Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json)
Hash identifier: fuGGak2iwXhrfZHQzChsQNCi0UBlL14Ancr4OHY74tc=
Subject key identifier: 1F:F8:9E:4D:55:E8:55:6E:99:D2:77:AF:8B:57:AE:33:5D:F0:02:2F
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
Manifest number: 0442
Signing time: Fri 31 Jan 2025 00:21:22 +0000
Manifest this update: Fri 31 Jan 2025 00:21:22 +0000
Manifest next update: Fri 07 Feb 2025 00:21:22 +0000
Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: Wx++6TIEkN6cJ3B2sHGLRJhXkINQ07xahzeKfHHa0tU=)
2: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: 01FpccdP/MsW2CvA7hmJMpiDNjJ1dNkKkLEpim6H7/0=)
3: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: qr8b4jL6pkulS0zDMbButEnYyv8gZUas09Wk3ymII28=)
4: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: TI6U5DDyMx2oNjPAY1onItBRjW+RoIBeg5nOMGrAMag=)
5: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: hL3IFyg9Xwqq4SM4WYiBZDcso6a27q9sQZQ/dFLeUNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Jan 31 00:21:22 2025 GMT
Not After : Feb 7 00:21:22 2025 GMT
Subject: CN=679c1782-65fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:61:72:a0:29:14:1f:17:9a:e8:8f:47:f2:
e3:06:a4:79:9c:e3:e7:0a:cc:ef:20:63:9e:2c:2d:
47:bd:4b:a7:6e:5a:ee:58:2d:e3:4a:d3:bc:7a:41:
21:3f:79:95:82:ee:b9:db:86:cc:37:03:ff:53:0a:
8d:95:05:40:b1:d2:d8:83:b8:3c:06:6e:ff:9b:a1:
eb:a4:c4:b5:12:f4:44:65:c6:73:a1:64:0b:ed:09:
12:2b:7c:6b:91:82:93:cc:0e:0c:d0:8c:96:95:41:
11:d8:cd:ee:91:05:d7:e9:87:71:1d:d4:5b:73:b6:
34:84:1b:da:3b:63:3e:8f:f7:21:62:e7:a5:09:1f:
be:b8:dc:10:be:a4:0c:a9:59:85:69:0e:40:50:8e:
51:79:21:ad:1b:f2:3e:24:2f:11:04:e5:2b:d1:5d:
6b:50:0b:d3:e9:cb:26:14:b7:bf:3e:d0:47:76:7d:
b0:12:81:10:14:ec:73:2a:38:7c:9a:ba:5f:fb:f7:
cd:64:5a:15:58:71:26:47:2a:a1:11:1f:6c:e7:b2:
70:7b:c7:1b:0c:7c:1e:47:d8:07:82:ca:3d:95:87:
43:10:9a:2a:cf:91:6f:59:86:99:09:5e:73:5e:79:
5b:25:70:e4:7f:9e:d4:5a:cb:e8:a0:55:aa:49:43:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:9E:4D:55:E8:55:6E:99:D2:77:AF:8B:57:AE:33:5D:F0:02:2F
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:cb:73:63:15:24:2d:8e:15:43:33:f4:e8:68:29:98:d2:
67:97:19:7b:38:ca:b9:b4:f0:06:5f:63:94:b8:89:18:e9:38:
1e:5d:ad:94:65:0e:2e:49:bc:07:75:ba:d3:3e:ac:5b:ea:82:
b0:01:80:9a:0f:da:33:00:e9:c6:79:f8:56:bf:20:7f:52:2e:
27:0d:39:9c:59:ed:81:10:b4:cf:18:44:32:0a:39:57:6c:f5:
c1:68:7d:0f:37:34:b2:19:38:bb:98:97:53:37:8d:8e:73:cd:
91:57:8a:52:16:06:b5:ff:8d:9e:da:dc:01:c8:08:c8:c2:78:
d9:2f:2a:7f:5b:26:0d:89:f4:c8:08:2e:51:fe:84:7b:86:4f:
bf:10:a0:dd:b2:df:fb:b9:65:d2:fd:ab:1e:29:a8:b2:07:50:
1d:ef:e5:cc:c9:ed:d5:69:64:fd:35:6f:3f:0f:4b:12:35:b5:
16:48:88:27:5f:6d:50:8c:77:8c:a5:e0:d6:a8:57:b2:ec:68:
1c:48:a7:28:e6:76:e7:85:a9:e3:74:cb:3e:e8:ad:71:a9:a1:
a9:2a:5b:c5:c0:3c:a3:19:36:9d:5d:83:b5:b9:70:00:1b:bf:
d4:ec:bd:b7:f1:30:3e:a0:98:fc:83:82:64:7f:cf:28:aa:f1:
28:78:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:55 2025 by rpki-client