Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier: lUYr8FzzEF4SZ8wkm9VatG12S2UGdyn/6DQVopzYdYA=
Subject key identifier: 79:44:FF:A9:8C:34:C7:C8:12:15:70:F3:F3:92:F5:AF:2A:E8:C3:DC
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 245E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number: 2446
Signing time: Fri 31 Jan 2025 15:48:37 +0000
Manifest this update: Fri 31 Jan 2025 15:48:37 +0000
Manifest next update: Fri 07 Feb 2025 15:48:36 +0000
Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: jGCmGk2rITkUHG9wzL55UJsUVaqowhnhsRJrZu/IYio=)
2: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: EQJEwI6hBDPCVTYBcU1MDA5dcAO+zNo1IBrEYTkEo78=)
3: 15ABECB27AE311EF9E1B0741C4F9AE02.roa (hash: PPxTiu0HuTnV15nJLWxoQRGMwl1+HbVxOpDpDPhTeJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9310 (0x245e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Validity
Not Before: Jan 31 15:48:37 2025 GMT
Not After : Feb 7 15:48:36 2025 GMT
Subject: CN=679cf0d5-c99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:dc:8e:0b:1e:b8:ec:5d:04:2b:e2:e7:c2:
70:29:af:28:fb:7d:2d:bf:bb:74:31:a8:56:2e:9f:
15:5b:57:9e:2d:56:5d:5c:88:10:76:ed:77:d3:dd:
fd:12:95:21:c7:e3:57:31:30:1c:da:39:61:3b:5d:
ed:66:d8:d4:88:0e:06:42:5e:bd:ce:07:c0:8e:f4:
37:42:e0:e7:fb:e3:48:1c:cb:c0:50:0b:3c:27:e0:
24:36:02:2b:37:f5:93:55:76:00:6f:7f:98:af:c0:
f4:22:91:e5:3b:05:c3:1d:fc:d2:93:d7:a3:6b:fc:
a0:a8:15:80:ed:2d:da:be:7c:38:c4:20:0f:4f:2b:
8b:9d:50:a5:b6:b9:46:2e:93:7d:24:f2:eb:ed:e7:
ca:30:f9:d0:e3:cb:73:c3:4f:a3:c7:f1:dd:19:d7:
de:3d:30:16:40:7e:30:ed:ed:96:a4:d2:c7:11:d1:
70:dc:a5:53:96:ae:c9:a7:5e:52:a1:10:f4:e0:3e:
8d:1a:c1:3b:72:01:ee:fa:f3:82:5a:d6:ff:35:7c:
92:96:c9:fa:65:7e:a6:a8:00:ef:d4:3c:ec:cd:17:
f8:21:a0:b0:25:c7:8f:68:2d:06:21:b9:0d:d2:d5:
ef:b1:81:1f:b1:61:87:60:03:1c:d0:e1:db:81:30:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:FF:A9:8C:34:C7:C8:12:15:70:F3:F3:92:F5:AF:2A:E8:C3:DC
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:13:3a:af:b2:4b:60:b8:97:10:48:6c:43:95:19:74:61:
d8:ba:01:6a:1a:4a:d8:db:fa:8e:6b:58:a4:a1:46:60:41:56:
3a:b7:92:a6:30:9d:d8:76:a4:e9:37:44:eb:fe:99:8f:16:11:
8f:6b:f3:51:00:f9:b7:14:09:49:d2:ac:1b:5d:de:fe:f9:ac:
3f:00:63:7b:bd:c5:30:12:8a:29:d7:47:48:1d:2d:96:5c:af:
16:78:d9:91:e2:1d:ac:c8:01:fb:5c:be:b6:46:e0:f0:ca:d2:
2d:f3:ff:81:93:ea:d1:67:dd:92:02:4a:d1:ef:b8:6e:a2:fe:
3a:99:08:ba:dc:24:be:9f:66:2b:07:e0:3c:b5:68:9a:42:7f:
95:7a:77:cb:d2:d2:2e:34:05:78:30:6b:89:7c:20:bc:01:b0:
9e:bb:3e:f1:fd:97:24:73:cc:b0:13:d5:b5:1b:60:fc:f3:06:
67:11:03:cf:26:bb:39:21:77:f5:41:31:41:d1:24:ae:90:e8:
fe:a8:98:79:67:2f:b4:15:1a:60:6c:a6:64:bd:9b:81:71:33:
8d:0c:32:6e:d4:0f:98:a6:a9:f3:75:42:84:6f:c9:06:d9:30:
71:91:c1:83:81:e3:92:14:59:d0:26:68:3a:b3:d0:0a:aa:f2:
11:d1:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:49 2025 by rpki-client