Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json)
Hash identifier: 2a7GBIPu+Dm7jMOmHMtH6U/ci1IiKs8og2N6g8wQblk=
Subject key identifier: 4D:99:6B:5A:24:3F:B5:50:ED:27:A7:17:E8:C3:C8:A3:89:BF:31:7E
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 03D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
Manifest number: 03BD
Signing time: Fri 31 Jan 2025 00:45:50 +0000
Manifest this update: Fri 31 Jan 2025 00:45:50 +0000
Manifest next update: Fri 07 Feb 2025 00:45:50 +0000
Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: 17KlcfAj8TF7WLgweEydb7LGsGH9TjMjJg0ujbiMLr8=)
2: 2940AFDCD84211EDBD609A4DC4F9AE02.roa (hash: Uo58piz25i9Bob1imDU9UvvyWe420wfPeaSZtuylXk4=)
3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: hknzYgKubvcvsxm1xF8fHySPRHrCG3VJpGUtjCzjN4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Jan 31 00:45:50 2025 GMT
Not After : Feb 7 00:45:50 2025 GMT
Subject: CN=679c1d3e-6230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:59:2b:55:1e:91:6f:97:04:ce:38:fa:1d:
0c:57:6f:ea:2e:8a:ee:28:6f:19:8c:e8:4e:7e:92:
6c:43:a0:d8:18:81:bb:8c:0f:6b:a8:ee:7c:60:47:
44:53:56:5b:7c:64:fc:b5:ee:aa:21:3b:d8:f8:b2:
7a:af:09:4c:0d:b9:6c:8f:77:d6:9f:8f:80:39:2e:
c6:5c:7f:f2:eb:fd:6e:a9:2a:61:08:cf:0e:dc:c4:
ef:7a:0f:18:a9:79:12:a0:88:ea:3d:14:bc:01:d5:
e2:0f:1f:f6:f0:66:7d:24:da:b6:1b:6b:ea:20:d7:
19:38:79:e5:19:b1:37:3d:e4:d8:03:02:6e:5b:ce:
8c:33:5b:31:ca:ee:6e:16:3e:83:77:2e:f0:1f:cb:
33:b3:1f:8e:bd:0d:f9:8a:5c:7f:31:54:01:11:1f:
88:4e:f3:29:07:01:2c:c9:08:dd:4d:ac:c2:23:0e:
18:6b:40:b2:9d:6e:09:98:7d:4a:f6:01:48:38:8f:
00:a7:4b:8f:72:fc:7c:7b:b3:27:94:aa:1d:1d:61:
fd:73:84:de:0b:7d:ed:4a:b4:c9:b4:ff:4d:0a:84:
3a:32:93:de:00:d7:ef:b0:01:ec:f2:29:b9:33:da:
be:2f:50:21:2e:47:c4:27:85:6e:6d:cb:77:f0:50:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:6B:5A:24:3F:B5:50:ED:27:A7:17:E8:C3:C8:A3:89:BF:31:7E
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:61:12:a9:a3:14:a1:28:ab:6b:80:20:9c:26:48:22:b8:83:
52:27:9c:13:47:7d:24:f6:ec:f4:6f:2b:8c:eb:ab:fa:79:82:
b5:60:3a:46:3c:e6:f1:65:23:90:e8:3d:3f:1b:1e:a9:1e:ed:
a1:93:3b:0f:ca:3c:e9:67:b1:8b:d4:2a:48:6f:b0:6a:1d:6d:
24:35:d5:1f:29:f5:26:de:df:fb:9d:2f:0f:91:49:e0:4e:84:
7a:d3:38:1c:bf:b4:49:85:ae:9a:c8:47:a1:9f:d7:bb:20:b4:
88:83:56:2a:02:88:34:99:09:ba:9f:98:7d:69:06:b2:2c:b1:
11:24:e3:ad:e0:5f:e8:82:1e:27:d9:c9:e9:d9:20:cc:91:01:
b2:93:aa:63:6d:f2:d1:b4:a3:e3:e9:57:91:43:e9:82:98:23:
f7:33:f5:b8:19:05:c7:99:4d:8d:09:e8:16:1d:9e:ee:6b:e3:
b1:d8:4b:53:76:e5:e5:4c:0a:cb:23:5b:f5:42:00:dd:79:b6:
19:01:da:2e:9a:47:8d:f9:4b:ac:26:b1:13:16:19:bc:9d:c7:
73:2a:98:57:39:f0:8b:e7:a0:79:91:5a:b8:27:aa:2f:9c:0d:
83:a7:2c:22:b1:a2:98:8a:60:2f:44:33:f8:fe:09:e2:64:ac:
60:cb:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:08:10 2025 by rpki-client