Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier: 66FjLph0wSRyOq3uuPS68CpWM6K+3yx6+3JNBvhDcrg=
Subject key identifier: 7A:AF:6C:3E:B3:9D:1E:0E:BA:53:61:8F:D1:2C:FA:F8:A8:4F:20:1B
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number: F2
Signing time: Fri 31 Jan 2025 04:50:41 +0000
Manifest this update: Fri 31 Jan 2025 04:50:41 +0000
Manifest next update: Fri 07 Feb 2025 04:50:41 +0000
Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: PR5hw6z2oKoQurjv5JtexV+4x3uD/tvwj2yhUY/2loI=)
2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: rIhpQ73oq5Fgm8dhXJGl90QlI4uunxwyPHzOKisnft4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Jan 31 04:50:41 2025 GMT
Not After : Feb 7 04:50:41 2025 GMT
Subject: CN=679c56a1-cdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:d9:ae:81:bf:20:6e:cb:7b:07:27:d1:a0:
8f:09:05:eb:0e:80:c2:eb:15:01:e5:6e:2c:e1:fa:
c1:37:66:9a:5c:ff:1b:39:48:bf:b8:95:1e:28:f6:
cf:ba:c8:2d:e4:4f:35:24:94:1b:e9:db:27:22:8d:
de:af:a4:35:a1:b5:dc:4d:ae:88:ea:0e:94:37:48:
77:75:f1:7c:25:29:ae:fa:58:5d:62:c3:e1:1b:c0:
f3:12:a7:1d:47:18:ee:1d:05:e1:84:6c:25:00:44:
18:e7:79:17:61:a3:51:88:58:6b:26:ef:0e:b9:b9:
55:52:e8:4c:a4:21:60:c0:79:19:dc:32:e0:90:c7:
ef:a1:28:49:e6:ad:df:81:6a:b6:9f:89:a0:7e:91:
09:e9:be:00:a4:94:82:27:0d:d7:1f:e9:bf:27:32:
9d:3e:86:b3:e9:8d:4f:b4:81:a7:42:c2:36:1b:08:
25:a6:cf:b8:54:a8:65:09:d4:45:9a:81:61:b5:33:
b9:43:27:77:ab:32:a8:07:9a:a6:4e:7f:e9:75:f9:
04:38:c8:92:6a:d2:ac:17:a8:82:4e:1a:b8:fd:9f:
61:87:9d:b4:6c:6d:04:e0:3d:3f:dd:66:0e:3a:90:
96:ec:45:76:5c:de:dd:2e:5d:bb:3d:45:5d:f8:5b:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AF:6C:3E:B3:9D:1E:0E:BA:53:61:8F:D1:2C:FA:F8:A8:4F:20:1B
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:13:4a:c0:ab:96:ac:d4:8e:27:0b:43:6e:4a:12:54:63:
db:62:d2:dc:15:e0:b3:61:db:b4:d2:23:49:92:53:6d:3f:a6:
e1:79:1d:8e:40:7a:06:dc:c8:10:11:92:c7:2b:4e:3a:cd:34:
c0:c9:20:60:8f:ad:e9:34:97:c2:f5:d5:e4:00:52:a1:40:58:
64:5d:72:29:74:71:a5:52:68:dd:2e:2c:46:80:c2:b2:89:07:
7f:60:64:b7:0e:2d:3b:7a:20:34:ca:2b:3e:4a:00:c3:8e:2b:
ac:97:eb:4d:4b:0a:46:72:a8:23:04:a2:ff:7f:4e:40:e6:34:
86:3c:0e:f5:91:63:1d:c5:8f:ba:f2:49:82:2b:30:01:44:ba:
44:13:5f:7d:b9:c5:fa:2a:41:7c:ec:e2:df:56:41:10:0b:16:
8c:8c:06:99:22:ee:e1:1e:c6:1e:46:00:2b:83:83:6a:83:0c:
a7:72:a7:a8:27:90:ec:a1:40:78:bb:23:f2:ab:51:3d:8e:68:
f0:74:92:d3:25:7f:df:80:14:f9:75:b9:c8:cc:6f:43:2a:df:
09:57:67:fb:e8:9b:14:23:f6:f0:7c:6d:cb:74:a1:2e:31:72:
a6:83:93:ef:42:fe:5c:67:04:b3:d5:7f:5a:5a:8b:29:c8:01:
2b:75:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:14:33 2025 by rpki-client