Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier: HYkWq4kwjlWECpS4VrhJ+Z/xSvuuP32y7yX2fAOXOdY=
Subject key identifier: D5:41:80:C5:19:34:B8:A3:8E:CF:31:DA:7C:64:85:67:EA:30:DF:E0
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial: 0483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number: 047D
Signing time: Fri 31 Jan 2025 00:07:00 +0000
Manifest this update: Fri 31 Jan 2025 00:06:59 +0000
Manifest next update: Fri 07 Feb 2025 00:06:59 +0000
Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: IhoMV3ZVoCxlUzRlbMpyoHyOrPDH+AsGvKm6bY8X69M=)
2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Validity
Not Before: Jan 31 00:06:59 2025 GMT
Not After : Feb 7 00:06:59 2025 GMT
Subject: CN=679c1424-3b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:b1:74:3f:8c:07:44:97:87:1b:61:d8:8f:
37:5a:d4:91:05:75:ba:04:cc:c7:ca:15:38:bc:b5:
20:d5:c1:de:b2:5e:76:76:45:fa:c7:bb:6d:95:3a:
a3:27:ac:b8:a1:35:30:e9:03:ec:7e:8d:05:fa:5f:
9f:56:6b:77:f0:c1:78:17:b8:8c:5d:d0:a8:2f:76:
4e:47:45:53:8a:66:b8:2d:9a:fe:64:cf:93:c0:73:
4b:98:ae:db:97:03:99:4a:b5:ad:e2:f1:2f:bd:6b:
86:dd:1e:bb:e0:96:5b:47:6f:88:61:e8:ce:f2:52:
66:5b:85:6e:8a:f7:8e:ca:0f:bd:6a:2e:3c:11:c1:
f6:2f:41:ce:00:71:5d:13:51:4d:6a:ad:a8:a6:87:
44:fa:75:cb:7d:45:10:b9:3a:9d:ec:73:3d:b5:95:
f9:2f:37:c7:87:5b:5c:36:a4:c6:e6:3a:90:ea:d5:
16:0a:56:be:56:43:ae:e0:a0:33:eb:e8:10:78:3a:
0d:4f:e3:27:ea:9c:3b:9d:38:c4:fd:ba:4e:37:27:
a4:48:e6:d2:0f:e2:10:c8:ae:13:fb:62:8b:a5:0d:
66:df:24:4f:b1:93:ff:a0:15:b3:4c:6c:f5:fa:b9:
5d:d4:9e:6c:38:b7:6d:fb:fb:ce:0a:98:82:a9:76:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:80:C5:19:34:B8:A3:8E:CF:31:DA:7C:64:85:67:EA:30:DF:E0
X509v3 Authority Key Identifier:
keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:10:de:30:93:32:f8:ec:f4:e2:7c:a9:29:19:d1:2b:7b:
33:d1:8d:93:70:73:66:e3:43:51:f3:77:90:93:cb:89:21:27:
a9:fd:36:b8:96:19:8d:75:18:a6:71:cd:23:e8:46:80:45:be:
1e:af:a7:ce:51:4d:1d:1b:e0:c0:83:55:02:4d:72:09:60:5c:
a6:f0:dc:09:28:87:7a:c9:eb:aa:e7:97:c5:77:97:b4:80:e6:
cf:83:c4:c9:2e:4e:db:d7:e1:55:e5:b3:36:9d:f8:cb:3e:1a:
f2:1e:fa:3a:38:17:28:ca:65:35:72:44:ab:bd:d6:69:ad:65:
ce:8e:cf:c4:0f:01:67:7c:5f:b7:77:b4:7d:cb:cd:8b:1d:72:
d9:f8:ec:be:2f:17:a6:80:9e:41:eb:4f:82:5c:4f:5e:15:5c:
7e:c0:b4:d0:76:21:30:3f:14:a7:88:c7:89:52:80:31:3b:36:
63:56:98:70:6f:84:64:73:26:d0:e3:f5:17:27:1e:b3:3e:52:
70:64:0e:b5:0d:45:7e:a8:12:34:0e:c2:4f:0d:85:4b:15:42:
48:77:8f:8e:10:30:2d:43:67:c0:2b:d5:aa:71:c6:b2:91:a1:
a9:6e:8a:c8:a2:02:d7:d7:81:7b:f9:47:39:61:4a:05:75:f2:
08:21:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:42 2025 by rpki-client