Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File: rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier: DOs6xqJetTHpcEIdmCy8UOcZtGkkr99BsjB3KnQXqss=
Subject key identifier: FF:6A:AA:7A:D9:7A:7E:90:2A:D5:63:EA:E9:61:2F:63:FD:94:5C:6C
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number: 060F
Signing time: Thu 30 Jan 2025 22:46:34 +0000
Manifest this update: Thu 30 Jan 2025 22:46:34 +0000
Manifest next update: Thu 06 Feb 2025 22:46:34 +0000
Files and hashes: 1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: Ly1QGwLm+VEzafWKaW8Skpr8Pc4jr7diZUBrPGhD3i8=)
2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1444bb5xjFLOm1pP6Amz/K/2h6LYyRRZNFd2Apyax+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Validity
Not Before: Jan 30 22:46:34 2025 GMT
Not After : Feb 6 22:46:34 2025 GMT
Subject: CN=679c014a-d3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:79:be:0b:1b:18:51:2e:05:4e:a9:51:d1:
d4:e3:ae:ab:13:87:46:ac:e6:9c:57:cb:cc:55:1b:
8d:9e:25:6a:d4:72:57:10:3a:51:8a:65:7e:9a:56:
27:2e:c3:aa:e3:66:4c:49:74:9d:27:6f:3f:43:44:
71:6a:7f:77:1a:c4:4a:d9:fd:d4:0a:3b:a5:d9:6c:
48:59:c9:dd:e1:21:2b:70:c6:9f:f2:c2:b8:af:b0:
f6:34:04:05:bc:59:c9:f3:76:f4:95:9b:f4:f0:db:
8a:cc:74:b0:d4:23:60:5e:e9:da:90:f4:97:90:d6:
cd:a2:d0:e2:a7:02:56:0c:ff:5b:ac:70:e4:24:a7:
0d:b6:1b:38:87:1a:77:97:12:2e:62:a2:f4:ad:9e:
b5:0b:fd:4a:57:8c:1b:d8:c4:ad:85:4a:81:1a:2b:
bf:04:fb:50:2e:21:f9:a2:14:c7:4d:1c:48:c3:00:
01:8c:ea:3a:5b:9d:49:d8:f2:58:cb:04:77:c3:f3:
5e:31:40:bb:2e:ec:d4:0d:3a:1a:ca:f8:e7:31:78:
5d:89:d6:ab:f7:a8:46:04:75:aa:a2:77:f5:7b:92:
db:dc:dd:49:90:ae:fc:75:f1:71:bd:34:87:f9:71:
aa:d5:af:85:de:83:dc:2e:39:15:85:21:fa:fd:3c:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:AA:7A:D9:7A:7E:90:2A:D5:63:EA:E9:61:2F:63:FD:94:5C:6C
X509v3 Authority Key Identifier:
keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3c:97:5c:67:d2:d5:0a:29:17:1d:79:ab:76:d0:b0:e9:fa:
5b:f3:ab:a9:83:29:c1:10:60:a1:5b:6e:9f:1c:42:db:62:c4:
9a:31:3c:dc:57:d3:e5:c7:bd:15:c6:86:55:ac:d5:5d:4b:f9:
e6:b2:98:06:8e:b3:56:de:e9:6a:d9:36:04:6a:0b:c6:2d:02:
11:e7:97:31:91:cf:ba:4d:e2:53:90:1c:f5:2f:d3:bc:e2:25:
8c:e4:97:06:ca:6b:26:56:bb:32:46:18:ff:e1:74:12:48:0f:
5a:ff:ab:29:69:7f:6a:4a:d8:70:2d:8f:5d:27:24:fb:cd:3d:
a5:85:02:e9:4b:36:18:a6:fd:73:c2:35:49:31:e5:e1:f4:11:
4d:f3:47:c2:05:5f:02:0a:fa:0b:d4:a4:6e:72:8e:8e:63:9a:
45:68:6b:60:14:da:60:5e:e4:b3:0b:63:b3:99:38:11:8b:c8:
28:89:86:eb:53:2f:bc:19:16:75:c1:24:89:1a:81:5a:1e:5c:
fb:df:14:2f:44:6c:ae:a2:b4:bb:a4:dc:a8:77:df:f0:1a:52:
90:85:75:d1:e8:ce:ba:69:d5:c8:f4:11:c1:82:bf:6d:dd:c2:
20:58:47:4c:4b:f2:a5:17:aa:37:2e:01:15:e4:08:c3:f5:25:
a9:6b:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:47 2025 by rpki-client