Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json)
Hash identifier: kEA5UmM4cb6Sw0fcgkdoXgsBFLIuO+LC/7lEH6iRetg=
Subject key identifier: 67:88:36:99:D3:29:FA:32:32:E3:58:D9:96:A5:AE:3D:1C:49:10:8E
Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62
Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
Certificate serial: 08FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
Manifest number: 08F2
Signing time: Thu 30 Jan 2025 20:27:22 +0000
Manifest this update: Thu 30 Jan 2025 20:27:21 +0000
Manifest next update: Thu 06 Feb 2025 20:27:21 +0000
Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: hnkHKkq6tGeNDQ29ZTZaBPYDI4UyskaaR1nNxVAdHCA=)
2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
Validity
Not Before: Jan 30 20:27:21 2025 GMT
Not After : Feb 6 20:27:21 2025 GMT
Subject: CN=679be0a9-2f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:d5:c8:5c:86:00:93:52:12:b6:59:d9:35:
3a:d1:5c:8f:ae:eb:f9:42:75:d6:4c:a8:46:31:ba:
16:27:6e:46:1e:9a:6e:60:bf:49:bf:9b:96:aa:76:
42:b0:93:c9:56:a9:1b:eb:bc:f1:0d:05:b3:9c:9b:
e7:05:1c:1c:4a:34:25:f0:42:73:61:ba:7f:b0:b5:
46:20:3d:21:ad:b4:f0:ae:8a:83:92:0b:73:1a:bb:
f1:20:00:d5:32:36:c9:ef:78:b6:e0:b2:e2:8b:24:
e8:80:8a:00:8c:bb:6e:53:31:e7:74:1f:ef:57:19:
ca:17:db:2d:a1:e6:85:c4:ed:a7:f3:bc:73:86:96:
d3:d4:07:48:a3:8f:eb:77:de:8c:91:e0:d3:bc:47:
e7:b3:9f:40:b3:8d:99:20:98:87:d1:f9:7c:e1:7c:
f9:52:f6:0a:d8:36:b4:3c:1d:76:b6:c7:47:c5:3a:
be:18:c9:00:27:a6:ae:ff:e6:b1:50:16:ea:e5:22:
cd:a7:fc:85:a3:c7:e8:68:72:34:fc:94:5b:d3:a8:
7b:65:5d:ca:8b:aa:bc:76:8e:8f:46:ed:a7:64:6d:
7c:05:fc:b0:c3:9e:21:2b:a5:5f:70:2f:41:f8:dd:
7e:df:6a:43:77:2f:07:48:e5:b9:4d:16:53:92:f5:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:36:99:D3:29:FA:32:32:E3:58:D9:96:A5:AE:3D:1C:49:10:8E
X509v3 Authority Key Identifier:
keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:a6:98:55:ec:85:b2:31:72:f3:af:a9:e2:77:89:33:f1:9b:
b2:e3:1e:17:dc:02:da:7c:f9:ba:cf:ea:4e:ac:c5:d0:86:68:
8e:8f:f4:39:0f:24:36:f4:e5:66:ff:5b:84:df:0c:da:eb:4e:
85:0d:fd:9f:08:79:86:b8:e6:b0:7a:84:53:2d:84:03:55:16:
ed:13:1d:53:a0:ed:9a:d8:df:9c:0f:a3:0b:76:83:48:8b:78:
4b:27:3c:6c:4a:3c:38:ca:98:46:0d:24:77:7d:1a:0d:b8:b5:
e0:fb:ce:51:37:88:38:03:03:ae:1f:25:7b:56:4d:31:4d:a0:
47:3d:44:7b:69:3e:8b:b1:b8:dc:e7:9e:6c:35:92:29:5c:3c:
d4:99:34:96:35:27:07:5b:bd:79:ef:d9:ad:48:3f:d1:db:59:
39:9d:92:6f:50:e1:86:7f:43:c9:81:c9:54:f5:a3:c5:98:bb:
34:89:5f:9d:af:ab:f2:38:c8:be:c8:b5:27:c1:58:94:c7:79:
ef:bc:cf:c7:53:35:4f:00:3b:87:9c:65:ca:ee:b1:b2:73:fe:
81:47:da:9d:4c:75:12:32:93:50:1f:aa:5f:fa:02:96:48:74:
b2:7a:de:37:b2:eb:38:c6:13:a4:71:7f:68:7e:1d:53:68:6c:
26:f5:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:52 2025 by rpki-client