Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier: dmklC4oR+tUJBHe5XYakyYnNloCT+GI/YIstjRmG+tg=
Subject key identifier: E9:AE:49:98:4B:99:12:B9:FF:93:EC:D7:CF:1A:F9:03:83:23:3C:D6
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number: 0BD1
Signing time: Fri 31 Jan 2025 18:40:08 +0000
Manifest this update: Fri 31 Jan 2025 18:40:07 +0000
Manifest next update: Fri 07 Feb 2025 18:40:07 +0000
Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: xmQC7mBnmp6KDW2x/Iv/eMxgiynozAlLxTcTCgZi3MI=)
2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: fVpTiz95zT96q52Sv8C+QJmIZKHHi2b0N2xlEcRtgMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Validity
Not Before: Jan 31 18:40:07 2025 GMT
Not After : Feb 7 18:40:07 2025 GMT
Subject: CN=679d1907-f465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:59:e6:9c:6c:af:49:bf:ed:b6:7b:d6:f4:
43:8c:d3:4b:70:dd:92:57:9d:d0:4e:c3:2b:3d:e6:
51:9b:b7:14:44:1f:81:4b:82:5f:d0:57:4d:c6:85:
48:29:b7:e5:43:66:70:e5:62:08:c6:d9:63:da:1a:
e0:e1:0f:ac:de:cd:54:1f:2b:80:59:09:ca:5b:2e:
a7:2b:38:a0:32:24:67:f7:14:df:d6:e5:2e:e3:1c:
14:cf:75:45:94:da:1e:6c:b2:4f:d7:b5:20:16:d5:
10:3e:22:61:4e:2c:a1:c9:fe:8c:a6:a0:40:01:91:
cc:ae:b2:88:eb:c5:d8:19:38:c7:00:e0:a2:c7:02:
e0:5c:97:7d:02:ac:6f:81:73:b3:aa:ee:bf:be:17:
cd:9e:43:ab:c3:76:1f:d9:25:95:2c:0a:50:e4:78:
7c:67:7f:14:ca:58:c3:f4:cc:03:d3:cf:37:85:06:
0f:37:74:c8:d1:51:da:63:a8:e0:a0:55:85:98:b2:
23:a9:86:ff:5b:30:9a:71:92:03:a3:34:8d:50:a0:
f1:95:34:30:d7:da:cd:92:ce:81:3f:b0:34:98:75:
97:28:f3:be:24:5d:b9:05:37:9e:7c:bb:11:08:65:
de:3d:6a:1b:c6:39:5f:9a:72:ca:8f:d7:90:0b:dd:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:49:98:4B:99:12:B9:FF:93:EC:D7:CF:1A:F9:03:83:23:3C:D6
X509v3 Authority Key Identifier:
keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:b6:44:94:ab:ec:c1:58:fc:9e:5a:7d:ff:79:ce:eb:4a:
82:0f:70:d4:42:9f:c5:db:0d:00:4c:7f:70:c9:00:78:4d:c1:
ae:94:67:00:60:74:99:e5:21:48:c6:46:ec:45:a0:35:5f:54:
0c:3d:ce:f2:e5:a4:d8:92:20:b2:8a:05:81:2d:c4:27:7c:df:
56:f7:9a:66:14:06:b9:fd:27:fc:7f:fb:46:98:55:84:f8:80:
77:50:a5:50:73:c6:34:2e:67:fd:b0:be:32:55:c7:53:e1:22:
05:13:8c:f3:78:41:c8:e8:2f:72:ce:03:dc:52:48:4f:4a:fb:
f6:88:a2:78:32:be:37:d8:06:fd:16:e4:16:72:04:9f:3a:47:
52:c7:82:76:f2:bc:0c:ad:fc:e1:8f:05:f5:64:4a:93:5e:7c:
55:7d:62:42:61:a6:84:4c:2b:ec:c1:aa:57:d4:15:f4:1b:b8:
43:0b:96:f2:dd:95:87:7b:2f:de:ec:c1:26:f5:51:7b:43:84:
bc:c5:bb:35:d4:ac:8a:14:8c:43:d4:0b:58:7a:41:1f:15:c2:
b8:02:8a:42:2f:c5:8c:7d:61:19:c3:58:c7:ff:65:4e:f6:7b:
ca:b4:c8:c7:e6:f6:fa:ff:25:11:fb:71:c4:c9:33:0e:8b:0e:
88:8e:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:16:55 2025 by rpki-client