Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json)
Hash identifier: 7+gFLSYQoxYgdcfLgJaqLsdZsJKJYp4NcZ9ROd7efmQ=
Subject key identifier: A9:53:90:2C:3B:68:B5:B3:93:B8:54:9E:72:92:1A:BE:3C:A6:EE:56
Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Certificate serial: 0DC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
Manifest number: 0DB8
Signing time: Fri 31 Jan 2025 17:53:33 +0000
Manifest this update: Fri 31 Jan 2025 17:53:32 +0000
Manifest next update: Fri 07 Feb 2025 17:53:32 +0000
Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: jGr/tWi6mGhNGT296OZOi4KGiJg+ZajLD9V/x2VnJNY=)
2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: mx4Am+cBFSXiPddaACrFcI512PsDACEUWWDSLjunmeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Validity
Not Before: Jan 31 17:53:32 2025 GMT
Not After : Feb 7 17:53:32 2025 GMT
Subject: CN=679d0e1d-ab58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:09:09:d8:65:7d:e7:f6:b4:37:65:b2:9a:
05:ab:6f:ce:20:e3:74:75:a1:0f:d0:5f:dc:61:16:
bc:91:50:b4:94:a7:6e:55:20:92:2c:a2:4a:da:c2:
d1:c9:3e:6d:8f:57:96:ed:5f:a3:02:2c:8a:14:e6:
a3:e2:21:7e:63:9a:bb:cb:a5:28:d8:2f:82:08:b4:
c6:e8:86:bc:73:9f:63:33:ff:9f:8d:80:b7:19:a0:
90:45:de:6a:a5:bb:46:95:4f:ba:5d:95:7c:0c:32:
77:3f:5e:ef:7c:c4:7c:19:8e:4b:8a:f2:35:c7:15:
f3:00:13:7f:2f:59:5d:59:47:67:24:14:f9:a9:d9:
1b:c9:61:57:0c:ef:93:c8:98:a6:4c:68:65:2f:3a:
84:ca:0c:4f:bb:e4:55:87:03:eb:88:4a:c4:12:f9:
e2:86:9f:4a:4a:29:0a:68:87:45:bc:05:0c:78:74:
d3:09:b7:82:93:8d:a7:7c:c4:61:92:c3:ce:c9:05:
1e:f7:1c:16:9b:c6:03:b1:52:50:54:6c:2c:26:05:
92:63:b8:47:e0:48:4f:9b:f7:75:e1:dd:ad:0b:85:
7b:60:39:f4:fc:d3:1e:29:88:96:8e:cb:c0:c0:e4:
ed:23:35:4d:f3:77:a2:74:9e:ec:d0:57:9a:93:40:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:90:2C:3B:68:B5:B3:93:B8:54:9E:72:92:1A:BE:3C:A6:EE:56
X509v3 Authority Key Identifier:
keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:6e:04:28:f5:ed:a6:ca:28:63:c4:cb:56:d6:fa:21:88:da:
39:4a:c4:2c:05:d0:04:14:08:41:15:86:ae:93:bf:f1:99:49:
88:b5:ce:10:c6:6b:9d:b8:ba:aa:2c:5b:f2:c6:40:ab:91:bb:
fa:51:b7:de:3c:40:38:5b:fe:2e:63:39:35:1b:ef:be:05:4d:
ac:50:d3:e7:9b:e5:89:97:7c:8f:98:75:02:cc:74:4f:26:81:
58:6b:1f:78:3b:f9:8f:53:92:4c:e1:ba:4c:9e:17:bf:53:2e:
c8:fa:dc:86:5f:20:7f:74:42:3c:28:22:5f:65:43:e8:a1:ec:
1c:30:fe:f7:93:f3:24:4a:cb:61:bf:15:26:ce:01:4b:0a:da:
ce:f7:9d:dd:a3:cd:8e:92:70:5a:ca:8f:93:05:cd:26:48:de:
2b:df:f6:fa:eb:75:c1:04:40:76:cc:8d:79:88:3c:43:45:67:
77:49:76:ee:75:a9:ce:1b:6c:9b:2e:9f:9a:51:77:1d:c7:03:
92:27:a1:5d:5d:08:c1:b6:12:83:6a:f4:ac:52:31:48:6e:84:
a9:70:04:e3:14:81:5b:79:b8:26:3a:e5:6f:d7:43:07:9e:6c:
4b:7e:75:7b:69:e2:0f:41:f5:9b:d3:44:20:14:b3:b8:fb:f2:
d0:b2:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:23 2025 by rpki-client