Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier: Bz5qA6NTFY4cOORa+l3os9+pDcJyReVf/PErGPUEbo0=
Subject key identifier: 0B:AB:E6:8F:E3:E2:4E:58:C7:40:FA:08:C5:BD:ED:67:27:D3:31:E6
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number: 0440
Signing time: Fri 31 Jan 2025 00:21:16 +0000
Manifest this update: Fri 31 Jan 2025 00:21:15 +0000
Manifest next update: Fri 07 Feb 2025 00:21:15 +0000
Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: +UyggNJzSNny8x2tnsgY8JBquti6Eq6vxNI7N2+B4b0=)
2: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: 3KTOI3tChJ1EuHHkZIxY0+a6WeVb+6nR6Jk3wwfwMHU=)
3: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xweR0My4YSEWr28C8V1U/OMEuVwH/Ly7NJUba0hYsCg=)
4: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: c5WQ+yUKORBq8d/u8k3An8QJMDIFK4yVXiwWYWbL5qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Validity
Not Before: Jan 31 00:21:15 2025 GMT
Not After : Feb 7 00:21:15 2025 GMT
Subject: CN=679c177b-9490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:4a:31:4d:eb:88:73:d9:fd:8e:2f:3b:4f:
14:01:43:64:b4:0d:b4:88:8b:42:d6:53:64:62:a2:
c2:01:08:2b:2e:ef:92:1b:39:91:d1:55:3b:0e:e5:
88:7a:87:fb:71:f1:fd:1e:31:a7:00:3b:0c:e6:48:
68:d2:f7:8b:27:88:98:f7:28:6c:82:f4:e8:f7:8e:
2c:0d:cb:52:2c:a1:71:1c:46:eb:a9:17:dd:b1:c7:
1c:ac:c2:9c:6a:35:29:49:a6:89:c8:ea:aa:db:dd:
81:1b:82:41:ff:19:f1:86:b7:3d:67:85:a8:84:81:
05:07:04:5b:ec:7d:31:a2:ed:5b:c5:58:ef:b9:f2:
bc:05:33:fd:92:f9:1f:e1:96:23:8b:b7:bc:79:3d:
71:23:0c:b3:e6:1b:3d:5e:a9:fa:0c:13:9e:ec:76:
35:41:e8:88:8b:78:ff:e4:55:84:e8:3f:68:7e:1e:
7b:fa:91:f3:f5:7f:e3:a2:0f:69:e1:95:b0:c2:c2:
b1:f4:88:d0:54:03:35:04:72:9a:e3:b0:47:11:4b:
c6:16:13:2e:ce:3f:5f:d8:22:de:c0:65:72:1c:11:
e5:91:9d:cb:2a:35:2c:8e:da:c0:33:fd:db:ae:bc:
33:56:6e:01:a9:2d:33:3a:be:ea:a8:35:fe:76:22:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:E6:8F:E3:E2:4E:58:C7:40:FA:08:C5:BD:ED:67:27:D3:31:E6
X509v3 Authority Key Identifier:
keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:28:62:9d:1d:fd:6e:a6:5e:6c:69:a6:4e:e4:5d:88:6e:
82:67:fb:f4:ae:72:37:40:8c:a7:45:ce:48:a0:d2:12:83:db:
ec:7b:91:f7:59:b3:d2:ab:76:27:75:ef:af:e9:e8:93:e0:1c:
86:85:b8:94:ce:94:2a:a2:b7:65:cd:66:88:e4:86:53:cd:6e:
b5:c6:4c:af:a9:86:6e:1c:2c:0a:7b:49:4c:ee:27:3d:00:15:
10:4e:dc:d5:c1:49:dd:9c:31:65:99:20:98:1c:71:af:62:5f:
72:57:f5:d7:bf:1a:62:f9:f3:5e:96:78:8e:b5:b5:8b:08:9a:
81:14:e2:f3:05:7a:9b:35:3f:34:20:22:3a:8f:fd:4c:8c:46:
bb:9e:05:eb:2b:d9:01:e1:ed:5a:cf:8e:fb:ae:95:24:fa:44:
35:90:fe:5c:48:d1:e1:c2:22:09:87:4e:5a:55:04:a9:ee:fa:
ee:79:56:86:25:9f:39:3b:cd:9b:2c:4d:b2:41:6b:69:a1:78:
b9:96:bb:41:c2:69:70:48:67:fc:cf:d5:03:25:6d:b9:56:22:
43:67:43:9b:2e:e1:82:53:64:d9:38:34:6c:09:b9:ac:b5:22:
04:e7:ea:39:b3:e8:23:8d:fb:9e:7e:d6:83:dd:a1:d8:58:82:
32:0e:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:59 2025 by rpki-client