Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier: zND3XRSi/1pha3wXFf6mjNo6R9S3graAqo7gJ9nMII0=
Subject key identifier: E4:56:1F:A0:AB:FD:00:AD:95:04:E6:B8:26:C1:41:65:37:1C:3D:86
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number: A5
Signing time: Fri 31 Jan 2025 05:20:39 +0000
Manifest this update: Fri 31 Jan 2025 05:20:38 +0000
Manifest next update: Fri 07 Feb 2025 05:20:38 +0000
Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: r5w8OXJnURHH3gTvfKJikQY98vPhIaGSz2zlYthF7G0=)
2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: 2ce2Q0ttLGEsbw3JwNBLdsXBERRq9UXcUfzc1vkNo7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Validity
Not Before: Jan 31 05:20:38 2025 GMT
Not After : Feb 7 05:20:38 2025 GMT
Subject: CN=679c5da7-ab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:89:e0:08:4f:11:d6:dd:61:c9:39:b9:77:
c8:d7:f2:3e:d2:59:4d:6a:14:11:22:69:94:03:69:
b2:ac:90:30:09:f0:44:f4:e4:2c:66:fd:4e:eb:3a:
10:69:71:9a:73:58:d5:c5:a7:51:84:12:ae:8d:9e:
47:47:2e:0d:cf:35:2f:a4:68:2c:80:9d:4b:0e:5d:
64:54:94:4d:14:3c:41:78:f1:86:e2:8a:1d:0e:58:
b6:98:ab:37:91:00:42:5a:a2:e3:96:26:35:ae:8f:
bb:83:9f:25:e5:9f:a5:35:f4:85:18:e4:b5:00:23:
75:ee:a3:18:fa:54:a5:5f:32:f6:7f:cd:5d:5e:f0:
a2:ed:19:bc:0b:ac:7f:64:db:31:d4:65:9a:4e:e0:
e0:56:05:af:24:32:32:f8:ae:b2:70:50:a4:ec:4e:
b7:52:64:20:19:c4:e2:33:6d:b3:e7:a2:93:45:15:
91:6a:8b:1c:c6:48:3d:f7:77:bd:d2:78:9b:9c:a4:
42:6a:b4:e3:0a:2f:52:8b:19:7a:93:fe:10:0c:43:
cf:21:7f:a2:3b:cc:b1:13:59:d6:5a:05:b7:e7:c6:
c6:83:94:6e:34:59:a2:ca:df:e2:3e:2a:fc:ae:60:
7a:61:73:fe:e8:25:97:b6:e6:2e:b3:11:7b:0d:91:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:1F:A0:AB:FD:00:AD:95:04:E6:B8:26:C1:41:65:37:1C:3D:86
X509v3 Authority Key Identifier:
keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c6:ff:b3:f5:38:43:cd:ee:06:83:5f:a9:c2:62:67:6d:4b:
30:56:a2:fb:02:e8:a9:38:4e:48:3d:0b:1e:c3:01:4b:45:69:
f1:a8:a9:e9:82:c6:da:9b:35:45:74:27:01:f0:59:25:97:f6:
51:81:3f:da:09:d3:75:fb:17:f4:09:d0:7f:5e:63:09:a3:3c:
59:cd:44:db:56:da:4c:14:ef:25:f6:ee:19:a5:ec:cd:50:55:
c9:83:8b:57:62:0d:25:da:5b:1e:7d:13:17:f2:3a:ca:78:78:
dd:a1:e8:3c:68:e8:a9:8c:73:ce:b1:4f:a3:50:b2:27:d6:b4:
da:f5:83:97:54:7f:29:6e:0a:dd:63:46:67:db:dc:66:e6:0a:
2b:5a:ab:44:c7:9f:d0:9a:8f:5a:da:a8:27:d8:68:e9:fd:36:
54:8f:e0:a6:62:18:a7:8c:d1:bc:55:01:89:4d:a5:78:77:82:
85:87:5f:b5:f1:f0:20:d2:13:ef:b2:6c:6f:ad:97:00:39:92:
fa:7c:45:10:8c:25:95:f2:8a:47:3c:61:91:76:d4:9a:bc:f1:
cf:d9:4a:fe:c5:ee:b6:ab:11:1e:04:e2:a8:77:ef:de:ec:54:
f8:58:54:0e:36:55:d3:dd:e4:2e:37:f1:3a:dd:55:53:9d:97:
41:a3:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:32 2025 by rpki-client