Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier: PPe/YelRderxGLUVY16yHGHGZTHZbdHT6oC/k9RC6Tg=
Subject key identifier: BA:B8:2F:40:F5:C1:15:9D:65:D7:AC:38:AA:70:F4:74:21:BD:7A:80
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number: 019A
Signing time: Fri 31 Jan 2025 02:42:31 +0000
Manifest this update: Fri 31 Jan 2025 02:42:31 +0000
Manifest next update: Fri 07 Feb 2025 02:42:31 +0000
Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: 9nrsTsPsoSimADsn99Djur6JDtHjgME7CWuXr2LxYkc=)
2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: aXVsQ3eTDOFY8R9G8hcsnCxP/cyR26ThIRn0dDawEqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Validity
Not Before: Jan 31 02:42:31 2025 GMT
Not After : Feb 7 02:42:31 2025 GMT
Subject: CN=679c3897-0fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a1:ef:20:11:19:53:53:b7:22:1f:ca:24:46:
09:a3:dc:1e:6f:81:da:39:b1:eb:ec:38:6f:42:97:
d5:9c:a3:17:7c:df:77:d4:db:19:ba:05:31:d5:0f:
be:da:c7:66:7e:b1:b2:8b:7b:5c:5b:8c:b5:b3:d2:
2c:7f:63:8d:ac:15:5c:51:67:3c:0c:b7:b8:1e:3b:
46:6d:04:ff:2b:d2:4c:c2:cb:10:5c:71:59:c9:53:
24:19:8c:cd:b9:9e:8e:af:9d:d4:2d:25:a5:50:9d:
8e:b1:fe:32:b7:78:ce:59:18:eb:39:ae:68:37:32:
54:61:10:b3:cb:64:c7:44:d3:61:0b:c2:1d:04:47:
2d:1e:45:20:95:bb:e2:69:67:72:89:04:b8:8e:c6:
5b:ad:0d:f5:28:f8:80:6f:2b:59:2a:d3:0c:46:cb:
3a:98:3b:43:48:8f:6f:c0:b4:50:47:17:0a:94:73:
ce:6c:8e:9f:88:f0:f8:26:be:c0:71:f0:da:2c:9a:
e5:13:32:f1:d8:24:ec:e4:be:a0:cc:3b:00:74:96:
31:6a:41:6d:1d:77:83:b8:1d:dc:80:d8:eb:bf:e1:
71:c2:00:c0:d0:ad:47:22:8a:d6:0c:f8:a4:53:99:
42:29:76:37:e4:52:28:90:bf:50:15:ed:ea:e5:f8:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:2F:40:F5:C1:15:9D:65:D7:AC:38:AA:70:F4:74:21:BD:7A:80
X509v3 Authority Key Identifier:
keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:bd:22:5c:cd:fd:46:94:6a:9e:1e:d3:9a:10:27:98:2f:56:
bc:94:33:2f:b1:67:82:bb:68:53:fb:19:b2:14:d1:57:f7:75:
b8:c2:61:09:21:84:e6:f5:88:84:65:8b:e1:a3:e0:91:45:0f:
88:e1:1a:fa:37:58:f8:4d:e0:67:ca:56:1f:ea:70:f7:80:b3:
0e:dd:69:3e:d0:94:b1:75:f1:88:a4:47:bf:33:bd:f3:5e:f6:
8b:46:56:34:78:45:3b:55:ff:81:de:d2:34:a5:7e:0d:2c:b7:
0f:bf:56:cb:5a:b3:d6:bd:4a:36:67:0f:b7:17:89:e3:e6:87:
11:06:1f:80:ee:ba:24:75:1d:59:8a:f4:79:2a:33:f8:f1:51:
60:f1:71:c2:b2:54:e2:9d:38:55:da:dd:83:81:f1:74:18:fc:
fc:57:82:13:2c:b2:3c:71:a7:a8:40:95:a7:24:1d:57:09:bf:
5b:4e:e9:f9:0a:95:0c:a5:74:0e:b9:01:26:1d:5a:ee:f1:e1:
61:28:46:49:b0:c1:0d:4a:0c:97:0b:04:11:d4:da:79:18:22:
97:fd:c3:39:ce:85:49:fd:fa:74:6a:3c:d7:55:e2:56:fc:85:
bb:b8:8c:dd:90:46:86:b4:cf:aa:bd:77:0f:bc:9d:1b:24:8b:
48:c4:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:25 2025 by rpki-client