Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier: iRBaBrM7qCYk/8WAan8aqDguuRQOWu8Jw/e+bDkTXu8=
Subject key identifier: A2:C1:C4:A2:48:73:AC:6C:1E:14:48:C4:9D:5C:B6:F7:26:FF:13:F4
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial: 148D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number: 1484
Signing time: Fri 31 Jan 2025 16:52:29 +0000
Manifest this update: Fri 31 Jan 2025 16:52:29 +0000
Manifest next update: Fri 07 Feb 2025 16:52:29 +0000
Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: Q91nVwSE0ap6/Z+OcS05bpFjROY0kMrXkx5/JtcfN8I=)
2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: Kpm1VRvUmk2GXeAxfKW1BgX1xl9xSgMJHiJXTqUoDIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5261 (0x148d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Validity
Not Before: Jan 31 16:52:29 2025 GMT
Not After : Feb 7 16:52:29 2025 GMT
Subject: CN=679cffcd-452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:31:f9:b5:b0:97:f0:f4:50:73:77:19:a5:
d1:4c:5e:01:da:d4:9b:a6:67:9c:21:e9:57:42:b3:
7b:fc:10:68:91:a6:68:b7:e3:e7:0c:57:63:ef:90:
69:41:9d:50:e1:bd:08:ec:10:63:b1:5c:4a:63:8b:
25:fa:2c:8b:f0:0e:74:86:0d:b5:2b:3c:a4:2c:c9:
01:f4:08:a0:3f:97:29:cb:29:87:db:5e:45:f0:35:
de:33:12:a5:9c:80:b5:43:5f:39:14:f8:79:c6:18:
8d:b7:3d:61:8e:10:11:a0:23:70:ff:02:b2:ec:13:
b8:73:73:3f:3e:31:3c:d6:c7:fe:70:fc:a7:8f:97:
17:56:81:b3:8a:ac:fc:44:f0:80:19:5e:dd:61:d2:
f6:d5:87:d0:2c:3b:67:0c:84:5b:d6:1a:16:7b:fe:
3e:09:0d:86:ad:7a:e2:64:15:f2:d5:3b:9c:b7:69:
ef:80:07:cb:b6:88:75:98:4f:01:82:3d:b0:20:7c:
4b:28:f4:0a:09:dd:b0:34:b4:db:45:51:02:26:11:
4a:4d:e2:6b:b1:de:e3:a6:f0:12:a4:5d:8f:60:b0:
24:9b:77:58:d6:27:db:d1:6d:88:91:43:2d:f6:a0:
78:5d:e1:fb:7b:42:74:bf:5e:3d:fb:96:f7:48:bb:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C1:C4:A2:48:73:AC:6C:1E:14:48:C4:9D:5C:B6:F7:26:FF:13:F4
X509v3 Authority Key Identifier:
keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:54:f2:8e:77:c0:a9:ab:5d:ef:05:22:a4:4b:80:e8:8b:
c7:22:a8:af:fc:19:11:f6:b4:3c:33:59:2d:09:f3:e0:93:8a:
a1:0a:53:6a:8d:98:76:d2:b2:67:89:01:cf:f1:98:50:04:b4:
ba:b0:e0:42:8c:17:6f:4d:73:dd:d8:aa:32:b3:f2:2c:4a:bb:
5c:c1:16:72:af:0d:6e:9a:f1:51:4d:8d:fc:27:5d:d5:c4:de:
13:db:08:80:00:d1:96:9c:85:25:ed:6e:95:d0:71:89:21:d0:
8b:61:8b:10:e8:df:66:7a:96:17:77:e4:e3:b9:b1:49:37:09:
56:16:b6:04:fc:9a:37:2c:e4:fa:7a:76:07:d8:14:24:c5:d1:
d8:ec:30:09:4b:76:a1:68:1a:ad:79:fe:3d:41:56:d3:df:3b:
87:4a:20:41:9e:15:e7:b3:6d:65:28:b5:83:a6:89:ea:ab:44:
e9:b6:8c:c6:76:54:07:fc:f3:74:c6:77:8d:29:3e:ae:14:7c:
0b:60:f7:14:e1:e9:90:23:0f:e2:bc:91:6d:fc:80:18:dd:12:
6f:38:55:c8:1d:27:76:96:62:07:fa:3e:4f:06:49:f5:f6:7a:
9a:d6:67:bc:c6:43:e4:61:23:e8:2a:da:39:d6:e3:ab:e6:80:
49:5d:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:55 2025 by rpki-client