Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json)
Hash identifier: eY3P89WLIK/BuNEhuxGNtzd4bMuVrww1AHr4f6hX62s=
Subject key identifier: 00:CF:30:55:7B:F3:C3:74:C4:BF:CF:0C:C1:1B:71:E8:93:56:C6:BC
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 13DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
Manifest number: 13CC
Signing time: Fri 31 Jan 2025 16:57:29 +0000
Manifest this update: Fri 31 Jan 2025 16:57:29 +0000
Manifest next update: Fri 07 Feb 2025 16:57:29 +0000
Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: CpMtCnGGF3kqbyLG0kbdLfKof9oylI1z3goP0GWS0bA=)
2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=)
3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=)
4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=)
5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5087 (0x13df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jan 31 16:57:29 2025 GMT
Not After : Feb 7 16:57:29 2025 GMT
Subject: CN=679d00f9-522d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:5a:3d:38:6c:5d:14:20:e7:75:fb:76:9c:
04:8e:4f:68:6a:58:5d:77:36:48:46:36:67:e2:96:
0e:4e:d8:d5:07:2e:ce:bf:12:1a:56:8e:c0:74:a9:
0e:69:42:e2:ba:34:3d:5f:3f:c1:ce:d0:fc:26:a5:
55:3a:0b:f0:9b:e6:6d:ed:ff:fe:92:ad:b6:2b:f5:
49:6b:d5:0f:be:fc:de:1d:3e:72:94:ae:fb:ae:f0:
94:63:b6:3d:5b:d2:9b:6a:5f:4b:1e:f2:4c:a9:4c:
3b:99:14:ea:40:97:16:ea:35:0a:1f:f8:0b:4d:83:
01:7c:42:fc:df:c6:cc:6d:30:85:fb:39:17:71:6b:
5f:24:8b:92:7e:6c:a2:2c:ca:1c:b7:04:78:e8:6a:
15:6c:58:51:4c:92:f4:91:82:51:54:5b:bb:35:a0:
66:d5:25:d6:fe:43:34:5f:02:ba:57:74:58:70:5b:
19:e1:54:ef:0a:49:ef:40:e0:23:c8:f4:82:77:5f:
c5:86:cf:5b:45:4f:ac:3b:39:b0:25:3d:ea:b8:f6:
7b:98:6c:74:bf:3b:db:ad:e7:ae:4e:4f:1b:e3:7e:
47:fd:ae:47:bc:c8:8e:4d:46:4e:94:1b:d2:d5:56:
af:87:3a:20:a6:bb:d4:c6:34:74:8d:16:8f:a3:d0:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:30:55:7B:F3:C3:74:C4:BF:CF:0C:C1:1B:71:E8:93:56:C6:BC
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:75:5b:88:a3:33:5c:e5:5f:c4:82:f0:3a:56:83:10:e4:
cf:18:30:b6:b6:ff:79:fe:ac:a8:eb:f8:26:34:da:08:8f:14:
28:ce:99:7d:dd:e5:46:68:80:8e:3f:9d:3e:a1:c7:19:09:fd:
29:e3:24:79:33:a3:1e:c9:00:3c:ce:31:0c:0c:19:aa:9e:b6:
3d:e8:90:86:67:ce:8f:cb:8b:7a:06:d1:74:1e:0e:91:ba:62:
86:d3:5f:72:45:f5:db:40:59:71:d4:d4:93:63:63:28:a5:4b:
19:f5:e4:f8:8e:86:3c:47:43:51:c8:1e:9e:16:71:ab:30:6f:
a7:ca:53:46:ab:d2:8d:b2:17:9b:b0:1f:a6:53:eb:cd:d8:0b:
6e:ff:2f:f3:8d:53:a1:6d:01:14:3b:eb:c2:3d:8a:ab:23:16:
b3:2a:60:d4:7f:4d:f3:b0:e9:c5:ee:ac:91:d6:fa:ea:e2:43:
5b:89:b1:c1:f6:20:7e:1c:4a:fb:1d:b7:4e:3d:83:83:1b:cd:
c6:28:13:bd:41:f0:94:60:54:fb:10:b6:8e:cc:c5:60:78:50:
c2:80:e1:99:b1:0c:c4:ef:ed:da:4b:3e:65:92:92:0b:8b:9c:
14:5e:7c:ea:34:ba:02:3d:b6:88:2d:a5:41:cd:a4:48:4d:22:
95:32:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:58 2025 by rpki-client