Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json)
Hash identifier: TG5SvvVaWR4Gh8AAP8+5sTrWJvFr94k+T9/jEkHdLWM=
Subject key identifier: 1E:DE:A6:1F:FD:D6:4E:27:B0:11:9D:CE:E7:37:61:09:77:6D:F8:A0
Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Certificate serial: 1149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
Manifest number: 1140
Signing time: Fri 31 Jan 2025 17:15:17 +0000
Manifest this update: Fri 31 Jan 2025 17:15:16 +0000
Manifest next update: Fri 07 Feb 2025 17:15:16 +0000
Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: mI9DeCBunRtIHhZzvnerSz2UUelN9TrlTHdmKEPulKY=)
2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: GyMFJG7vpXHHpv3BwX4n2XQfqCBxAhnBsVULLZ+wmKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4425 (0x1149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Validity
Not Before: Jan 31 17:15:16 2025 GMT
Not After : Feb 7 17:15:16 2025 GMT
Subject: CN=679d0524-70d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:b2:90:98:7e:62:f5:da:e1:41:25:64:a9:
ed:43:be:6d:82:81:81:9f:37:e5:67:39:fc:9d:22:
46:df:ec:9e:2d:1c:b2:82:5b:ed:25:05:27:7b:8a:
0c:f2:0d:eb:38:e0:55:83:57:b0:1d:84:9c:8e:61:
4c:c6:c6:2f:bf:ae:af:1f:b6:e5:59:d0:2a:91:8b:
cc:c5:e5:14:06:66:d2:53:cf:1b:95:31:47:c5:5d:
83:c7:28:fb:7a:58:54:3f:b1:f8:36:d3:e8:8d:5d:
ff:35:75:70:e7:b5:d8:4d:39:22:6a:24:ce:11:49:
2f:57:90:32:57:e1:08:ed:c7:aa:b1:fa:8d:7f:6e:
04:60:9f:d1:22:8b:4c:49:18:a7:83:19:fb:02:37:
c3:ac:a2:48:93:3a:06:ed:97:30:32:06:e9:0a:bf:
7d:f9:8b:78:d5:be:ef:e5:ed:57:2c:07:f1:0a:4f:
60:f1:86:b4:d4:7c:f8:88:02:d0:d8:75:bb:ac:28:
6a:fd:14:f7:5e:7a:84:4a:b2:77:74:1a:76:86:35:
ea:fa:1f:a2:cc:20:57:cf:9e:90:2f:19:40:9a:af:
1a:df:21:79:f1:2f:6e:59:7b:ea:40:3d:64:bc:3e:
40:a3:95:2d:66:b0:f9:20:75:9f:74:6f:54:4a:50:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:A6:1F:FD:D6:4E:27:B0:11:9D:CE:E7:37:61:09:77:6D:F8:A0
X509v3 Authority Key Identifier:
keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6a:12:55:6b:0e:81:09:45:5c:19:02:b5:c5:e2:87:b2:01:
e8:a6:b0:2a:6c:f6:fa:8a:42:70:5b:4a:b9:31:10:6d:02:de:
26:cf:42:d0:be:74:be:f6:be:77:14:d6:c0:fb:05:1b:57:72:
1c:ed:a0:7b:b3:b8:cf:4b:7b:fd:db:2b:ca:89:4a:23:30:3a:
df:64:39:3f:3d:51:0c:73:d6:76:2d:d4:59:f0:b1:06:57:48:
dc:c5:52:09:50:22:0d:eb:41:83:dd:dc:ef:72:6f:7c:3e:01:
2b:25:03:10:50:a5:59:40:63:fa:cd:f2:96:55:62:68:36:78:
fc:ed:06:e6:20:b5:a3:53:b4:ce:7d:df:ab:d0:30:ae:6c:dd:
ce:9a:64:da:92:05:65:5f:5c:27:c2:4f:0a:c7:af:bd:90:08:
8c:d0:99:5f:3e:24:ed:93:97:dd:cd:34:c0:7e:20:bf:b0:0b:
a9:14:4d:f8:c2:be:53:52:c6:5a:07:a7:91:7e:43:a9:f0:fd:
a1:49:7e:41:dc:e2:b0:9a:9f:89:63:1f:19:1a:05:19:76:8a:
fc:39:a3:96:2a:e6:27:51:8f:3a:04:62:d7:33:dc:dd:1a:2d:
f7:a6:44:3a:f1:cd:d7:f3:61:31:39:2b:c3:63:a1:0e:2e:f9:
5e:92:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:21 2025 by rpki-client