Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier: x1KnkR1uxWqd3nuDrUh36wr1P7pUNChw1z3AFZCBXic=
Subject key identifier: D6:57:89:B6:02:A5:42:D9:A4:CD:58:17:0C:AE:C6:F0:F4:5B:B3:59
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial: 348E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number: 3464
Signing time: Fri 31 Jan 2025 14:19:37 +0000
Manifest this update: Fri 31 Jan 2025 14:19:37 +0000
Manifest next update: Fri 07 Feb 2025 14:19:37 +0000
Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: eutm24n00BpAMiYf3aQCh/vASBcpzqXHQPmmJWF7IK0=)
2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=)
3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=)
4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13454 (0x348e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Validity
Not Before: Jan 31 14:19:37 2025 GMT
Not After : Feb 7 14:19:37 2025 GMT
Subject: CN=679cdbf9-85ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:03:fa:73:0e:94:db:98:07:71:df:bd:66:
93:a7:61:dc:51:80:0e:e8:e5:fb:1b:24:c4:e7:77:
28:18:b2:48:4d:6a:2e:c2:ac:ae:e8:b3:bb:4e:73:
a6:4f:78:b2:fb:a5:4d:10:f7:ca:da:0f:1a:ee:de:
2e:ea:f5:fc:b2:95:9d:b2:43:21:9f:21:a4:59:66:
c3:5c:77:d0:10:4b:56:31:6f:31:c6:10:98:58:d0:
9f:6b:f9:99:05:b7:1d:01:84:e1:65:3a:94:16:dd:
33:b8:c9:9b:f4:d3:05:d1:54:87:34:3a:d6:bc:4d:
d0:e0:f6:79:8f:14:eb:40:4d:d2:b6:b5:8d:a2:77:
e1:66:c8:5a:bc:03:20:87:93:99:dc:2f:c5:22:21:
2d:ae:e0:d4:b5:f9:52:4d:a8:5e:78:94:44:6c:e9:
19:10:02:34:b1:c9:aa:a5:d5:b1:ff:bd:79:44:b4:
40:4e:ef:a6:3f:56:2a:e4:37:78:ea:8d:7c:30:4a:
50:c1:2d:d8:e3:30:b7:4a:f1:73:b9:f9:70:09:9a:
0f:a2:a4:03:f1:36:d4:c1:e0:1f:65:e8:93:b3:af:
ee:e5:72:59:86:3e:8d:04:ed:b1:6b:e4:0e:ed:e8:
a7:82:12:4e:cd:50:76:7f:c2:d3:c9:40:07:79:64:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:89:B6:02:A5:42:D9:A4:CD:58:17:0C:AE:C6:F0:F4:5B:B3:59
X509v3 Authority Key Identifier:
keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2e:13:b9:bf:38:90:db:aa:ff:14:40:5c:6a:a4:bd:9d:d8:
e1:dc:99:7e:1e:b0:e5:64:0d:13:05:2a:94:98:1d:5c:99:a1:
b3:e6:84:c7:16:27:6a:12:62:2b:f2:a1:78:0d:25:48:86:c1:
50:df:09:11:4e:64:97:0f:df:ae:f7:a6:74:ec:c4:31:49:d5:
63:e0:00:7f:0a:14:75:95:16:90:7f:bf:cb:05:95:3d:74:fd:
25:dc:af:c6:1a:8d:83:aa:42:e9:08:b4:b4:8b:d7:00:21:16:
9c:cb:dd:88:1f:b3:e0:fa:c9:1e:0b:1f:8e:2c:3f:a4:64:de:
50:26:1a:72:d8:c4:ae:79:f4:b3:83:35:55:09:9a:cb:f9:9a:
9f:05:23:17:66:2b:2c:63:fb:89:d7:bc:7e:ef:65:d9:f0:8c:
34:bf:88:fc:c4:a9:08:c1:45:61:b8:1e:cb:14:37:88:64:36:
b6:99:d6:3f:68:e4:f2:ab:59:f3:39:a0:d9:90:83:9e:60:cf:
e5:04:ce:57:fd:77:0a:7d:ad:47:9b:c0:62:a1:c7:a9:67:c8:
6c:c7:d4:96:dc:6f:18:c3:61:b8:2f:e1:67:41:91:77:5b:bd:
e7:67:66:d3:0f:d7:b5:66:2c:43:e3:e8:a9:66:d3:e7:27:f1:
12:e8:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:56:06 2025 by rpki-client