Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier: pFXmBANVvjZZJxSYb1tg4yqdQdVZdORRSioXdaQStmE=
Subject key identifier: 2F:23:BF:5E:1F:F8:3C:D2:52:EF:00:C2:43:F3:D2:B1:F3:8C:06:83
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial: 2FAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number: 2F88
Signing time: Fri 31 Jan 2025 15:30:29 +0000
Manifest this update: Fri 31 Jan 2025 15:30:29 +0000
Manifest next update: Fri 07 Feb 2025 15:30:29 +0000
Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: NtZM0wsR5FvmW4e0EskD+4RVJmPyTklkcwGCPYYkF3M=)
2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: E2NZXpYraOPVv0cpnUWbQpkzMNGT1LYi52LyYrBbmwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12204 (0x2fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Validity
Not Before: Jan 31 15:30:29 2025 GMT
Not After : Feb 7 15:30:29 2025 GMT
Subject: CN=679cec95-3736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:d2:70:68:5a:03:2b:d2:98:53:f9:4c:cf:
f2:b2:fb:aa:cd:ee:cf:21:21:e9:35:0d:64:c2:1d:
3c:64:d4:56:6a:e6:4f:77:81:f4:99:9c:6a:9c:df:
e4:73:0f:ea:a5:f2:26:2f:38:84:86:8a:d5:c0:eb:
16:88:b2:7d:48:f3:28:c0:ff:9c:a1:81:1e:54:67:
d9:86:81:1b:ef:98:a1:62:c0:44:71:2d:8e:51:3a:
88:49:a7:43:fe:b5:f5:40:73:08:e6:63:0c:1d:72:
5b:ba:75:98:34:8d:19:d6:2b:d9:9e:1e:51:34:7a:
e4:16:bd:de:c6:67:87:04:ca:85:34:74:1d:5e:47:
8e:d7:5f:db:56:fd:f0:82:cb:53:16:08:ac:71:43:
08:7f:d7:7c:58:45:fb:f5:93:d9:65:9a:09:2c:21:
9a:ef:b0:1d:9b:65:b3:5e:ca:24:77:43:9f:57:7c:
31:c5:0e:43:32:06:57:90:40:cc:4d:a4:2f:08:65:
67:98:47:f1:6d:e6:2a:f0:ba:33:4b:28:53:8b:3b:
8c:55:c2:35:b7:35:6b:a4:e9:0d:f5:b7:ed:a7:1a:
42:4c:c7:eb:0a:c2:ec:c3:b7:cc:16:9f:d5:47:5a:
1e:68:b4:1b:6c:78:56:0e:8d:f6:d0:ac:5e:d7:f2:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:BF:5E:1F:F8:3C:D2:52:EF:00:C2:43:F3:D2:B1:F3:8C:06:83
X509v3 Authority Key Identifier:
keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:ec:8d:75:e0:0e:cf:52:d2:19:34:0a:a4:be:50:5a:87:
fd:49:32:fc:50:e6:a8:91:98:95:e9:f4:36:0b:0e:84:a6:3a:
15:1e:3b:e0:65:04:69:69:9f:d2:74:14:86:a9:7f:84:13:09:
07:aa:fe:34:46:df:ad:2a:dc:c2:08:16:a9:40:ce:c4:e8:d9:
19:52:98:31:ed:05:a8:19:f1:32:85:2a:78:f7:b7:6c:62:b0:
cf:5e:cd:47:96:9c:75:ed:7f:3c:cb:ea:a3:09:aa:43:02:2c:
0b:6a:c3:cd:7c:83:73:a6:77:86:de:6a:6e:83:de:00:7b:03:
13:83:2b:19:7c:9e:d9:5c:1d:13:1f:68:a2:c2:7f:5d:03:7c:
15:4e:df:bf:e9:10:d4:ea:fd:19:1d:a3:b1:45:8a:0c:e8:2c:
39:b5:f1:d0:15:6e:f4:7e:1b:ba:09:37:30:d6:58:f5:da:a5:
87:90:47:54:d7:b4:cb:35:26:cc:58:08:9c:cb:3b:d9:a0:90:
e5:49:e1:f7:ec:bc:2f:9f:77:bc:83:1a:c4:e6:4c:fd:63:eb:
91:fc:da:eb:62:c9:98:71:ef:e8:36:8c:f3:48:a0:dc:9b:3d:
34:f8:5c:9e:0d:b2:f0:b2:8f:cc:82:6e:c8:07:23:39:ba:51:
a6:1f:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:00 2025 by rpki-client