Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json)
Hash identifier: NEDY/BpfBGSiJL3pJ8uA9S+C7NwpxbHc7BGvgT/3xS8=
Subject key identifier: DD:85:D6:EB:02:30:68:64:D1:3B:D6:97:C5:2A:F6:6F:37:54:46:C5
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
Manifest number: 0235
Signing time: Fri 31 Jan 2025 02:00:36 +0000
Manifest this update: Fri 31 Jan 2025 02:00:36 +0000
Manifest next update: Fri 07 Feb 2025 02:00:36 +0000
Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: CZB1ErCHNv4N3v3/Ra+CfP7wWYYTzJ21iE/3MFtavFE=)
2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Validity
Not Before: Jan 31 02:00:36 2025 GMT
Not After : Feb 7 02:00:36 2025 GMT
Subject: CN=679c2ec4-7377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:e2:87:0b:ce:0b:19:56:8b:ad:dc:5b:cb:
d5:df:96:94:7a:2f:a7:0a:84:c2:8e:a9:1d:c4:2c:
6c:67:16:92:8b:3e:15:53:fd:43:58:b9:70:89:5c:
e6:a2:39:d0:6d:0b:e5:13:0e:13:e2:69:c7:fa:70:
d3:93:4e:ad:22:27:3f:28:ec:f2:06:ff:73:60:a9:
fd:3d:01:74:16:41:27:dd:d7:32:dc:d4:4d:26:35:
5a:21:5a:3c:f2:1d:3a:f9:62:07:25:26:db:31:a3:
db:1e:ae:d5:df:f1:a9:5b:a4:da:03:50:97:40:48:
3a:c0:50:ff:7e:33:2e:a3:6a:a7:a3:d1:ad:25:4e:
be:38:a4:46:d4:c6:54:ee:82:a0:27:44:0d:47:0f:
d5:4e:b0:18:63:13:96:bd:e9:bd:a2:09:60:93:82:
e9:03:8e:c1:a5:31:7f:aa:f8:5d:a7:25:1e:7b:1e:
59:17:ad:db:a1:5b:7e:ec:d1:c5:27:66:cb:ab:11:
ea:73:d9:dc:44:6a:77:f7:47:c8:d9:b7:e3:c5:c8:
b9:db:1c:5d:3d:03:71:a4:00:8a:de:10:82:eb:0c:
cc:b4:ec:33:6b:32:dd:74:5a:0f:99:00:57:93:bf:
43:58:c3:aa:6e:e8:6e:08:e1:f5:14:32:09:e6:d5:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:D6:EB:02:30:68:64:D1:3B:D6:97:C5:2A:F6:6F:37:54:46:C5
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:15:83:59:05:f1:15:dd:e8:28:9a:7e:b7:a9:66:83:59:
4e:ae:64:d7:ec:da:75:97:6e:0c:b8:13:8b:a5:8b:ee:60:cd:
ee:68:48:3d:1a:50:a4:18:0e:77:9f:0d:8e:37:4a:7c:40:b7:
25:82:9b:a1:8c:7e:fc:d6:b1:03:16:a1:8b:a0:35:fb:ea:a9:
8a:39:bb:a9:c4:fb:68:17:3e:4c:d4:ff:75:e7:29:47:5e:12:
9d:92:f3:d6:4c:10:d1:29:f4:b4:bc:e5:1c:1f:bc:50:d8:10:
cd:80:60:cf:14:03:08:9c:03:18:4b:78:2d:9a:0f:a0:45:7a:
a2:3c:f1:52:3a:e1:96:c5:9d:ce:bd:b8:40:9a:2b:b0:89:dd:
2e:cc:43:e0:b1:3b:6c:c4:a0:83:11:ca:21:31:ce:d0:b5:e7:
84:21:8d:d4:97:4c:80:cc:34:3d:ba:34:90:68:a5:8c:b8:7f:
44:43:41:23:e2:17:1e:fe:be:ee:72:e2:0f:09:ac:4a:fa:03:
cb:cc:14:64:04:f7:6b:d5:95:c5:89:4d:ee:74:73:b2:c3:55:
4b:7d:cd:e7:47:32:70:19:34:b8:e4:0a:78:49:39:9d:6d:3d:
54:01:4b:e7:a5:ec:ca:8a:05:ca:bd:70:7e:1f:98:fc:42:d8:
08:dd:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:34 2025 by rpki-client