Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier: ++UP6ocvyCMs8vUywepiHVCKAlulMQLbj+SjpLEN08c=
Subject key identifier: EE:EB:1A:06:82:03:0D:54:08:BF:54:24:30:BA:7D:83:5E:19:44:48
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number: 32
Signing time: Fri 31 Jan 2025 05:19:55 +0000
Manifest this update: Fri 31 Jan 2025 05:19:54 +0000
Manifest next update: Fri 07 Feb 2025 05:19:54 +0000
Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: hunhOgJQlUopjWImjlvjDKwKmfDPq3O5jq/64klYljs=)
2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Validity
Not Before: Jan 31 05:19:54 2025 GMT
Not After : Feb 7 05:19:54 2025 GMT
Subject: CN=679c5d7a-682b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:fd:1a:a0:9a:be:57:af:e6:fa:e2:e4:3a:
51:cf:80:21:3d:90:9a:65:fa:02:33:a3:97:f8:36:
95:5c:12:01:64:1c:f7:07:f0:68:6b:94:36:76:06:
36:49:4c:ab:49:57:6c:80:3d:a8:91:87:fc:e4:94:
b4:cc:99:fd:b1:99:88:e6:8a:f6:36:86:71:71:51:
d0:ca:2f:cd:5b:8f:c2:2c:c4:b7:e5:ca:d1:25:67:
1f:d5:4a:fa:11:6d:5a:38:57:76:a4:63:8d:db:03:
0a:d3:3f:cd:d1:52:3d:98:80:16:93:15:78:73:66:
35:f3:7e:44:31:62:f2:61:d9:85:98:1c:98:b9:03:
97:87:5a:11:4f:82:d5:e3:85:a5:c0:1a:6d:72:f2:
78:a4:b9:67:f0:e1:48:c6:ce:eb:08:4d:03:37:15:
39:8a:68:cc:d3:51:59:08:54:b2:f4:87:93:77:cb:
1f:ee:b1:62:1a:b1:10:51:88:ab:29:87:5a:f0:4f:
de:cc:9e:35:d4:89:3f:cf:dd:27:70:da:57:d7:55:
d0:84:e9:3f:28:e7:54:e5:8e:95:78:d7:93:12:65:
0f:ac:2c:24:a0:e8:c8:c3:53:40:d4:76:8d:ed:c6:
c6:93:7c:a9:4d:0f:27:1e:f8:98:7f:06:f8:ed:0b:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:1A:06:82:03:0D:54:08:BF:54:24:30:BA:7D:83:5E:19:44:48
X509v3 Authority Key Identifier:
keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:42:de:ce:b4:9d:b0:50:37:38:1f:d5:48:42:42:fc:fb:
1c:b5:b7:48:f4:86:0f:fe:57:92:3e:82:84:7a:5c:1a:f9:70:
d6:29:80:67:2c:3a:5a:64:73:a9:2a:76:da:ab:47:d0:62:c3:
0c:23:0e:18:85:60:16:01:85:38:75:57:45:ce:e9:94:68:70:
9b:45:d1:61:bd:91:63:57:22:8e:f4:11:58:37:ed:87:26:55:
2f:f0:65:60:80:f0:33:33:c1:e1:c9:39:12:f7:90:8a:c8:84:
60:63:d8:ca:23:4e:0a:74:3b:97:8e:a9:a4:d6:97:8e:e3:5c:
f1:23:96:f3:d2:42:7c:8e:5f:8a:49:70:36:06:fc:08:3c:e5:
5b:09:26:71:83:06:f6:43:38:59:e4:e7:c6:38:c2:b5:ba:b9:
8f:b9:92:cb:94:e3:04:d1:4d:93:4e:2f:d9:2a:ff:b4:60:1a:
de:f3:9e:5d:ee:ed:39:57:90:3b:c5:e2:20:ab:68:46:68:cf:
fc:b7:7b:93:54:3a:7a:f1:2d:2e:e5:ec:84:c7:b0:c4:74:5b:
75:48:b2:e9:9f:18:ac:70:27:c6:95:0e:42:dc:2a:33:cc:d8:
08:74:df:4b:33:92:de:21:96:d6:56:a0:de:b4:ae:45:9d:f1:
4d:7d:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:43 2025 by rpki-client