Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: doNJmSKhESGF4qd6ztdMD/0C3DTvSzabqaGfjSrY1a0=
Subject key identifier: 4D:E2:F2:81:B5:BD:FE:53:FE:2B:01:FF:16:4F:C1:B2:EC:9E:34:2A
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 3472
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 3455
Signing time: Fri 31 Jan 2025 15:21:47 +0000
Manifest this update: Fri 31 Jan 2025 15:21:46 +0000
Manifest next update: Fri 07 Feb 2025 15:21:46 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: RA0aEP2lz9gwa/sEVaseaU8m9aPfFsnHptAYC2lFQTk=)
2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: H9fsyURTb8qh5DVJOvXZinGpj/nUZcubrPdBUX+wonM=)
3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: jaRSKEufT55PHq8OPoLG/qgSfjEXVPXjl00275Oa/lI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13426 (0x3472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: Jan 31 15:21:46 2025 GMT
Not After : Feb 7 15:21:46 2025 GMT
Subject: CN=679cea8a-6c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:b4:a5:06:97:78:bc:0b:66:90:84:1d:b4:
d3:bf:e1:1d:1d:c4:e8:cf:bd:64:bc:57:b7:8d:80:
42:a1:c9:30:d4:b5:3a:1a:1c:ad:d9:0e:4a:07:49:
6d:eb:b9:cc:2c:a0:06:41:b3:18:81:61:ba:42:33:
c8:b0:43:f3:69:d2:c5:ed:9e:0a:74:f9:93:f2:eb:
0e:1d:bf:8e:2a:83:2d:87:ca:98:47:0b:fe:2f:35:
4e:96:fa:d3:76:82:93:30:2f:72:5e:5d:25:c6:d9:
fb:4d:78:20:e1:b2:f9:df:35:ca:05:0e:0d:1e:e7:
c4:d6:27:02:56:10:29:79:a3:58:69:38:4b:ca:b3:
30:8c:10:51:7b:0a:d6:d4:58:9c:c4:95:39:70:5c:
df:de:01:1a:e7:c4:f2:c4:10:bc:a8:51:d6:7b:6c:
c9:0c:0e:e8:eb:ff:44:0c:8b:af:d9:e5:ff:ba:f8:
41:f3:01:c8:4c:a6:b0:10:4f:78:2b:19:d0:80:df:
59:05:1d:94:d0:6a:97:55:43:56:4d:e0:2c:00:1d:
50:c9:19:29:46:cd:0e:e0:06:fb:da:78:e3:b9:1c:
c4:24:00:6f:4a:ea:cf:50:e0:96:8b:4f:d9:31:6b:
85:da:ac:86:17:3e:21:e5:12:4a:94:a6:1e:d3:e8:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:F2:81:B5:BD:FE:53:FE:2B:01:FF:16:4F:C1:B2:EC:9E:34:2A
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:95:14:eb:88:78:8e:4f:31:86:ff:0a:f8:d2:f6:91:4e:
0f:de:47:b7:ed:61:1b:af:ea:24:89:69:fa:85:8c:ce:4c:19:
12:f5:bd:a8:08:7f:f4:28:eb:40:a6:1c:06:da:44:bf:ba:ae:
59:e2:1a:a9:27:33:99:95:cb:0b:99:97:77:c3:14:ee:fe:cd:
20:59:52:80:6f:8a:9b:a9:0d:94:9e:74:dc:29:de:d6:d9:6f:
d3:32:8a:db:a4:f8:52:23:17:6d:11:b7:a6:45:8d:81:02:35:
87:41:74:35:20:ed:29:0c:2c:5f:0f:fc:ce:83:3b:28:21:7c:
30:e8:8b:eb:09:b7:a8:91:18:a8:a2:5c:53:59:55:eb:3d:72:
c0:c1:99:55:85:11:72:18:66:43:d9:6c:45:ef:8e:2e:ec:80:
e0:14:84:60:00:ef:e5:2f:0b:f6:08:55:54:09:84:87:6a:ef:
78:4b:58:89:88:6b:cf:ad:13:f5:27:e6:5b:df:46:33:7b:bd:
26:48:1b:8b:73:8d:5e:a9:15:c3:5f:f3:df:76:62:6d:84:40:
b6:97:90:cc:bd:6f:49:32:c8:d5:a6:e4:bb:47:a3:aa:5f:40:
54:49:de:c0:a6:45:9a:7c:57:9f:73:4b:33:67:be:bd:0e:f3:
48:ef:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:32 2025 by rpki-client