Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: 2VoX/WC8MydQEGkfGIY6xdu9rd8MCM40tYfqbaSXwuw=
Subject key identifier: 93:67:95:E0:67:B8:AF:86:88:7E:7A:0D:44:A3:B7:B1:5E:23:24:8D
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0B6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0B59
Signing time: Thu 30 Jan 2025 19:10:57 +0000
Manifest this update: Thu 30 Jan 2025 19:10:56 +0000
Manifest next update: Thu 06 Feb 2025 19:10:56 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: lCxMrX0Fz/jrzJTQ9wVt+N7GHJFJ06WcuMDwCtONfiA=)
2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=)
3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Jan 30 19:10:56 2025 GMT
Not After : Feb 6 19:10:56 2025 GMT
Subject: CN=679bcec0-3a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:66:f0:67:9f:d9:12:a1:d4:12:47:5e:bb:
bd:26:dc:cd:d1:f5:c7:b9:e7:ee:c4:96:e9:1e:39:
db:91:24:1b:24:f6:15:c9:16:7a:2a:ee:33:2b:1a:
20:2c:da:b4:f1:5d:f4:35:e4:b7:ec:a2:05:99:89:
12:16:5f:89:3e:92:ef:c3:eb:c9:0b:27:57:13:bc:
39:41:94:22:c9:61:a9:c2:f6:c9:7b:34:c9:41:ae:
a0:b5:65:7e:20:ef:12:2e:ca:89:ad:64:2d:d6:3e:
2b:8f:59:7c:b8:33:59:ed:6b:99:a1:5e:db:ec:82:
46:44:cb:22:7e:ee:fc:45:c5:70:f6:df:ec:90:96:
a2:5e:ae:0a:11:f9:2d:94:5d:08:12:c8:5f:ba:26:
08:cc:31:46:ab:ed:9e:1f:86:b0:45:22:23:b8:83:
14:81:bd:5c:e9:4f:83:ca:b6:ab:30:9c:8f:34:6b:
2f:07:a9:dd:3a:46:17:88:75:af:6f:f2:18:b0:1d:
5f:b5:4b:b6:0a:41:cd:93:92:12:27:4d:7b:07:d4:
53:58:e2:16:bc:b3:9d:8c:fb:99:2d:11:d0:c1:c8:
fa:25:62:9b:d5:59:f2:19:58:c0:e9:78:22:d3:3e:
1f:b7:e7:b7:24:2e:f5:56:30:7f:7f:a3:8e:4e:7a:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:95:E0:67:B8:AF:86:88:7E:7A:0D:44:A3:B7:B1:5E:23:24:8D
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:c4:1d:5b:a4:00:43:3d:47:1f:76:82:d6:0e:01:44:e3:f5:
84:26:b6:69:da:ac:71:d3:4b:a5:2a:7f:d0:fd:dc:73:dc:59:
ae:16:d7:f1:44:92:84:3a:f5:77:d7:2c:22:bd:7c:60:bf:54:
e1:ec:18:b2:50:1b:3c:98:ad:5f:eb:d1:1b:ca:8b:ef:bb:87:
3c:4d:a8:af:4e:b1:83:d4:78:93:6a:3a:b7:1c:8a:e3:2d:7c:
f5:55:89:b3:5e:0e:39:9d:fd:a9:fa:db:30:76:7c:88:1c:95:
5c:97:18:2e:d3:bd:6f:ed:87:06:70:56:7b:5b:64:79:03:ba:
18:9d:93:7c:24:2e:06:ee:1b:18:06:03:f1:d6:8c:d4:01:a0:
dd:4b:f4:35:3f:98:e8:f9:ac:1e:6c:0b:14:68:bf:1f:01:63:
14:03:0c:fc:47:0e:08:73:57:4e:bb:49:9b:b2:33:f3:57:54:
cf:31:1a:fa:ba:f3:98:6c:32:be:96:60:79:cd:e4:52:7e:50:
65:a9:68:e4:2b:67:b5:a6:20:29:6b:d7:b0:1e:69:4d:41:97:
23:81:76:26:0b:0f:02:6e:44:b6:54:2b:6d:72:7f:e8:0c:96:
d5:9b:4d:f7:42:e3:c5:a0:b4:c3:aa:36:6f:ca:45:68:1b:a6:
70:3d:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:58 2025 by rpki-client