Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json)
Hash identifier: MGYdfPbQela1e5Tx9RLrrcNCyrVk2tsRyiEWqzNx0CY=
Subject key identifier: 60:9C:88:09:41:82:C1:8F:67:DD:AD:73:53:E0:7B:81:AF:36:56:81
Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2
Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
Manifest number: 0424
Signing time: Fri 31 Jan 2025 00:24:50 +0000
Manifest this update: Fri 31 Jan 2025 00:24:50 +0000
Manifest next update: Fri 07 Feb 2025 00:24:50 +0000
Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: fmio+74+K20OEWVzXi2NV+KH8cCfC98cFBvnI5nC8qA=)
2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2
Validity
Not Before: Jan 31 00:24:50 2025 GMT
Not After : Feb 7 00:24:50 2025 GMT
Subject: CN=679c1852-8730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:4e:0e:e5:f4:43:a0:36:1c:f1:95:bd:26:
65:31:b2:eb:71:e5:7e:9e:69:38:04:a6:4d:c3:33:
e6:39:5e:8a:65:5b:8c:d6:d8:78:d3:2e:0c:4a:d3:
9a:11:ca:33:b8:85:72:92:e8:12:e5:c7:1e:89:40:
d1:79:a3:75:56:13:d5:a7:4d:98:34:91:17:d7:16:
63:c3:c5:6f:19:54:32:d3:1c:62:87:fe:50:1e:d8:
fa:86:09:33:7a:ae:ea:5f:d4:62:27:17:3d:39:56:
dd:08:ea:d6:85:c0:0e:74:c3:fc:4a:2e:7e:4f:6d:
10:ab:7e:52:1b:42:b8:ed:cb:82:f6:c7:76:3e:3b:
cf:98:ad:e0:03:a5:16:69:46:2c:a0:19:14:42:8c:
1c:e6:57:58:53:5f:30:25:b9:c5:d1:36:fb:a9:93:
95:9e:04:b0:a5:a0:ec:91:2e:73:c7:43:a0:d4:fd:
19:91:e6:0f:45:fe:a5:04:f0:94:a0:11:6f:50:15:
f7:8b:08:a1:22:51:9f:f6:11:d8:79:b3:85:94:30:
27:70:0b:fe:13:b8:4e:de:d1:61:56:a6:d9:d4:74:
16:f7:0b:87:30:57:00:0e:71:02:fc:00:39:15:e3:
d4:8d:85:32:dc:59:19:f9:c4:d0:59:e5:b5:1d:b3:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:88:09:41:82:C1:8F:67:DD:AD:73:53:E0:7B:81:AF:36:56:81
X509v3 Authority Key Identifier:
keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b1:9c:ec:63:d3:97:cb:4b:88:b9:c2:14:48:a6:4e:0d:3f:
37:3b:8b:82:3f:93:79:ff:bd:99:a1:11:bc:cf:eb:8c:9a:f9:
4b:05:5f:d9:b7:03:55:d2:b0:99:9d:ea:ec:42:36:fc:9a:99:
10:45:17:c5:14:9e:e8:6a:8c:b4:df:7a:30:88:c0:e4:91:be:
17:e3:3d:95:ca:10:0d:4c:e7:8f:73:82:9c:ed:3c:a6:38:65:
52:2d:6d:75:79:e2:2f:ba:09:26:d3:ca:bf:53:35:26:df:81:
43:b0:b1:ea:c9:07:3f:d9:ae:1e:e4:9f:aa:cb:75:f0:72:df:
25:ef:f5:4c:fe:ff:a6:0c:11:73:cb:66:3f:ef:bf:ea:2f:ba:
39:dd:d6:c2:ba:85:9a:92:27:3b:cb:d2:49:1c:fb:a5:e6:c1:
ed:d1:bf:95:b7:45:82:69:85:db:8d:9a:a4:8c:ba:02:9e:5a:
97:e8:35:6e:77:61:ce:a7:f1:88:e2:f5:c6:c2:13:33:05:42:
ee:27:8d:ba:0a:29:fe:8a:06:6c:14:c2:50:13:b0:44:d7:c9:
a3:b4:b1:87:e7:88:e7:9b:58:a7:d4:3a:52:28:81:ed:96:3a:
db:ec:e2:5f:32:21:ad:08:d8:30:9a:15:1e:73:f5:ce:4c:96:
d9:46:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:47 2025 by rpki-client