Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json)
Hash identifier: Fiv5meohGRHQmAQNEx/+kw2Tfqj8nfPRgbkhdOsFtZA=
Subject key identifier: A7:F6:85:AA:7D:C5:B6:70:41:8F:55:DA:4B:D6:AE:31:E7:47:CE:28
Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Certificate serial: 15D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
Manifest number: 15CC
Signing time: Fri 31 Jan 2025 16:45:25 +0000
Manifest this update: Fri 31 Jan 2025 16:45:24 +0000
Manifest next update: Fri 07 Feb 2025 16:45:24 +0000
Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: 0pvPhkNlRtpmQuisP/5H1hsAHA3O1W3prK3C2ge5s1A=)
2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: kDacZR8moKTX56aD4xPOhhoyt0qIcn1U0w7VaT9wQjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5592 (0x15d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Validity
Not Before: Jan 31 16:45:24 2025 GMT
Not After : Feb 7 16:45:24 2025 GMT
Subject: CN=679cfe24-6021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:2b:38:d5:97:82:7d:7a:58:e7:ee:c7:23:
ad:ff:2f:7a:c0:41:9f:c8:be:bf:62:cd:c2:cb:d5:
ed:da:9b:fd:6b:25:a9:01:76:08:79:a5:b4:78:5f:
6a:c4:b9:7e:5e:3a:99:5b:c5:9c:72:54:d4:8e:c4:
aa:b8:b0:1d:20:87:da:d4:8c:52:9b:ed:98:57:25:
fb:70:f4:2b:fb:15:17:a6:a7:cb:54:87:b4:72:93:
de:8d:93:37:2d:6f:a4:2c:eb:e7:97:cb:97:c8:7a:
e3:a9:6d:4d:ed:7b:f2:ca:c5:a5:dc:e9:52:73:d9:
25:45:f6:62:97:4a:5e:0b:67:41:66:61:73:61:f8:
b5:63:ae:8f:94:d6:14:f4:bc:69:fc:4e:e3:4f:5d:
5f:bb:0d:df:e3:24:85:57:b6:10:6a:cc:ff:87:b5:
ff:c4:1f:e4:70:37:64:23:35:be:1c:de:cf:bd:75:
1d:4b:bd:9b:a4:8b:94:c7:bd:0f:5b:47:1b:aa:b9:
f8:01:b9:af:76:05:2e:cb:3e:b4:0d:89:0c:84:00:
89:71:8f:d0:30:bb:37:6e:be:6a:42:1f:d1:d9:49:
52:5f:41:d7:ef:af:2a:3a:9e:28:2a:93:0b:79:4b:
20:4f:86:56:08:08:16:77:79:bf:4b:a0:70:a1:7e:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:85:AA:7D:C5:B6:70:41:8F:55:DA:4B:D6:AE:31:E7:47:CE:28
X509v3 Authority Key Identifier:
keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ff:2f:a8:e0:1b:5b:e7:21:ec:10:08:73:b3:0a:7d:cf:bb:
a4:d8:bc:0c:9a:53:92:4d:99:e0:a8:b0:17:3c:62:8b:47:33:
e8:b8:0c:7f:22:47:48:e4:bd:60:71:f3:e9:06:de:77:05:58:
48:5a:9b:ca:51:31:eb:da:6e:77:c3:46:52:00:c7:e6:bc:9c:
94:0e:eb:70:ab:55:f3:8f:fe:5c:48:b6:98:91:29:f8:26:b5:
e8:6a:2e:e8:9d:58:3e:cd:a9:23:2d:5b:3a:53:7f:6b:56:26:
3c:4d:74:6c:a1:3c:9a:b7:f7:42:a2:f1:98:89:68:40:fa:13:
17:44:22:03:30:fb:8b:66:cd:37:59:0d:1b:ec:00:e8:a6:db:
54:82:f1:52:cd:7c:32:0d:03:c4:c0:d4:4b:34:0f:e5:e1:97:
d1:6b:56:25:89:07:f8:c2:fe:2b:37:ea:fe:dd:2a:e0:30:f2:
9e:0f:9c:68:8f:1e:14:b4:94:73:02:0d:81:0e:0d:5e:eb:dd:
20:30:c8:a3:9b:1f:ef:70:90:1a:14:bb:17:d2:c3:49:a3:25:
b9:1d:a7:4f:07:bc:c5:21:3e:d0:a1:7a:30:9a:4b:ff:7e:21:
b8:c4:0f:f9:ae:25:2e:8f:83:07:d3:69:fb:a8:89:13:6b:b3:
c3:cc:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:03 2025 by rpki-client