Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json)
Hash identifier: ieGuwgex+9JuXsEdow4G8HBm8bPsvTMjrwqCku5W2qU=
Subject key identifier: 4A:B9:56:0A:6F:09:47:80:6D:C2:54:70:4C:83:B3:16:1C:13:4B:86
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0BAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
Manifest number: 0BA1
Signing time: Thu 30 Jan 2025 18:54:39 +0000
Manifest this update: Thu 30 Jan 2025 18:54:38 +0000
Manifest next update: Thu 06 Feb 2025 18:54:38 +0000
Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: oIoXgQEKER81GRmZnQsRaPCS/qhScAhgQsay9n/wBVY=)
2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: vuAfqS+oupAqLtbWHhdz3OsiJgWg5sczosdrHd8kXwo=)
3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: DQuIcDvil4xhDWRcyNWiHmLcTyjG0SYLvwiCuCDmI90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: Jan 30 18:54:38 2025 GMT
Not After : Feb 6 18:54:38 2025 GMT
Subject: CN=679bcaef-9bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:44:7e:35:7d:25:75:da:3d:20:54:d6:57:
e4:00:24:e1:6d:bb:05:5e:a9:02:35:04:2b:e3:23:
2a:a2:bd:d1:81:1b:58:ec:b0:f8:ed:29:b2:bf:c0:
63:2f:91:6a:d9:d8:cf:c9:e4:a6:ec:3f:10:30:b2:
b6:03:71:04:6a:b1:63:29:7c:03:ef:4f:ca:f9:60:
72:08:b4:62:d2:b0:74:89:31:97:e8:4d:22:25:b4:
86:1e:cd:61:b4:f7:d5:52:29:6d:c1:ac:64:4b:b7:
d1:e2:6b:bc:05:2e:2e:87:96:39:5c:fc:45:4a:f3:
83:37:40:c3:77:86:5c:a1:49:c3:52:f1:e4:7e:70:
28:78:59:b1:2a:73:71:0e:44:d6:cd:31:f0:c3:a7:
25:f9:bf:7b:46:ee:e0:9a:4c:55:9e:ba:34:32:3b:
47:2f:da:37:61:76:1a:37:bf:5f:de:a3:29:60:d9:
bc:dd:48:68:06:58:59:98:46:84:4c:3b:a7:ed:e9:
a7:1c:cd:d4:d3:74:cd:24:5c:fa:04:6a:ad:78:05:
ec:34:fa:e2:8f:39:6d:e6:f2:f2:94:e2:de:e9:e9:
fd:89:16:3d:a0:a0:e2:18:69:b5:51:46:d2:ef:25:
c1:9e:ba:23:a6:1c:7a:23:5a:c2:16:f8:eb:01:ab:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:56:0A:6F:09:47:80:6D:C2:54:70:4C:83:B3:16:1C:13:4B:86
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c1:e6:0e:97:a6:87:a7:97:dd:3e:a8:82:f3:49:06:17:69:
1c:6e:0b:68:a4:17:6d:4d:06:3d:35:89:50:ef:bd:db:31:1c:
36:bd:ff:ee:e8:9c:ef:f2:49:89:c7:41:89:f0:49:4c:cd:0a:
1b:ff:20:92:6a:56:dc:2e:2c:4c:67:c1:ab:e8:67:4d:43:30:
49:7a:9d:1a:d3:b3:e8:ba:bb:c0:02:cf:de:4a:14:4d:39:b3:
db:b0:c9:9a:04:15:37:66:3e:82:67:b6:bc:c9:4a:9a:00:8d:
26:d8:4a:be:9b:09:7e:35:fb:02:d0:ba:ee:87:55:1b:6b:45:
fa:10:f8:ab:4c:fc:13:b3:9b:43:7c:4e:73:2f:01:be:09:89:
71:3f:4d:6d:30:14:d1:71:37:d6:65:c3:a1:ad:58:a8:09:ff:
f0:4d:fc:78:d0:03:bb:01:1d:8e:32:c7:c5:70:5b:7c:00:78:
74:c3:53:9b:bd:8e:3c:10:d8:f9:f9:d6:ea:4a:3b:78:d0:9f:
f7:e3:d3:c8:95:88:19:c8:95:2e:01:a4:22:cb:67:98:5a:bf:
ef:87:fb:52:bc:e1:f0:ee:c4:a1:49:ba:ac:d9:b3:c9:24:32:
c7:cf:05:95:99:37:a2:9e:6f:61:33:a4:84:c0:26:9c:07:9d:
85:9b:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:10:37 2025 by rpki-client