Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier: /9ofK0s8+Ym054XpxXopekDLSmyIWRFbga4t/fJ6NJY=
Subject key identifier: 4C:68:D6:4C:E2:FE:0B:36:24:33:7D:BF:4C:1B:3B:D4:4E:31:E2:A6
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial: 100A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number: 0FF7
Signing time: Fri 31 Jan 2025 17:26:47 +0000
Manifest this update: Fri 31 Jan 2025 17:26:47 +0000
Manifest next update: Fri 07 Feb 2025 17:26:47 +0000
Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: 1YBXH4u6pLW3NFPCv1LHOY2TF5taUFTZblG5K12Mw/8=)
2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: 1xAA2p3bRzKtkuwJYgmnpWotzfIy6qgcGQhWEvGOqKo=)
3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: KDtUJt1Jtjn2LNZNEN2QFLXYazsl0VQjLQGBBHjjEOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4106 (0x100a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Validity
Not Before: Jan 31 17:26:47 2025 GMT
Not After : Feb 7 17:26:47 2025 GMT
Subject: CN=679d07d7-7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:74:51:58:d9:6d:37:b0:b4:52:40:03:0d:
3f:da:5b:8d:ad:e2:29:69:40:10:89:fa:36:b7:8d:
d1:f5:2e:ac:01:16:d5:12:f5:f4:b7:7a:9e:85:41:
ed:59:49:b9:a0:8b:21:fa:7a:82:6c:80:af:77:d6:
ed:c0:17:0b:19:f3:93:93:31:84:53:44:8a:51:1a:
ef:73:73:27:fa:5f:8a:60:fe:22:28:e1:68:3d:b3:
97:69:44:a0:cf:f0:c4:cb:96:ba:4b:f5:f2:3d:b2:
19:43:2f:a3:52:f7:52:ba:d8:3e:eb:ad:2f:b9:f8:
99:c5:79:49:b8:54:3d:30:73:0f:b1:82:30:12:78:
a7:47:9a:b2:da:71:fc:d7:97:6d:f2:b9:74:ac:8e:
3e:af:96:d9:c4:01:e9:3e:71:60:40:c9:73:18:2e:
be:90:af:24:67:99:1b:dc:00:93:13:91:15:75:37:
46:2e:b7:4d:f3:1e:eb:40:06:52:5e:21:be:a5:b3:
e8:6f:5e:0c:55:a7:b3:ff:56:6a:1f:d4:b9:25:bf:
10:de:6c:c3:99:87:c4:cc:7e:bd:95:80:3e:00:fe:
52:6c:39:3b:08:5f:ac:56:1d:89:15:ee:c3:b9:3a:
e8:6f:41:f4:e4:13:90:fd:27:a4:63:ff:09:6c:e8:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:D6:4C:E2:FE:0B:36:24:33:7D:BF:4C:1B:3B:D4:4E:31:E2:A6
X509v3 Authority Key Identifier:
keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fc:c5:12:11:58:d6:70:0c:16:28:7a:9b:17:bb:cd:9a:3a:
30:46:7f:cd:97:94:0b:8c:4d:b2:45:db:71:47:1b:66:8a:90:
05:59:da:f5:7c:7e:67:8b:4c:eb:2a:48:ea:db:2d:b0:b4:fa:
03:cb:26:48:ec:d6:8e:9e:c3:82:ca:4c:5f:78:b3:99:80:87:
cd:ef:45:c8:39:da:03:6b:63:e7:13:aa:8a:85:cf:e5:fb:bd:
7a:28:bd:23:42:58:c7:e3:39:9c:fd:ff:2d:1a:11:6c:5d:c4:
24:c9:3c:97:27:a0:9f:9e:fa:8f:fb:30:0f:14:c4:c8:9a:96:
0f:d9:7f:f4:40:1a:9b:db:cc:94:d8:10:ad:33:a1:d0:11:e3:
8b:49:86:0f:3e:13:1c:cc:07:ff:a3:d9:db:2a:6a:5c:54:0f:
84:3a:3b:81:e8:c9:ce:74:5d:29:7d:db:87:ce:88:bf:e0:f7:
ec:90:2f:9a:14:da:5e:dc:45:22:d7:50:2a:14:a9:eb:69:58:
af:1d:99:e3:07:7c:72:5f:36:5a:1a:47:d1:b1:68:1d:5d:cd:
74:2f:b3:93:5b:38:36:fa:f6:9e:51:a4:3c:bd:61:8f:23:d6:
b7:09:27:ea:8f:3d:02:97:59:22:6b:e8:db:e5:49:7b:03:f4:
ee:7e:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:52 2025 by rpki-client