Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier: VRjHDEW5vMi8GiA3tOtBWTdjYMLhnm8Bnt2lO+yPPZE=
Subject key identifier: 5C:C0:9A:8D:65:AC:94:A3:3A:50:BA:FA:AF:83:02:F0:79:D0:FE:FE
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number: FF
Signing time: Fri 31 Jan 2025 04:13:24 +0000
Manifest this update: Fri 31 Jan 2025 04:13:24 +0000
Manifest next update: Fri 07 Feb 2025 04:13:24 +0000
Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: HGWDeQ8z4s56SVm6zdI3OXqLzreJKkRg7g8UPGV4qFg=)
2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: K64KDPi5IA1n4NsggDwjziZoO8m7GMY/mXI66wYP0r0=)
3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: NwxdRlAk907NKJkhCsTkOJalcdDOfSPPue8UDy8L6vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Jan 31 04:13:24 2025 GMT
Not After : Feb 7 04:13:24 2025 GMT
Subject: CN=679c4de4-8a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:0b:93:70:52:a5:4b:60:62:61:f8:36:7d:
b9:ae:87:42:9b:f3:07:c6:ea:c8:0e:7e:3e:47:d8:
af:fb:52:42:ca:64:08:b7:39:79:f3:80:4d:73:3f:
36:b2:c3:7b:84:58:71:c8:6c:fb:47:fe:08:e2:1f:
1f:b9:34:9a:f0:01:eb:de:72:bb:f3:0c:30:76:53:
f8:99:83:0e:84:6b:34:77:41:06:3d:13:38:6a:d7:
59:30:19:5a:2b:e6:52:f5:5e:dc:99:1b:aa:74:90:
2d:82:10:96:71:35:f9:67:d3:eb:9a:ac:68:ae:2a:
f4:6c:99:4d:d0:54:eb:5d:f1:f7:7e:54:69:e6:1a:
8f:4b:0e:b7:92:48:0e:c7:d3:ea:73:12:f2:c1:81:
c1:1b:a6:4a:4a:04:69:05:6c:13:9e:d2:f0:13:65:
80:5f:2b:d8:1f:2b:fa:ce:a1:89:f9:f5:ab:41:f4:
c4:ec:cb:92:a1:3b:18:70:b0:c6:04:7d:1d:32:b1:
5e:76:6b:71:59:ca:c1:0c:b9:a3:69:4a:50:55:9f:
bf:b5:9d:2b:d5:25:bb:d6:de:8a:8d:b4:7a:92:a4:
b6:0e:d4:64:28:b1:28:ff:12:f9:ba:96:bd:03:8f:
29:78:94:49:d0:d9:68:f2:47:fc:f3:fe:bb:0d:35:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:9A:8D:65:AC:94:A3:3A:50:BA:FA:AF:83:02:F0:79:D0:FE:FE
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:73:d5:3e:c9:4e:60:a8:87:cd:83:6d:07:a4:ee:1b:8a:
3a:52:c4:ea:55:13:80:83:86:9b:ee:a2:75:5b:04:27:ec:ee:
7a:a9:a4:e9:6e:ca:3b:e8:a9:a0:da:84:61:56:ad:c1:74:bc:
65:d1:6d:88:28:ef:16:7e:ff:b5:7c:7b:f6:df:2e:4c:50:ac:
5d:34:7e:52:17:f7:21:f0:bd:67:89:6c:e5:7b:b5:1e:ef:7d:
bd:12:f5:df:e2:c8:42:79:42:91:6d:29:87:82:cd:c2:2f:60:
52:78:da:0f:72:67:3a:75:3a:00:b9:dc:44:2a:88:79:14:24:
1b:01:2b:bd:11:5d:b1:76:0b:f4:c8:1d:e0:b0:c3:04:b7:8e:
54:23:e4:93:4e:a2:bf:ac:65:68:d8:4f:e5:9b:e3:bf:69:67:
e5:4a:ed:0b:b0:3d:eb:d8:6e:63:c8:63:a4:f2:f2:f7:55:b2:
c7:35:65:08:1d:2a:a2:84:a9:f6:0d:19:c9:52:3d:a9:5d:79:
d7:64:73:c9:0e:d6:16:0b:73:19:59:38:dc:8a:6e:8c:52:f7:
de:62:38:4d:08:9a:e5:67:77:49:00:c7:2b:ba:a3:6d:8b:af:
9b:7a:79:8c:f3:ff:5d:e6:2f:65:45:10:3b:ff:df:50:c3:20:
87:a5:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:00:48 2025 by rpki-client