Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier: vFnStezr7NVNAURWUs99Cj0AD5f/QPnUHkTIMKGrras=
Subject key identifier: 78:D4:FF:36:C9:48:A5:C7:6D:12:25:87:39:89:38:3E:3D:95:E5:37
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial: 0410
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 00:29:41 +0000
Manifest this update: Fri 31 Jan 2025 00:29:40 +0000
Manifest next update: Fri 07 Feb 2025 00:29:40 +0000
Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: b/O3mCAfgoIJKYTfeY0NfxwIq/fLeYDBDuwqfIs+ngI=)
2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Validity
Not Before: Jan 31 00:29:40 2025 GMT
Not After : Feb 7 00:29:40 2025 GMT
Subject: CN=679c1974-41e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:2b:c4:2a:fa:93:62:c2:02:c9:a8:8f:1e:
f6:2b:e8:35:d9:bc:92:6d:75:da:f9:84:67:ca:20:
34:c3:0c:7a:39:1f:14:bd:8a:e4:11:66:ed:80:6c:
21:ea:20:53:db:45:c3:2c:8d:7f:dc:8b:53:5b:4a:
8a:56:1a:c2:91:6d:1d:9a:98:d4:dc:1f:c3:f1:89:
72:01:4c:cf:26:83:29:e0:cf:b9:5b:71:76:93:54:
25:4e:3c:0f:a3:a7:f3:67:1d:25:fe:00:05:1f:49:
c1:bf:e4:d3:7f:76:00:aa:35:99:f5:9c:65:8a:c4:
2f:76:7d:ed:cc:1b:29:2b:f7:d8:11:d1:37:33:3e:
2a:16:a6:7b:7f:46:11:9b:34:60:c9:5f:8b:11:5f:
57:81:d2:d9:f3:30:48:3f:13:bf:0a:76:ce:ba:ac:
6f:de:a5:c9:df:26:ca:bc:e1:3b:ac:dc:78:70:54:
ec:bf:f0:5b:dd:09:7f:7e:55:b6:4a:61:5a:1e:20:
0d:03:71:32:f0:80:45:20:b6:3a:4a:7b:31:02:10:
fe:9f:d2:78:1e:4c:65:db:11:7f:07:42:e0:f8:f0:
c0:70:47:c4:1e:55:25:e1:72:27:7e:24:20:26:3d:
ea:d9:c3:f2:34:21:81:42:34:8a:d8:c2:d9:34:cf:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D4:FF:36:C9:48:A5:C7:6D:12:25:87:39:89:38:3E:3D:95:E5:37
X509v3 Authority Key Identifier:
keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2a:39:95:6d:11:67:14:56:8d:30:49:b2:81:32:f4:72:1e:
72:e7:ad:8b:6c:55:92:8d:26:18:7b:ee:1e:ee:0b:eb:5f:10:
95:ee:31:bc:4c:88:04:8d:e2:22:26:38:23:fb:bb:24:53:82:
5c:95:44:39:f9:39:d4:4c:41:09:41:69:14:55:52:8d:09:6d:
35:88:29:04:de:2a:7a:79:e4:a5:8e:9d:6d:f7:a3:e0:a0:ad:
3f:36:ec:01:11:c2:f0:ba:6a:e4:e3:e8:00:52:15:86:ce:22:
a9:8a:14:d3:c5:0e:ce:7e:ac:8e:bd:a8:8e:6b:b2:1f:31:76:
cc:b1:77:c4:b0:b4:31:48:be:a0:70:09:0f:4c:59:00:ab:7f:
9c:2c:de:93:36:c2:0f:34:20:aa:f9:51:27:0c:36:4a:4d:59:
73:43:99:58:13:ce:21:7b:f9:33:c2:12:2f:03:a9:0e:3e:eb:
ea:0e:07:a4:96:b3:60:25:ec:42:78:f8:a0:c4:8d:ef:b5:e2:
93:07:a4:67:cb:21:81:b4:b0:bc:b2:f5:54:23:5b:df:ba:57:
ac:bf:13:2b:d5:03:68:6b:59:e7:17:99:58:a9:bc:44:24:e0:
f0:9c:76:43:b6:38:65:50:4d:20:45:10:a0:58:a5:8c:b7:bf:
49:e0:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:50 2025 by rpki-client