Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json)
Hash identifier: T1SP3d2hAjAL56enxa/bXM8gkD5lAXTbAtRvisJOxYo=
Subject key identifier: 95:22:45:B6:20:EE:BD:2A:3C:A3:57:4F:4B:7F:E4:5A:F6:84:4F:80
Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
Manifest number: 0154
Signing time: Fri 31 Jan 2025 03:23:12 +0000
Manifest this update: Fri 31 Jan 2025 03:23:12 +0000
Manifest next update: Fri 07 Feb 2025 03:23:12 +0000
Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: pxrgHE4UDJL4/d1Uu0y0jbq/hpz2AypDc8Wgj6ByB10=)
2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: lrJXxDbusDQNnxZVLvp/KiXpw4drpdRHgf2/ruvhTVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2
Validity
Not Before: Jan 31 03:23:12 2025 GMT
Not After : Feb 7 03:23:12 2025 GMT
Subject: CN=679c4220-1e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:2b:76:81:a5:23:a1:b2:a1:21:a2:7d:f8:
a5:d8:f2:c4:c4:4e:cb:52:eb:1d:80:79:5e:9e:db:
03:10:97:04:a5:b3:8f:2a:90:2a:4d:3d:1f:6c:7f:
5e:3d:df:30:b7:a9:3b:97:32:28:cb:3c:f2:39:b9:
87:81:68:1a:98:0d:42:95:d7:7e:a4:0f:31:2c:07:
80:31:8d:d3:2b:a2:69:a3:53:9f:b4:8f:4d:c6:81:
e9:df:a8:d1:a7:11:1c:f9:a0:77:93:6f:02:80:ae:
c2:25:2a:a7:02:6a:30:3c:f3:a3:e1:42:7a:43:77:
de:27:f3:ae:c1:e1:b3:81:1e:9a:22:38:4c:23:69:
a2:58:f3:e7:f6:66:02:94:08:2e:47:ce:1d:15:98:
1a:c9:a0:69:35:48:7a:d4:72:9b:e8:68:a5:10:b9:
f1:42:72:a1:ea:15:a9:d3:0c:85:2a:0d:06:a3:9a:
72:25:45:2c:bd:28:d4:9a:07:fc:e0:18:fa:ac:56:
9d:83:da:76:16:71:82:f3:33:20:3e:80:0b:26:d3:
f5:40:49:0b:0c:c5:2a:96:0f:15:d7:1b:79:60:e3:
33:ba:83:d7:a2:47:a7:95:da:be:11:bf:83:02:f5:
30:3b:1b:f7:68:0d:5a:3c:6e:64:b2:0f:13:f3:97:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:22:45:B6:20:EE:BD:2A:3C:A3:57:4F:4B:7F:E4:5A:F6:84:4F:80
X509v3 Authority Key Identifier:
keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:50:e3:f8:45:87:43:66:27:4b:d5:cd:9b:26:76:89:a1:
8b:57:6b:09:14:78:be:5d:1c:0c:4c:cf:1f:1e:db:c3:03:0b:
ab:b9:8b:43:69:2f:a3:9c:80:74:db:86:05:3f:f7:1f:19:a6:
b0:ad:17:02:88:2b:d7:71:8b:0f:b5:ef:9f:39:c0:97:96:a7:
06:0a:d5:ca:47:f0:52:d8:66:c3:8c:3b:a6:b9:0c:10:0a:25:
68:cf:55:ba:79:0d:2c:a2:2a:05:f8:04:b1:1f:0e:df:4d:35:
39:eb:2b:e6:03:3b:e7:f2:15:40:dd:a8:69:fb:95:56:75:fa:
9f:30:42:45:98:4d:39:09:d2:8a:32:ab:72:15:ce:6c:c4:cd:
50:87:7e:e2:e7:d1:b0:7a:3c:41:d8:0c:9c:c5:d0:45:6a:64:
6f:da:f1:38:48:c2:c7:5a:4c:2e:72:ff:59:52:3f:47:c6:28:
14:ce:91:62:da:5d:50:20:0c:df:8a:50:98:e5:c7:d7:c7:05:
55:b7:9a:2f:c5:24:05:29:55:52:e0:86:91:3a:7d:96:58:e1:
28:62:91:a5:86:18:26:4e:7f:34:a5:8f:60:5d:96:f5:e6:21:
50:37:a1:99:e9:82:5a:23:83:49:5f:43:b6:9a:8f:73:10:c7:
39:eb:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:04 2025 by rpki-client