Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json)
Hash identifier: BhbR0uN0+ftjn56BMipAzQDRfs90YrGFfedb+vmuP2E=
Subject key identifier: BA:1E:06:F1:DB:4B:45:4D:77:03:0E:EC:17:2E:1D:74:32:B1:24:8E
Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
Manifest number: 0149
Signing time: Fri 31 Jan 2025 03:30:39 +0000
Manifest this update: Fri 31 Jan 2025 03:30:38 +0000
Manifest next update: Fri 07 Feb 2025 03:30:38 +0000
Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: miR2PYetK3AkGQ/Ng/+Q8cUJj9ZfuYU7HXa/tRxF7+M=)
2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: /4irTBpoiGzznlRheaSOxr6kHjZLLSh0iN5TT10J9KA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Validity
Not Before: Jan 31 03:30:38 2025 GMT
Not After : Feb 7 03:30:38 2025 GMT
Subject: CN=679c43df-5e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:ac:ea:f3:fc:61:57:15:47:f2:16:f2:24:
e0:c3:10:9a:bf:e6:c9:c5:bf:42:78:02:56:72:72:
95:d8:99:f5:fd:f7:af:7d:33:4e:3b:c0:08:a0:95:
56:b2:73:27:c0:a6:b2:e6:68:8c:4c:e7:aa:36:40:
61:98:93:bf:cd:6f:85:47:76:a9:0a:f2:c8:75:44:
f5:08:26:94:ab:74:9e:4f:4f:9d:8d:c5:0d:5f:75:
c4:30:9e:be:73:8e:c4:f9:24:5b:b9:1a:9e:96:79:
22:9c:66:27:e0:9c:22:62:f9:27:a9:9e:28:4a:06:
16:74:3b:90:09:af:7f:8b:25:86:bd:69:18:2d:53:
44:13:5e:48:50:9b:81:7c:93:88:8c:99:0d:59:e7:
75:be:aa:97:df:e4:04:80:8e:97:8d:7f:dc:3a:9c:
3c:1e:89:d2:ef:17:1c:71:e2:d9:ed:78:32:a2:1b:
e5:29:e4:f6:f7:b2:7d:83:dd:a0:e6:a8:d3:2d:62:
a6:5b:cc:4a:a0:1e:64:86:e1:af:db:bd:4f:40:9b:
ba:59:b5:f9:83:4b:eb:74:90:b0:76:ed:5f:5b:e4:
62:bc:43:48:3c:05:ea:b6:9b:84:90:18:4f:b9:de:
f3:a0:83:00:aa:61:e8:e0:1d:f1:54:91:03:a2:2c:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1E:06:F1:DB:4B:45:4D:77:03:0E:EC:17:2E:1D:74:32:B1:24:8E
X509v3 Authority Key Identifier:
keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:40:28:d3:5a:e1:36:fe:e4:c6:1a:57:59:95:85:2b:0c:25:
92:37:cc:72:1b:5e:d7:1a:7f:9d:b1:1d:6a:c3:72:c7:09:f2:
59:e8:46:1d:5a:13:e9:9a:4c:32:01:85:cf:ce:cd:85:81:d4:
88:18:94:b4:ed:14:1a:28:85:7b:6a:1d:b7:01:6c:73:eb:8d:
2c:c9:da:9e:2c:ed:32:86:9f:cd:b2:99:3c:d9:8d:e7:ed:60:
e1:d1:f7:ad:33:94:58:2c:d9:78:21:f2:2c:9f:28:91:5b:a6:
a5:f5:63:76:3f:e5:b3:a3:50:24:69:22:ab:8e:5e:aa:5f:e3:
87:09:a4:a8:b1:14:27:4c:5a:23:28:c0:3d:b0:d0:60:27:3b:
52:76:5a:9c:bd:d5:1e:f5:65:20:63:ba:dd:26:b5:9f:bb:01:
36:fb:04:8e:38:1c:43:af:e7:ba:a5:e1:91:44:24:ea:c1:bf:
74:1e:74:da:93:d2:89:23:bb:6d:85:2b:d7:b5:8c:91:12:50:
52:9c:04:f8:ef:e2:39:a7:62:f7:88:92:b8:d7:4c:05:5b:bf:
cf:bd:42:14:6b:5d:de:30:78:5a:30:3f:98:dc:91:32:93:9d:
f2:82:eb:5d:99:c8:70:5a:40:32:ed:89:2d:d3:86:da:9a:7f:
c6:c9:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:36 2025 by rpki-client