-65b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:34:52:af:89:21:79:15:03:b6:e0:73:26:
77:c1:7f:02:42:cf:db:10:82:f0:94:1d:dc:86:db:
09:85:bc:8e:b3:52:25:79:2b:5d:3e:72:de:43:90:
85:ee:fb:ec:09:6a:e1:23:2b:ab:9d:5a:23:a7:4c:
e9:22:19:de:5e:7e:87:9f:0e:d2:f8:df:c0:6e:fa:
56:2c:30:6d:23:f0:6d:36:d1:d7:7d:e2:83:45:74:
72:1b:12:9c:3f:c8:c3:64:78:e6:aa:39:0e:93:6d:
5c:38:21:65:6a:1c:89:ca:c4:4c:15:48:c5:5d:e7:
6e:c5:ea:ef:41:68:42:6f:92:bc:fb:ea:c1:38:99:
91:83:bd:8d:ef:1f:0f:05:75:29:f1:2d:1b:f1:d7:
12:6d:da:bf:13:c7:ce:9b:5e:20:a0:de:da:6d:c6:
f0:fb:cf:60:55:c7:7c:87:77:84:18:ef:09:ea:1d:
01:48:85:15:5d:cf:eb:3a:b1:c2:8b:19:76:24:d3:
ae:14:07:6a:ee:9e:1c:6c:39:f9:22:3d:98:3e:6d:
89:ad:35:a9:1b:b6:a8:34:63:2c:d0:99:cb:2c:d0:
a7:5e:cb:57:2f:0a:ca:2c:e6:cf:1b:a3:dd:63:c2:
0f:92:40:15:42:31:77:68:17:c9:06:9a:46:ca:c2:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:92:C5:EC:BC:CF:AA:D3:A6:39:1A:3D:9C:C3:D6:36:EA:5B:CD
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8b:61:a7:75:5d:dd:bd:63:97:88:ad:8a:65:70:5c:fa:d6:
12:f4:5b:3a:f9:e7:34:3a:36:66:b9:35:6e:a7:e9:f6:fd:c2:
65:2b:a6:01:34:81:d2:ff:7f:e7:34:88:f9:1f:8a:de:05:fe:
5a:40:07:af:91:78:64:71:6a:84:59:f0:cd:ff:a2:28:5c:29:
fb:fc:1a:b1:bd:f5:bd:6f:ce:2b:92:e6:ef:77:64:ef:c7:bd:
e4:4f:e1:83:f2:92:ee:29:a8:b8:f9:fa:f4:37:bd:98:86:95:
54:b6:7c:85:c6:02:47:8e:56:f0:cb:d1:df:f6:23:18:87:fa:
3e:b7:05:6c:92:b4:07:a8:3e:f5:05:62:60:ab:e0:b9:0e:1c:
0b:3f:c8:91:e0:72:8e:54:42:13:07:6f:16:d7:da:8d:c2:b8:
1d:db:6e:1a:eb:61:b6:81:a9:d0:46:2b:e9:09:62:7c:17:07:
54:7c:81:37:6d:07:87:f3:e4:51:a4:9f:c0:28:40:66:2d:99:
23:16:d9:20:99:ad:12:9e:a6:61:a9:f5:27:a9:98:5e:30:5b:
55:e3:74:b7:f7:81:01:60:2c:c4:31:89:72:1d:f6:8c:39:ef:
a6:60:6c:04:84:ad:fd:46:5f:29:04:36:37:a4:52:d1:d8:f5:
cf:f3:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:30 2025 by rpki-client