Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier: VOfLpbQnYSQpgQM9xt7USNnwoizrUJOxBNm7eQzOkhM=
Subject key identifier: 1F:7C:E2:14:87:F1:D4:49:9D:13:5A:93:E0:02:99:48:BC:80:80:EB
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial: 1109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number: 1101
Signing time: Fri 31 Jan 2025 17:17:01 +0000
Manifest this update: Fri 31 Jan 2025 17:17:00 +0000
Manifest next update: Fri 07 Feb 2025 17:17:00 +0000
Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: 9bC9GTbYNChasg/0n9VQqSJLIqLik8iB4ZI7wuJ8PvM=)
2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: gFAOXeGkc2eCk0nFhSOjgbpqiUaf2WF1/qXSm8cRYI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Validity
Not Before: Jan 31 17:17:00 2025 GMT
Not After : Feb 7 17:17:00 2025 GMT
Subject: CN=679d058c-10eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:2d:32:96:37:5e:bf:1d:e8:1f:bd:8c:f8:
f4:64:b7:4d:1c:82:f4:8c:66:76:6d:d1:ba:c3:f9:
aa:f9:6c:8a:bb:81:c2:61:62:cf:39:25:4c:45:bf:
88:e0:b8:9f:ee:21:bb:a2:d1:22:e0:19:80:4e:3b:
36:ce:4e:18:74:31:f6:03:83:23:d4:a4:45:95:65:
ca:6c:c4:e3:dc:c4:86:19:a7:b1:73:b7:8e:0a:60:
2c:75:eb:a8:22:89:79:14:e7:09:8a:13:8a:cb:91:
e4:d9:ff:12:06:0e:43:fc:b7:30:20:51:dd:7c:c4:
d1:49:b9:0c:ba:2c:45:fc:90:86:b9:ed:24:55:50:
59:98:45:76:f0:9a:22:cf:f5:1e:42:8a:7f:42:2c:
01:40:16:79:a9:f6:f7:cf:b0:69:b1:b8:e3:9f:81:
bd:13:47:1e:92:cf:0d:48:d6:b4:2c:9c:06:0e:c3:
98:ac:e1:51:6e:b8:d6:00:70:07:2a:40:e9:3b:0e:
f7:32:49:42:5b:d3:6f:77:c1:21:a4:83:87:ed:80:
ff:94:ca:09:c4:ca:08:49:5f:cc:c7:dc:15:41:e0:
b7:01:91:56:78:d8:a5:68:f6:41:ce:ef:80:e0:21:
08:32:80:f8:3f:ba:60:be:a8:dc:75:45:cf:69:4a:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:E2:14:87:F1:D4:49:9D:13:5A:93:E0:02:99:48:BC:80:80:EB
X509v3 Authority Key Identifier:
keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0e:24:64:bb:ee:e3:1b:3d:06:59:fb:7a:c9:9a:1e:18:ca:
94:82:5c:9a:03:72:49:c5:70:9a:50:8a:b0:9e:16:bd:2a:17:
73:d0:00:24:7a:d9:e8:9c:68:25:af:d8:25:df:70:73:bf:ff:
74:9f:4e:07:98:78:1e:3b:f9:93:70:04:e4:be:98:cf:de:c5:
5b:a4:d5:79:e1:82:de:9a:b2:de:64:d8:ba:15:22:26:22:9f:
73:4c:61:fd:74:31:c3:21:2e:b0:63:98:00:c7:38:bf:ee:d7:
93:42:b0:a6:14:12:13:bf:0c:44:ca:5d:24:5f:02:40:8a:a2:
a8:7f:7e:24:bf:7a:d6:99:32:90:af:44:52:1e:b0:b5:91:72:
aa:c4:b4:25:1f:94:c9:62:f0:6f:24:37:5d:08:16:1d:b0:7e:
00:fe:f0:27:c8:24:03:04:bc:90:10:99:b8:c0:be:c9:37:ef:
44:2a:92:b4:e8:a4:6c:f6:24:28:a0:13:f4:b2:77:da:b4:78:
79:8a:0d:92:5e:3f:d5:9b:d4:56:87:44:5f:97:d6:ed:d0:43:
8f:7c:28:79:15:7c:1a:a5:37:72:fa:de:59:5e:48:0c:8f:2b:
0e:e4:b8:7c:73:4a:89:fd:d3:09:d8:42:51:07:b0:df:2b:48:
7d:08:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:21 2025 by rpki-client