Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier: U5gKsFLYE0dLeWuWwg8nD9kg6Rz0/Zq25ogYnoXq+qA=
Subject key identifier: CE:02:54:D1:99:A3:DD:C6:E8:AF:B4:2F:46:C4:FD:72:6F:45:D8:6C
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial: 0446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number: 043E
Signing time: Fri 31 Jan 2025 00:20:21 +0000
Manifest this update: Fri 31 Jan 2025 00:20:21 +0000
Manifest next update: Fri 07 Feb 2025 00:20:21 +0000
Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: gI5IP9fPYzTMRotR8CTtkCD6oIivoBjvGLXJhYsz7MI=)
2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=)
3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Validity
Not Before: Jan 31 00:20:21 2025 GMT
Not After : Feb 7 00:20:21 2025 GMT
Subject: CN=679c1745-dafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:12:97:85:c9:62:e5:9f:7f:4f:04:2e:29:
cc:4c:09:15:1f:88:3a:9f:56:54:71:16:33:1b:4b:
a2:b0:59:73:d6:16:07:f8:09:9e:ab:7f:4d:2b:98:
24:d7:5a:98:63:9a:c2:d6:ca:9d:6b:52:e8:e3:c2:
8b:d7:34:a0:d7:89:97:3d:b4:67:24:12:8c:9f:90:
43:94:91:c4:ed:06:bc:86:e6:9b:e8:5c:43:11:60:
41:bd:0b:92:c5:47:f3:d2:d5:45:92:01:32:f9:36:
fe:bb:ff:50:03:74:37:d6:81:2a:a9:08:3c:7b:7c:
5d:07:d1:e0:93:ae:1e:4c:37:c6:4f:24:27:41:30:
c4:ca:13:b5:e8:d8:0d:e7:04:c6:89:d8:28:30:f8:
ae:bc:b6:32:79:0c:f3:18:3a:89:90:02:1d:92:11:
20:46:b5:f6:1b:65:ce:b2:0e:e7:9b:3e:71:96:56:
5f:21:29:ac:0a:dd:dc:9d:9a:7e:15:29:35:54:63:
5f:b6:1a:84:cf:72:1c:91:3b:06:06:7f:ed:13:e2:
c7:f1:a9:82:12:c1:5a:11:df:ed:aa:d3:20:43:a5:
a8:ec:14:15:a7:34:f5:4a:37:4b:e8:a3:14:ee:54:
67:9c:97:7b:85:93:c0:40:32:b2:76:f5:8a:03:52:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:54:D1:99:A3:DD:C6:E8:AF:B4:2F:46:C4:FD:72:6F:45:D8:6C
X509v3 Authority Key Identifier:
keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:f2:5e:2b:24:f5:72:3f:eb:64:e2:a4:ef:0d:f5:f8:6c:a6:
cb:8f:38:c6:f0:f1:46:f0:23:cb:ec:d3:c3:3c:fe:ca:3e:06:
e0:4a:51:25:38:7a:14:5a:ab:44:e4:bf:c0:92:a3:69:0a:ff:
3a:2a:74:de:9e:87:92:b2:fd:bb:7b:57:e8:03:07:ce:16:34:
81:ea:9a:27:9e:d3:5f:48:97:20:68:63:7c:c8:51:69:c5:39:
f2:5c:19:f8:48:57:0f:97:57:3c:aa:22:13:15:5e:96:1e:cc:
fc:a5:dc:70:56:59:39:a9:bb:c8:64:61:ba:72:f3:da:8c:c0:
b2:f8:0d:82:2d:85:4b:76:f0:ab:da:40:44:54:88:d6:54:c1:
34:06:00:36:b0:ef:7f:36:ae:4e:8f:1c:f7:bd:42:f5:da:23:
ba:65:8e:16:6c:91:a5:bc:c2:ef:13:f7:88:ba:be:c0:8b:29:
44:a1:5b:6d:9f:c9:08:1a:df:f4:cd:57:16:d2:51:98:05:1c:
b0:29:56:7e:3f:3d:99:09:26:6a:78:2b:ef:b5:f5:ff:8e:cb:
cb:0d:f0:d3:c6:50:fb:28:89:d1:0a:08:e1:3d:b6:ed:5e:8e:
4b:e4:5f:c6:36:b2:99:a8:50:38:29:d0:1f:d5:24:46:60:0c:
87:98:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:48 2025 by rpki-client