Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier: 6mDZqgX5exIjDD7hk9qsnAoufmj+dDWDvS9VIkjaJUU=
Subject key identifier: 08:B2:66:D6:DF:2A:6C:E7:80:5A:4C:8F:91:49:26:70:E7:C4:95:43
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number: 0C11
Signing time: Fri 31 Jan 2025 18:23:55 +0000
Manifest this update: Fri 31 Jan 2025 18:23:54 +0000
Manifest next update: Fri 07 Feb 2025 18:23:54 +0000
Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: pAbgJueaAJJIUnwvlsaMRLl2Xs/CRGLqtJXz1uKzuiM=)
2: 719728B803EF11EAB301F66FC4F9AE02.roa (hash: //Y9sRim1JuVKbuAKlrRjn3d7mdHR+lghtxL77FdfiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Validity
Not Before: Jan 31 18:23:54 2025 GMT
Not After : Feb 7 18:23:54 2025 GMT
Subject: CN=679d153b-d9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:a2:4c:22:a5:9c:c3:02:ac:dc:3e:c1:ce:
93:fe:97:7f:99:d9:7c:26:dc:bc:dd:c6:4d:9c:03:
62:c7:76:f9:01:08:c1:07:16:9e:c3:9a:b7:15:a7:
8a:da:76:e4:f8:91:e7:09:9e:67:d8:b4:a3:b5:9a:
8c:de:6f:80:80:56:cb:a9:ba:78:e5:91:75:a3:46:
05:86:a4:21:b9:e0:22:d1:27:45:4b:81:63:9c:d3:
36:8f:b2:57:7c:7e:49:7e:81:9d:aa:7f:88:e8:53:
55:1f:38:02:85:a3:f2:e2:74:09:74:79:4e:c7:df:
54:cc:a9:c2:2b:e6:9a:c4:c8:6f:5d:e3:d0:8b:ac:
5c:a8:ac:61:09:47:3c:8f:62:62:fe:76:48:4a:50:
65:70:2c:61:b8:2a:11:ac:e9:9a:32:de:c9:44:db:
26:4f:c7:9d:41:dd:7f:6c:c1:a0:22:ff:eb:e0:14:
a5:0a:44:53:8b:b7:45:49:f4:55:d5:78:38:46:df:
91:8d:e9:9c:d5:97:71:ce:ff:0f:a6:cf:73:3b:d2:
74:27:10:5f:f6:97:8e:03:5f:d3:b3:01:2b:b3:99:
58:02:94:b5:0e:63:75:b5:e8:f1:59:57:b4:c1:39:
04:84:30:45:8c:af:69:e0:f2:b6:e6:29:95:66:84:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:66:D6:DF:2A:6C:E7:80:5A:4C:8F:91:49:26:70:E7:C4:95:43
X509v3 Authority Key Identifier:
keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:a3:7d:1c:c3:ef:cb:5e:0c:66:e6:00:f3:58:2e:72:5a:
16:b8:e7:40:a4:ff:b3:e4:10:aa:ce:78:52:96:be:c8:db:00:
42:73:9d:21:d3:72:65:03:29:25:fa:50:de:7c:d9:e9:05:06:
bd:33:52:da:21:d5:f6:5c:46:fb:d3:78:19:44:19:c4:63:76:
b7:ec:06:7e:4c:b8:fb:c1:48:56:e4:e3:9b:ea:7b:d6:f2:57:
7f:16:9a:ad:5e:64:27:3b:a0:91:5f:c3:31:d2:39:35:74:6a:
03:77:7f:7d:15:61:a5:85:8a:8e:48:f3:3b:5d:dc:5a:63:0d:
5a:fb:5e:79:73:65:da:3e:35:d6:11:46:81:6b:07:af:d8:47:
65:65:c3:76:a5:21:ae:fc:e9:14:3e:b6:13:7e:78:e2:ac:5b:
99:0f:02:84:26:e3:8c:e2:92:54:df:96:eb:1f:d3:e8:fc:90:
74:33:31:49:3e:55:ff:6b:e5:32:d3:d1:f8:29:dc:17:f2:f0:
35:69:6e:e2:c1:69:ab:8f:d6:93:93:3a:2a:2e:fd:d8:65:d1:
89:77:aa:ff:39:e7:f1:fe:b0:c1:90:19:f8:c0:68:57:28:4e:
29:a9:f3:1d:a5:3f:61:15:5e:fd:27:3c:0a:4b:7b:94:de:4a:
15:cd:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:05 2025 by rpki-client