Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier: IpF7Q1OR2NvEv5ezSom6J8qUD8QgRqhCEmzoZdxe83Y=
Subject key identifier: F8:BE:DF:3B:12:C4:BA:79:6B:4D:C9:93:AA:44:F1:D6:35:A5:65:BB
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number: 0325
Signing time: Fri 31 Jan 2025 01:17:19 +0000
Manifest this update: Fri 31 Jan 2025 01:17:19 +0000
Manifest next update: Fri 07 Feb 2025 01:17:19 +0000
Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: +K/f+sBnV5YtiTc6nkjqvOMt0aEF4NfclqYNckiMoEo=)
2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: XTIn6xd6LAQNjR8zYGrEopF6yPf5strTO17Pxq6MJp0=)
3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: 793xsUqNZCct53yJajRGlSIE/c6ELGxRJKtUEFm7DNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Validity
Not Before: Jan 31 01:17:19 2025 GMT
Not After : Feb 7 01:17:19 2025 GMT
Subject: CN=679c249f-7c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:3a:b9:e8:07:5c:3e:e8:18:d9:19:94:63:
7b:2e:44:61:80:ee:16:fc:1f:34:5a:e9:17:44:18:
fe:14:39:1f:e7:02:f4:45:71:aa:c6:bb:84:f0:a9:
fd:ad:62:99:fd:3f:8a:93:06:33:d4:84:64:81:e4:
2e:10:d5:c0:4d:c4:22:5b:93:59:10:7a:d6:fe:fc:
00:5f:83:20:08:a6:70:3f:bf:07:56:0d:85:14:79:
29:e8:51:2e:b4:e4:bd:10:af:4c:38:50:7a:76:e7:
c2:79:14:1e:7f:05:fa:4a:89:55:bc:16:15:60:a3:
71:8c:b1:97:12:c8:e7:ff:15:c2:38:1a:69:59:ca:
62:d1:b5:35:2c:39:e7:39:a4:a8:3d:cf:c0:fd:37:
51:14:e7:53:c2:33:2d:25:0c:65:c7:bc:87:bc:97:
e3:f8:d8:1a:65:69:07:77:28:eb:18:c5:ed:cf:ce:
55:76:71:cf:3c:b6:ff:38:2b:eb:8b:63:68:e1:16:
ab:03:60:8b:80:e7:d7:e2:bc:22:64:68:12:e3:5d:
58:70:e9:ba:f9:84:0d:97:1a:3e:ff:95:74:c1:dd:
37:41:8a:73:af:d3:13:54:3a:b7:1a:af:09:bc:bf:
f0:1c:d8:39:f9:01:06:e0:dc:b7:e9:5e:8b:b7:45:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:DF:3B:12:C4:BA:79:6B:4D:C9:93:AA:44:F1:D6:35:A5:65:BB
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b7:55:8e:97:50:dc:23:49:be:20:7c:c9:de:78:18:aa:13:
7e:b7:43:3b:0e:83:5b:4e:d4:8d:3a:e1:d5:b4:f0:f9:c8:e8:
59:18:77:3a:ae:48:04:91:da:8f:d1:b2:b7:c0:c4:61:d5:2b:
dc:b6:53:9a:14:f4:ea:e6:d0:9a:66:98:7d:78:f0:8a:e3:15:
b6:be:b7:9b:40:2d:5f:81:26:21:d3:b7:9c:ac:c0:23:81:79:
3d:67:2a:88:ac:e7:a8:5e:63:dc:2a:33:19:58:08:1c:04:af:
35:70:47:dc:df:ef:fc:0c:c5:39:26:f6:6d:61:c1:7d:2e:86:
4d:d8:04:ce:11:f5:2a:f2:db:a1:1d:3b:7e:fe:b9:37:f0:f2:
b7:e6:72:bd:86:28:70:10:aa:8e:35:be:c0:f4:fe:26:c4:bc:
12:ed:45:1e:89:b4:08:0a:45:32:f3:69:ca:39:7a:f6:e4:7b:
52:ce:27:d1:9e:5c:b1:1c:41:b2:13:13:e3:3d:9d:84:bf:e1:
b3:08:d1:68:80:80:fc:2c:fc:57:55:a5:04:46:70:00:82:4a:
d8:a8:c8:04:24:fb:83:a7:b1:ab:16:4e:d0:3f:07:d2:2f:8e:
b6:42:75:2f:8b:bd:1f:46:bc:47:6c:cf:92:0b:a5:cf:11:ee:
4c:8d:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:15 2025 by rpki-client