Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier: 73vqXeqYWgM0PObF4Q8CUryVPF8NMvq1t+ThFDdUQGI=
Subject key identifier: 12:42:35:EA:AB:21:38:FB:65:17:D6:36:72:5A:D0:6C:A2:8D:DD:AB
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial: 036C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number: 034E
Signing time: Fri 31 Jan 2025 01:09:25 +0000
Manifest this update: Fri 31 Jan 2025 01:09:24 +0000
Manifest next update: Fri 07 Feb 2025 01:09:24 +0000
Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: pfinJlCYFQjJ1ec3+rqmWALwXFnRhIvvtYvaY6jlZwc=)
2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: BfZYjuf+MTJqrBceGA5aBPWPAbWyAIIKEVtel+HzA+s=)
3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: G6DqHnh4blUKVwDCX+3yAB5EHH1Zl+1SenKDUoryx8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Validity
Not Before: Jan 31 01:09:24 2025 GMT
Not After : Feb 7 01:09:24 2025 GMT
Subject: CN=679c22c4-d835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:d5:9f:82:7c:5e:a9:10:5d:62:bf:49:d4:
83:0e:0e:a9:01:18:41:30:32:21:b4:c3:ad:53:85:
28:cb:fe:40:09:51:0f:5f:2c:bb:ce:dc:89:f6:5d:
4b:53:9b:05:f7:1a:f1:95:b6:95:f7:60:6c:d8:75:
59:a7:d1:21:65:05:e7:2c:3b:7d:f8:77:16:05:88:
4d:86:0b:dd:96:08:e5:28:5e:64:a4:ef:84:3f:ab:
ba:63:d6:9f:64:87:92:dc:16:eb:fd:f6:76:3d:3e:
f0:94:6d:d5:0a:c0:6b:f7:be:94:8c:6b:99:a2:9d:
b8:43:0a:14:e5:66:76:62:02:5e:5e:3b:e8:aa:bd:
16:d7:b5:37:13:e8:02:84:a0:61:88:18:25:c2:ae:
46:07:8b:64:58:9f:a8:a4:a2:89:7d:9c:ff:d3:84:
6b:57:5a:b9:c3:36:15:43:6b:b0:c4:52:4d:e0:33:
76:b8:ad:bf:33:cb:85:73:2e:93:77:e9:3b:60:50:
56:70:a5:9d:0a:df:34:d8:ac:52:4c:de:5d:8e:ba:
72:0f:ad:59:10:43:7c:92:ce:19:43:8d:03:12:c6:
7e:1d:b2:73:fc:e5:97:af:af:e4:b5:99:a1:69:83:
25:db:2c:6b:c3:6b:02:88:74:56:a5:42:53:da:b8:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:35:EA:AB:21:38:FB:65:17:D6:36:72:5A:D0:6C:A2:8D:DD:AB
X509v3 Authority Key Identifier:
keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:d7:eb:71:e2:91:e3:b4:9d:84:cf:1f:62:47:bf:fa:d9:
a2:be:aa:96:4c:2b:25:ec:22:f8:7c:b3:9d:37:b5:03:df:48:
98:82:05:64:1a:e6:a3:ef:ee:c2:12:fe:d5:ce:20:9f:f9:7e:
42:3a:51:e7:0f:5e:77:e1:b8:7f:8c:1d:dc:e6:83:cb:94:f3:
8c:53:e3:54:c8:1f:95:0f:52:ba:33:eb:7f:b0:7c:2c:cf:8b:
19:05:2c:c1:3d:dc:38:67:66:1f:fc:b2:67:cd:b1:26:15:8b:
c2:e9:99:97:79:96:fa:0a:6f:e5:7f:fa:ac:d3:70:77:38:e4:
63:2e:aa:56:3f:cd:99:c5:f0:7d:e2:74:1d:db:cd:b4:90:b2:
fb:5a:9e:24:b2:56:10:1b:5f:4b:03:61:84:5f:0c:69:99:c1:
96:97:f3:10:27:0b:52:79:e0:2f:3e:6d:90:80:e3:23:e0:a4:
fb:36:6f:55:70:6f:04:9b:f6:5a:65:bd:18:0b:5e:6e:a3:b6:
0a:65:77:b5:f2:98:65:0d:0f:38:9c:73:26:c3:ba:e2:b0:d6:
11:b6:b4:08:4c:1e:8c:57:62:32:a0:02:1b:40:cb:de:63:0f:
76:3a:f0:d8:0e:7f:38:7f:95:5b:50:9b:08:98:a7:fd:15:68:
a7:1c:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:23 2025 by rpki-client