Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json)
Hash identifier: iOJjW/Mrhd3LGkM/XrFJVYLgzZtwzLXvz+XT26GShi8=
Subject key identifier: F5:40:C4:78:DF:99:C9:66:57:8F:62:E9:AD:EF:62:31:72:15:3B:23
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
Manifest number: 030E
Signing time: Fri 31 Jan 2025 01:18:49 +0000
Manifest this update: Fri 31 Jan 2025 01:18:49 +0000
Manifest next update: Fri 07 Feb 2025 01:18:49 +0000
Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: 7vuLNnF/uYUoXb4SbDOFrUxgNHpEpxS8iETFuNxvLX8=)
2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: cZx0qXYBX+AYL013+FqThkX1+Tb5yDxAcWdH8ZbjfkA=)
3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: byHK1k9Kptni3DE/dYb+CIJQHhmNjQCYM2tQRu5DpPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Validity
Not Before: Jan 31 01:18:49 2025 GMT
Not After : Feb 7 01:18:49 2025 GMT
Subject: CN=679c24f9-f1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:fa:ab:a7:30:b0:e5:4f:a1:65:a1:2e:63:
d3:8d:fe:b9:db:be:de:7f:1c:83:e4:e8:07:6e:51:
e5:f8:6d:5c:a6:46:23:f9:87:5d:65:2b:c2:11:9e:
ce:ba:d3:5e:41:6a:d9:20:e6:a4:06:80:12:9a:c9:
a3:0e:78:2c:84:4f:67:50:ff:d6:d5:2f:75:76:97:
11:e7:94:ac:eb:4c:5c:89:32:97:dd:32:69:e8:8a:
91:03:c6:1b:46:0e:5e:bb:2c:3f:1e:a2:5c:ca:30:
e7:67:43:76:87:a0:c3:90:40:2b:d8:ac:32:df:33:
36:8f:81:e7:23:23:70:77:62:92:9b:11:a4:57:3e:
9a:ef:b7:7c:14:9f:06:21:ad:8b:32:51:81:fe:2d:
13:e7:de:d4:85:61:b2:9e:7a:96:59:55:54:6f:62:
c4:a0:fa:16:bf:5d:83:1c:19:8a:37:df:03:61:5f:
cf:f2:2b:98:3e:4a:15:7d:6a:0f:88:bc:a3:8b:0a:
61:88:04:e6:e8:bc:37:9c:7f:94:86:e1:15:09:32:
cb:49:35:ed:ac:cf:93:95:35:98:08:54:cb:fa:e3:
8d:a6:4f:10:8f:84:57:3e:a6:26:23:e5:d9:09:6d:
50:6e:68:c0:7b:f5:64:dc:b0:5b:4f:1b:2c:b3:00:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:40:C4:78:DF:99:C9:66:57:8F:62:E9:AD:EF:62:31:72:15:3B:23
X509v3 Authority Key Identifier:
keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:13:e1:fc:3f:2d:35:b2:f3:9a:56:45:79:a9:72:dc:04:54:
9f:41:8e:f0:c3:60:b4:a4:ea:4e:ba:b0:9c:2f:a9:fd:7f:c3:
93:f4:57:a9:b4:c6:10:9a:58:2b:8e:62:27:ba:1a:5f:ee:b6:
e5:1a:90:1d:91:16:cf:94:08:0f:a3:ff:48:c4:b3:42:27:c2:
e6:9b:34:03:b7:ca:2e:71:93:04:c5:e1:6e:37:2a:3a:fd:05:
82:7d:87:07:5a:23:1e:93:23:18:31:cc:d3:28:92:5c:6f:2a:
db:af:23:aa:32:12:15:b9:bf:b2:7a:0a:e3:c5:5a:0b:3d:9b:
6b:10:66:05:12:f2:9d:50:8a:a5:e2:34:11:ab:88:51:d6:6d:
99:f5:3d:34:a1:b9:c2:49:be:68:68:93:fa:6b:ca:69:43:7e:
2e:71:ae:03:a4:0d:48:89:b3:f8:30:ff:1a:e7:62:d7:9c:c7:
25:08:76:9b:cf:96:b8:02:90:9c:0b:b1:c6:ff:70:0d:96:80:
f4:1c:e2:90:fb:2a:b3:8d:1e:b7:68:ab:a8:db:fd:4d:2c:c8:
57:2f:98:b4:52:6f:cc:44:bc:cc:74:8f:51:2d:55:95:eb:b0:
d3:a7:ff:5c:1e:0b:6b:bc:e8:fb:d2:09:66:26:41:fa:3a:e0:
c1:46:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:49 2025 by rpki-client