Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier: KDIut050L0K4dhnL3QgMKOP4P81vUYYnhLAAp+J4ybU=
Subject key identifier: 6A:50:9D:4A:0D:0B:F9:C3:F9:20:77:7F:BD:65:DC:47:28:1D:74:87
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 02:08:28 +0000
Manifest this update: Fri 31 Jan 2025 02:08:28 +0000
Manifest next update: Fri 07 Feb 2025 02:08:28 +0000
Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: vX3Utn/s0nmH/vichn7JpK35+sq/on5kpd2QwQfSTsU=)
2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Validity
Not Before: Jan 31 02:08:28 2025 GMT
Not After : Feb 7 02:08:28 2025 GMT
Subject: CN=679c309c-ddd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:0b:ea:fe:af:6f:bb:df:98:2b:30:b5:d2:
45:60:b2:48:d4:56:d2:ae:fc:ab:b4:48:b0:f5:d9:
ac:d0:50:9a:7b:23:5f:4b:11:90:76:e8:82:ed:89:
69:2c:fb:13:25:e3:22:43:78:36:76:e8:c7:10:34:
5c:a2:a3:0e:2f:6b:a4:59:56:3b:30:9a:96:98:36:
59:a0:aa:f0:98:8d:ab:f7:07:5d:c4:2d:76:50:32:
81:8e:ef:a2:da:db:c1:46:6a:5a:ba:77:f6:e1:8b:
ff:67:89:c7:c9:d1:3f:5f:71:08:5f:aa:d8:59:df:
2f:5d:3b:c1:b3:46:04:13:ed:84:db:5a:0f:14:87:
43:34:6a:07:b9:c9:86:ac:04:48:81:92:5b:0f:20:
82:48:af:a8:23:b2:89:b9:5e:cf:23:45:71:fd:b1:
0a:ce:7d:f2:99:89:b2:75:08:0b:7a:47:8c:17:6f:
4c:f3:f1:78:06:ba:ea:a3:d3:a6:58:42:d3:55:a9:
65:09:b1:75:40:c4:6a:2d:34:be:a9:3f:04:75:ff:
dc:b7:53:7b:c3:00:4a:59:c5:c0:be:33:c2:c5:b5:
d9:ab:39:a4:4f:9b:d6:96:94:f7:53:1c:7d:47:e9:
69:6f:32:d6:ff:16:56:89:3c:21:2c:9b:92:17:18:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:9D:4A:0D:0B:F9:C3:F9:20:77:7F:BD:65:DC:47:28:1D:74:87
X509v3 Authority Key Identifier:
keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:87:5e:1f:7e:38:25:b1:bb:23:9c:f4:70:c3:e1:51:cb:8a:
d9:f0:e5:f9:67:80:94:46:37:2f:78:9a:60:22:07:d4:0c:aa:
70:9f:c5:87:64:62:e5:a6:0b:d7:0d:6e:9d:4f:a0:9b:26:84:
02:8c:99:3b:50:a8:95:6d:58:f3:7b:af:bb:ba:92:0e:c2:a7:
30:21:fd:33:2e:70:74:55:4d:63:ef:6a:7b:45:ac:af:c1:56:
b0:d6:68:da:f0:f1:cb:28:9c:c9:06:43:5b:47:42:be:b7:50:
24:c5:12:66:23:cd:75:2b:b5:1f:fa:d1:ce:38:3a:5a:7c:b7:
c9:0f:a5:50:38:ce:43:26:3e:7e:91:9d:ee:f8:6b:9e:59:28:
02:26:d4:1d:ae:6b:63:bf:b3:8c:be:43:5b:ad:55:4d:d7:d1:
16:f1:60:dd:7c:1a:7e:b8:43:b4:c6:02:86:33:69:d4:2b:5a:
fb:a2:30:da:fa:b0:ba:d9:c5:27:79:78:7c:31:67:63:7a:44:
69:4a:d6:93:21:30:92:9f:16:76:09:7b:cd:7b:3c:a7:0a:40:
2d:4a:f7:72:61:ee:b0:d5:fc:09:ba:98:e1:07:0b:aa:94:da:
31:ae:63:cd:be:67:7c:ce:a9:1f:e4:07:72:91:fc:6c:1b:96:
1a:70:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:37 2025 by rpki-client