Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft
File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json)
Hash identifier: Kem25ASm9gpf+ZlibuStzw+D6e9QeTlcHESFNE2nq0E=
Subject key identifier: F8:2A:AB:DC:17:55:F0:DD:91:37:FD:D7:A3:D0:61:22:55:E5:76:CF
Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE
Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE
Certificate serial: 3478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft
Manifest number: 3460
Signing time: Fri 31 Jan 2025 14:16:52 +0000
Manifest this update: Fri 31 Jan 2025 14:16:52 +0000
Manifest next update: Fri 07 Feb 2025 14:16:52 +0000
Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: g7A9lQoQK44PFrjsDoFC23bSfgLoxN8M9lwGMBtnYAA=)
2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: oKEra+z5HTLTSNTTjpMj+EhrYzyjYHuTj8yp31ybe8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13432 (0x3478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE
Validity
Not Before: Jan 31 14:16:52 2025 GMT
Not After : Feb 7 14:16:52 2025 GMT
Subject: CN=679cdb54-6eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:6c:f1:cd:04:8d:60:c7:a5:54:1e:66:92:
2f:73:80:c3:ab:52:85:8c:dd:e6:7c:87:38:e4:59:
25:74:10:9d:11:9b:80:05:fc:d4:b5:6e:80:30:75:
84:66:a3:d2:ec:bb:ea:3a:20:95:80:08:a5:6b:f5:
5d:43:8b:81:50:0f:54:45:8d:8f:1a:60:9a:0c:ad:
07:12:00:3b:a5:a9:bb:a7:04:58:73:79:63:7b:b9:
f2:33:4e:c8:42:67:85:d3:4c:f6:ac:48:0d:30:b8:
39:7a:cc:47:8e:d5:6e:ed:b9:5f:3f:e1:e5:69:ac:
ef:23:d5:e7:0a:8c:57:63:d0:37:06:60:77:56:55:
0c:7e:61:24:de:da:8e:bd:d4:63:f4:e8:de:90:fa:
c6:d2:ad:89:c0:b6:61:e0:b5:fb:26:c6:4b:ff:48:
ba:ca:15:89:4e:f5:3f:ca:5b:61:7a:76:6c:57:a1:
6e:3b:f2:57:b9:d0:9d:49:83:f3:e9:94:12:9e:e8:
42:57:4a:be:59:10:b7:f9:33:74:86:09:78:ef:51:
19:4f:96:1d:aa:30:74:79:62:a8:65:bb:d0:b5:78:
80:98:80:44:b4:43:79:d1:69:cd:4d:ea:00:06:26:
b3:65:11:1a:27:cb:aa:45:a2:c0:a5:1b:5c:58:95:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:AB:DC:17:55:F0:DD:91:37:FD:D7:A3:D0:61:22:55:E5:76:CF
X509v3 Authority Key Identifier:
keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:62:a8:bc:3a:f8:23:b6:e0:87:b6:5c:8a:22:f1:5d:03:a7:
84:58:b2:c5:3b:c3:bf:07:34:b2:15:ff:76:19:38:f8:f9:77:
c3:6c:2d:16:c5:83:68:f4:b1:3f:cf:6e:c7:50:6a:79:ce:b5:
61:56:d7:01:3a:35:0f:df:26:2e:95:dc:bb:31:11:d7:c3:47:
64:36:9c:4a:5e:67:3a:2b:cb:09:36:95:87:bb:38:be:3f:ef:
7d:6a:3b:d6:4f:7c:f2:cd:85:a9:75:bb:4e:30:14:c4:78:49:
8a:af:0d:eb:06:d5:9b:69:be:fb:d3:a5:9d:e6:e3:ba:27:17:
13:01:1f:17:f1:2f:3d:bd:bc:ab:4e:58:f0:f7:dd:fa:b1:e6:
de:ae:2c:ee:dc:b2:34:94:bf:80:bd:dd:49:d9:7f:54:f3:91:
bc:08:9f:51:ce:b1:73:b2:40:2e:4f:42:3b:56:0f:9d:8d:31:
2f:33:bf:f3:f6:8b:c3:52:09:7b:d5:ec:a4:8f:3d:f2:57:e7:
f7:63:99:2b:e3:e5:be:e2:10:05:ad:df:12:c2:ae:b7:b7:7b:
82:d4:ce:be:bb:0a:7e:1f:19:78:2f:da:9a:e5:e6:0c:8a:e6:
b9:ce:9b:d1:e8:f3:3a:1a:ae:58:09:ee:27:da:c9:3b:76:50:
a4:38:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:26 2025 by rpki-client