Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier: 7LbLmV/0YN/Q0ZyU8SiH483/e2Pn1e/gFywz+4Ib3mg=
Subject key identifier: 53:6E:4D:B1:CC:BC:0F:1A:CB:FF:8E:7E:22:86:9B:8D:06:AB:13:EA
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial: 0DC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number: 0DAB
Signing time: Fri 31 Jan 2025 17:54:14 +0000
Manifest this update: Fri 31 Jan 2025 17:54:14 +0000
Manifest next update: Fri 07 Feb 2025 17:54:14 +0000
Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: SuANHm/9ZBS9EN6PVJZYiMShUXY/9RrZpqAUsi/klLg=)
2: 2077E380EBDF11EBB7533A15C4F9AE02.roa (hash: jmduHrEVx2jA5+v8I02I29sAUSxm3Fng3EnV4y1cIS0=)
3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: QoxSmZFkmxLXEXsdlg7AEo5bS3bmundbYECPlf6m84c=)
4: EA0E36083C3311EE8B808E55C4F9AE02.roa (hash: LZDAiQsOKeiD+R2CnsfcyiBMBIzfOs3eZv46xJYDJ3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Validity
Not Before: Jan 31 17:54:14 2025 GMT
Not After : Feb 7 17:54:14 2025 GMT
Subject: CN=679d0e46-e1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:d2:b2:53:7a:61:15:f9:29:73:99:8c:55:
e0:f8:52:84:7a:a6:57:6b:4c:e1:4d:ff:ca:c1:74:
7f:13:7d:8e:cc:36:18:73:1c:a1:be:64:f2:fb:cb:
d0:16:db:ec:70:e3:e4:ed:7b:60:d3:1b:f3:8b:68:
b0:dd:ae:15:2b:78:6a:8d:ed:a3:7e:64:b9:9c:47:
5e:af:92:aa:5a:9a:d1:4c:8b:1f:12:88:d3:1d:f4:
5a:61:88:a4:bd:71:ad:14:7d:d1:26:93:5f:0c:3e:
a8:c2:d6:5b:3d:b8:60:00:b4:fd:9e:29:12:4c:8f:
75:de:b3:c1:df:17:41:64:43:cb:79:1a:01:29:c1:
fc:0e:af:18:7c:a0:d6:f7:01:04:6b:b4:12:f7:6e:
7f:8b:50:c5:61:6a:34:fa:1e:65:67:c9:7a:cd:10:
d9:16:36:80:38:f0:54:68:fa:eb:13:eb:4d:a3:f9:
87:4b:55:30:b5:72:c9:5c:1c:80:e6:ef:0d:f4:9c:
79:6e:b1:f5:2b:f7:ee:95:64:d8:11:b2:28:91:66:
7a:2c:3e:a7:b8:76:2d:b1:d0:68:40:55:be:34:38:
43:dd:20:9a:a0:a4:fe:d4:bd:63:04:75:a4:24:69:
31:a1:71:aa:d5:63:e5:3f:fb:b1:9a:61:63:7f:bc:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:4D:B1:CC:BC:0F:1A:CB:FF:8E:7E:22:86:9B:8D:06:AB:13:EA
X509v3 Authority Key Identifier:
keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:cb:31:73:97:7a:39:b0:90:ca:36:0c:14:06:62:2b:6e:
cd:f9:3b:33:b7:30:1d:82:80:8f:b9:d2:8c:fe:e2:f7:b5:5d:
ee:fb:14:ed:4d:64:75:fa:cc:4e:d2:a6:4a:79:e0:28:9e:15:
7a:c9:1a:09:f6:f2:a7:d3:11:38:dc:d5:dc:07:5b:11:4f:1e:
43:9c:90:b7:19:d0:24:43:ad:32:78:a1:88:16:2a:be:37:21:
30:f0:81:fb:15:f7:d9:19:13:38:7f:ba:16:e1:10:26:d0:16:
42:92:ae:76:12:58:3f:8e:58:29:5e:a0:cd:7e:66:57:a3:86:
bc:6d:2f:a7:69:9b:26:77:11:24:00:d8:b3:c8:6b:39:23:97:
32:c2:10:6a:91:a8:f4:0f:28:f5:a8:5a:e0:33:4b:b9:93:b1:
18:2a:4e:ce:eb:dc:73:c5:b4:63:eb:e1:43:15:95:eb:f0:1f:
95:1f:62:a2:18:a3:95:c2:9c:47:fa:9f:f7:15:37:80:82:39:
16:f7:89:f9:cf:12:f0:ba:e0:df:43:d3:17:48:57:7e:a4:a2:
60:6c:71:99:98:1a:15:2a:fd:3c:40:70:db:55:61:45:5a:cc:
5b:9a:e3:04:a7:11:7a:4a:3b:4f:5a:c4:85:ed:a8:0b:5f:8f:
bf:ce:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:08 2025 by rpki-client