Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier: 7XIL2V4CIlAi0/bcMv8uGY9ll5rT+fMXSsSW8eIXGIc=
Subject key identifier: D7:C6:EF:9F:99:DA:88:33:F3:5A:4E:20:34:37:79:3C:3B:D3:87:D2
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number: 01D8
Signing time: Fri 31 Jan 2025 02:17:10 +0000
Manifest this update: Fri 31 Jan 2025 02:17:09 +0000
Manifest next update: Fri 07 Feb 2025 02:17:09 +0000
Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: cyFQQrXt8AcDEWbFDWap+ZORm6+RqFXTaNLITj9OLyY=)
2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: nwv4OnHIeiaOuT9R5A9U+o0snvNWMEn4+NiK+Y5blsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Validity
Not Before: Jan 31 02:17:09 2025 GMT
Not After : Feb 7 02:17:09 2025 GMT
Subject: CN=679c32a6-a3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:88:86:1c:ac:ea:b4:9e:01:6b:7b:27:24:
63:91:1e:ef:a9:21:58:fa:67:3d:8d:a6:d1:d3:34:
9d:cb:24:4f:1c:bc:75:a6:7f:08:9a:b7:fc:6a:26:
6f:fe:97:47:4d:40:6c:09:27:2a:44:42:47:4a:e3:
b0:d6:ea:69:e5:34:0e:07:1a:d0:d0:19:ad:6a:dd:
fe:90:f1:54:7a:96:dc:3b:86:67:72:ee:35:08:d2:
31:1f:3f:76:1a:93:d1:95:32:fb:b9:df:6d:98:16:
dd:07:a7:d3:a7:4b:1a:3e:30:6e:e0:f7:98:68:30:
92:07:59:ae:71:04:11:85:20:59:98:09:16:92:a1:
d2:5d:cc:3c:2e:c6:da:93:50:6f:85:1c:92:41:1d:
80:e7:74:a7:eb:e9:03:ed:2f:63:d7:92:38:15:b5:
b5:39:7b:2c:24:1c:59:0e:3e:a7:fe:de:28:cd:39:
a8:aa:4f:eb:e7:11:c6:07:06:b8:62:e2:48:13:f2:
82:c6:fd:a1:33:93:bb:25:d4:97:ad:3b:a1:bb:d2:
54:d0:8a:ca:21:7f:a2:79:7d:7e:72:b1:78:14:a3:
27:63:22:e8:8d:1b:04:e5:f9:3f:98:8f:48:3c:94:
1c:6f:a4:d8:5e:31:85:da:21:9e:b5:d1:07:15:71:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:EF:9F:99:DA:88:33:F3:5A:4E:20:34:37:79:3C:3B:D3:87:D2
X509v3 Authority Key Identifier:
keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:e3:39:56:96:8a:8d:ac:3a:00:56:bc:9d:b9:80:9a:59:
d1:87:3a:57:c4:04:20:3c:84:b4:a1:8f:7d:5a:31:30:55:5b:
b8:19:3f:db:a3:16:09:c0:4d:88:ea:5c:63:aa:a1:92:28:5e:
ef:4f:03:77:cc:0b:2d:34:33:23:b0:1b:41:81:7d:9d:1e:ed:
a3:44:3b:a6:36:d7:f1:30:9e:22:fa:a3:35:f8:93:27:6a:0a:
5d:10:26:a0:a1:0e:0d:cc:4d:fc:01:ff:23:4e:3a:7a:81:e3:
a9:5d:95:a3:77:09:32:f2:f5:41:df:85:c4:f8:1f:c9:df:06:
4a:4b:95:50:4f:93:5b:51:9e:36:cd:14:0a:d4:70:0c:eb:1e:
27:8a:61:6e:d0:0a:64:4d:2a:74:21:c7:5c:04:96:14:59:88:
12:87:e3:49:73:52:ee:e6:60:9d:cd:b0:53:90:71:70:ac:aa:
10:76:1a:c9:c6:77:2f:e8:16:5a:53:d5:61:c1:6e:db:ec:0d:
dc:23:65:cc:ae:69:9d:f8:b3:42:89:fc:a8:9b:94:5c:5e:af:
99:3e:d2:cc:3b:f9:72:ba:f8:0e:f8:00:9d:f5:95:1e:2e:ac:
34:d0:54:c3:ae:a5:ba:20:b5:c2:e6:36:61:08:a9:a4:ff:72:
eb:0c:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:50 2025 by rpki-client