Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json)
Hash identifier: tb7aBX3LpQdWbGhN/EDyZWyBhKy2TIDIYbj6IU9/yxM=
Subject key identifier: 76:46:31:CC:49:37:D3:D5:38:1D:1C:C5:9F:83:08:6D:8C:2C:C1:C4
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial: 1767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
Manifest number: 1752
Signing time: Fri 31 Jan 2025 16:36:50 +0000
Manifest this update: Fri 31 Jan 2025 16:36:49 +0000
Manifest next update: Fri 07 Feb 2025 16:36:49 +0000
Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: JlpJNx8sQKeM2thGU4t+WHWqdx5a9dGy2z8NLla3aLk=)
2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5991 (0x1767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Validity
Not Before: Jan 31 16:36:49 2025 GMT
Not After : Feb 7 16:36:49 2025 GMT
Subject: CN=679cfc21-f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:35:90:41:af:d6:db:b2:b4:08:7a:93:69:
d0:bb:fc:b3:31:07:5c:bb:60:84:b9:ad:93:45:26:
cd:e4:01:53:76:6c:5e:bf:b5:10:81:33:92:4e:78:
63:73:59:89:14:8c:55:d1:b6:1b:2f:04:1b:bf:d6:
d0:8c:37:20:a1:e0:78:07:26:5c:c0:db:54:85:ea:
2d:0c:fa:38:a6:e5:4d:bd:f8:eb:34:d6:90:aa:88:
0f:11:79:35:d6:1c:33:5d:3d:3d:0c:99:17:91:59:
31:70:04:70:cf:ad:34:d5:b6:91:cd:a8:77:45:9d:
86:97:5b:c2:89:79:2c:d3:ea:54:b6:17:8b:8e:ed:
52:18:08:cb:b4:7d:ca:6e:12:15:85:87:96:43:36:
88:da:34:40:15:5d:b9:2c:7d:36:f3:db:7b:d2:c9:
18:7e:bf:2f:6f:1d:76:33:e9:a9:79:0d:99:08:a0:
38:a7:cd:e1:4a:e9:33:0f:bc:60:62:e4:4c:a7:c1:
03:8f:a7:33:d2:96:ef:57:f1:0f:50:24:2a:20:02:
80:cb:65:cf:91:d7:42:01:9d:9c:bd:b4:a9:d4:b5:
42:71:f8:14:a1:f6:aa:fa:f8:18:f5:2b:a2:ab:25:
e0:72:8c:1e:3d:4c:96:ae:3e:bd:21:43:0d:bc:6d:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:31:CC:49:37:D3:D5:38:1D:1C:C5:9F:83:08:6D:8C:2C:C1:C4
X509v3 Authority Key Identifier:
keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:2e:80:93:50:8d:35:66:42:23:f1:6f:e2:43:22:34:07:
9a:9d:31:65:72:d0:d6:79:e4:d4:d9:65:1e:0c:b7:3e:1d:48:
9d:13:73:cb:dc:21:bf:62:bb:b9:98:d1:e9:6e:f6:e0:48:4d:
70:71:6e:af:4f:8c:68:a1:bf:94:51:ee:aa:dd:0b:c5:3d:5d:
bf:86:a9:42:94:5b:6f:81:c8:50:11:ed:18:47:0d:84:69:fa:
8f:58:1e:a5:29:cc:4b:4e:bd:bb:86:f8:5b:da:9f:51:ab:d4:
8c:9b:92:41:07:23:41:5e:78:41:5b:d6:41:27:51:0d:33:05:
00:b6:46:b9:99:c8:de:a3:35:f9:93:a3:33:0a:b2:e6:0f:79:
f2:5b:b5:87:6e:05:43:67:df:65:32:96:24:cd:77:94:93:c7:
bd:d3:d0:ca:f6:b4:a5:e5:dc:10:dc:b5:bd:e6:e6:82:c0:88:
bd:c6:c5:dc:88:b0:ed:38:bd:c3:a4:34:b6:4d:36:4d:1e:6f:
8b:33:21:9b:a8:56:47:50:84:43:02:a9:ef:c2:7c:70:18:49:
78:f1:c7:db:70:aa:2d:48:52:1b:34:69:17:6d:57:54:19:fd:
70:67:6d:fb:27:44:11:5a:b9:39:a6:79:3b:73:5f:d9:4d:e2:
d8:84:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:59 2025 by rpki-client