Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier: iWyHe7RfMlZInn47PB0IOxsyxL+RLSbr/32SY2BPcwc=
Subject key identifier: 02:1B:FB:14:97:DF:1F:8C:70:DE:78:35:07:0A:0A:50:29:43:97:81
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number: A2
Signing time: Fri 31 Jan 2025 05:19:54 +0000
Manifest this update: Fri 31 Jan 2025 05:19:54 +0000
Manifest next update: Fri 07 Feb 2025 05:19:54 +0000
Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: 45N8B0OE0ht6ihTEjX26b+xkSsHPdmKoR0vAaBbqbk4=)
2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Validity
Not Before: Jan 31 05:19:54 2025 GMT
Not After : Feb 7 05:19:54 2025 GMT
Subject: CN=679c5d7a-c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:9d:52:67:67:4c:a5:d5:58:28:3c:70:d3:
60:20:75:a2:f8:5c:c8:14:5a:1b:71:2f:e7:cc:d0:
0c:9e:99:a4:27:3e:2d:06:c1:8d:c7:3f:e4:30:9c:
aa:4c:1b:67:27:d2:69:c5:07:46:f9:28:54:30:51:
c1:ab:74:1b:8c:10:b7:e3:71:cb:58:0d:4f:a3:5b:
ec:d0:2c:8f:2c:c0:c7:90:f7:f8:a4:e1:a2:63:02:
7a:7a:e4:fb:0c:f6:76:2f:44:f0:f9:80:50:40:04:
58:34:ea:d0:31:84:c9:c1:56:3a:f2:0b:88:1d:33:
d5:86:20:7a:2c:c0:04:47:bf:d4:67:be:02:04:d7:
82:c3:5d:38:36:ad:4f:67:4f:d6:d4:b8:e9:7c:c0:
fa:c0:25:fc:45:5c:3f:80:60:05:9b:94:36:45:f2:
d2:e5:c0:3f:2b:a9:c3:83:f7:2d:cb:8f:4a:21:3b:
04:21:aa:46:09:c9:dd:a3:62:bf:19:9a:7a:6d:3b:
e6:b2:07:77:5e:14:b1:e1:b9:04:d2:77:df:b9:24:
6f:d1:a0:9e:10:c8:3d:c5:52:d8:88:69:c0:66:3c:
a3:a0:50:e0:a5:47:df:d4:79:ba:c3:a1:74:c6:78:
c4:39:0e:24:59:e8:e1:12:7a:25:84:5f:a4:f3:ea:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1B:FB:14:97:DF:1F:8C:70:DE:78:35:07:0A:0A:50:29:43:97:81
X509v3 Authority Key Identifier:
keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5b:68:b6:54:6d:e2:63:b2:31:41:41:e3:4f:11:3e:e5:f1:
88:03:76:0a:d8:b4:95:b4:d5:6e:d5:cd:d7:7c:0d:8f:77:c4:
7a:22:e5:34:be:b1:bc:7f:05:0a:62:00:62:5f:24:20:73:38:
6a:b7:4d:b6:38:c4:1f:25:48:31:2b:b6:ee:b8:8e:f3:50:05:
ed:bb:55:a2:91:b8:ed:18:50:be:05:cd:ad:ec:3e:44:92:b2:
6c:c8:14:88:e8:3f:f3:74:2a:10:b2:a8:14:21:c7:e9:1d:42:
30:a5:dc:47:19:b6:9a:dd:b4:d6:7f:1e:e8:ff:84:da:69:b2:
e4:ce:63:90:38:d3:05:a8:3f:20:d6:60:b7:70:db:91:3a:df:
42:6c:62:c3:4e:3d:82:87:7b:c6:a3:8a:5a:07:1d:c3:97:25:
df:7a:71:ba:be:dd:44:28:96:f8:c8:f3:57:0a:db:99:f4:e9:
77:c0:da:4a:a8:25:1e:d1:4f:6d:5f:d9:e6:75:b1:1b:f0:e9:
97:48:f9:15:c1:86:aa:7d:92:06:af:f6:f4:9b:18:21:a8:52:
bb:14:36:d8:43:6b:c6:fa:bd:5d:09:06:db:58:9f:51:fe:15:
87:b0:ce:7e:60:15:90:12:22:29:2f:da:d3:c6:bd:b6:cd:82:
fe:d1:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:16 2025 by rpki-client