Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier: rXuuJ+OC5zKszFTuoOO21uXIHA4PCOQW2xyhH/wMXII=
Subject key identifier: AA:A7:28:5D:6F:3E:A3:57:0B:53:0C:9C:A5:55:3F:2B:C7:5F:74:00
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 12D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number: 125A
Signing time: Fri 31 Jan 2025 17:08:19 +0000
Manifest this update: Fri 31 Jan 2025 17:08:18 +0000
Manifest next update: Fri 07 Feb 2025 17:08:18 +0000
Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: YOL65cNImvU7LspkIGxJ0qOhXDVPNTDCpPwdpPCoPrA=)
2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
6: F6EBC724B24211EF99C46E64C4F9AE02.roa (hash: q2Nqb/hrcV90WNVexwR/NHfj/Q0Tv7rC0yL9DHC6X3M=)
7: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4824 (0x12d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Jan 31 17:08:18 2025 GMT
Not After : Feb 7 17:08:18 2025 GMT
Subject: CN=679d0383-d1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:8b:73:9a:f5:a9:6e:d7:9e:f0:35:46:83:
1d:fd:79:80:97:14:fb:c3:4e:ae:d2:03:a5:a3:d2:
f7:9d:f9:78:ee:97:07:c5:3b:f6:d9:5e:43:c0:ce:
81:30:fc:5c:30:00:d8:71:f5:3e:cc:2e:0b:c5:62:
48:1a:c5:07:c0:f1:f0:b6:b3:6f:86:e4:0a:62:5f:
51:be:57:30:86:9e:33:19:49:d9:76:62:d2:68:b2:
29:91:d4:1c:ab:2c:a4:05:f4:2c:93:5d:a2:73:c0:
9a:52:38:de:89:38:c0:ee:33:60:63:11:0d:3c:75:
07:61:78:b9:30:cf:97:0d:37:f0:21:b8:bf:9b:d3:
5a:d4:32:bb:c2:e9:3c:26:95:c9:a4:30:eb:d4:1d:
0e:02:cc:7d:36:4f:7c:3a:c6:66:dd:e7:b7:67:d4:
59:82:fc:89:f9:3f:97:b7:90:63:b8:4c:c8:dd:b2:
ff:68:ee:23:4e:dd:49:ee:6b:aa:e7:31:19:5a:84:
7b:31:e0:84:7a:7a:8b:7d:85:69:78:00:55:cd:9b:
9f:42:0d:5e:d9:3d:ee:66:a9:35:b6:87:8a:c4:dd:
61:59:04:20:a5:43:d3:aa:ec:ed:20:89:2e:d3:76:
08:3f:35:c0:04:4e:bd:71:50:cb:cb:45:a3:e5:a9:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A7:28:5D:6F:3E:A3:57:0B:53:0C:9C:A5:55:3F:2B:C7:5F:74:00
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:ed:65:b0:95:77:c0:1c:aa:ea:bb:0b:aa:42:fe:82:a0:
2d:e8:bc:a0:49:03:b5:4e:a8:c1:c3:6f:bb:b1:41:ff:b8:7c:
d9:f5:88:92:86:cf:f3:c9:24:ac:40:71:35:0b:47:d7:06:c4:
c6:1b:a7:da:c7:ab:0c:0f:f8:d0:b3:34:44:41:cf:27:47:11:
ae:c9:89:4d:2e:7f:8b:e9:e7:91:86:9d:32:a6:d1:b4:94:63:
70:b9:c9:59:87:d0:7b:af:b9:fc:69:4d:a9:5b:ae:7c:c8:e4:
db:3a:12:6d:4e:d4:f1:a6:28:d3:73:fe:da:0f:a7:d4:a3:b8:
ed:c3:44:85:ea:cc:98:4d:6f:ba:ca:83:80:d4:9e:b4:85:00:
49:aa:45:58:6c:16:52:12:7f:fa:96:1e:62:3b:ef:2e:bd:6b:
dd:dd:9d:c4:0b:92:4f:3d:1f:b5:54:aa:a5:83:0a:cd:3f:04:
44:a8:e9:d4:ea:5a:fc:93:9b:90:63:4e:bd:bc:3d:0f:34:e2:
3c:75:fb:9c:29:fe:de:ae:e1:78:1a:0b:41:6f:e5:0e:ee:a5:
1d:8e:27:c3:2d:22:18:6c:92:bf:a5:40:29:32:2e:bf:d8:e8:
af:45:c2:be:3d:f4:75:5d:0e:d5:7c:99:fc:66:c7:26:e6:f9:
63:a4:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:34:55 2025 by rpki-client