Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier: MNaHU57e7YWm/8TP0/LhZ4wdBcmzcku7HruhP9uMyB8=
Subject key identifier: 96:08:4E:90:E0:E6:C4:DF:A4:0E:16:4B:37:AE:D3:28:AF:29:06:6B
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial: 3477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number: 345B
Signing time: Fri 31 Jan 2025 14:46:32 +0000
Manifest this update: Fri 31 Jan 2025 14:46:31 +0000
Manifest next update: Fri 07 Feb 2025 14:46:31 +0000
Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: w7iGylxsSGYGAVdWfe5/J1OzzY4xhZzLgIDGumS4qAU=)
2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=)
3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13431 (0x3477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Validity
Not Before: Jan 31 14:46:31 2025 GMT
Not After : Feb 7 14:46:31 2025 GMT
Subject: CN=679ce248-a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:46:bc:5c:f9:3b:73:cd:80:89:c1:a6:fe:
a2:26:8c:eb:41:07:df:e7:e1:85:ba:49:47:8a:6b:
fd:6e:b0:25:05:14:8e:e9:64:32:02:a7:a7:05:5f:
3d:f2:b1:14:f2:d3:dc:1d:ff:22:1d:8c:70:d4:6b:
f8:2f:94:cf:38:01:c2:01:a6:f0:c7:c0:9c:d0:18:
e9:f3:cc:b2:46:61:cc:4e:bb:27:78:ff:b7:40:f6:
c9:ee:b0:56:e1:a2:0d:dd:e8:04:80:d4:10:b7:48:
1e:a3:24:89:5b:87:53:38:f6:f6:fb:d7:4b:4e:e4:
d9:7c:b8:49:5c:26:15:30:ee:24:c7:a9:f8:1c:fc:
1c:d3:6e:fb:47:ae:37:63:5a:bc:20:78:a3:43:c7:
f7:af:89:2f:02:3e:46:8f:80:0e:69:9d:4b:1b:51:
6b:80:c1:d3:3b:1a:96:45:22:e8:c6:ae:96:70:7b:
69:9a:48:f7:59:5b:f2:74:d5:4d:dc:2a:fc:62:e4:
e9:40:fd:f1:c1:9f:7b:c1:6a:d6:44:64:d9:0e:b0:
82:7c:a7:18:15:ae:c8:5f:16:3c:6e:d4:b8:42:73:
0f:ab:36:00:cd:da:03:91:c1:91:f4:33:b1:3e:fd:
8a:9f:37:42:cf:20:d7:34:3a:ce:b1:03:59:59:26:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:4E:90:E0:E6:C4:DF:A4:0E:16:4B:37:AE:D3:28:AF:29:06:6B
X509v3 Authority Key Identifier:
keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e0:cf:52:c5:eb:cf:08:b2:01:45:2d:ef:2e:c5:c1:f7:ce:
b7:da:1d:6c:3e:1c:30:16:6b:9f:87:ce:fa:20:94:95:98:ba:
ce:54:c5:59:fd:ac:b4:75:f9:9e:68:26:39:53:ec:0b:09:ca:
a7:69:77:0f:72:8d:b0:0c:df:2f:e4:12:b3:db:b2:ca:1f:aa:
de:db:22:1d:3f:43:2e:bd:01:cd:33:b5:1c:74:69:35:8f:f7:
71:1e:5f:d5:18:b3:8d:a3:c2:ce:15:59:62:4a:ee:5e:3e:15:
a9:ea:89:e7:aa:f6:30:e7:48:91:e8:36:bb:25:fc:7a:0e:52:
17:c2:f0:9b:65:d3:c1:bb:82:49:7f:8c:6f:95:dd:25:c2:94:
40:47:a2:80:11:1a:ad:08:48:11:5f:45:6a:9f:40:9b:01:46:
be:cb:a6:50:e9:d0:c6:dd:6c:74:b4:66:73:b3:3b:31:e5:5e:
fa:81:b2:26:c9:fa:c9:3e:25:fa:de:ec:2e:85:b4:d4:13:4b:
e4:82:9b:cb:cd:82:63:0a:34:f2:6e:d3:b2:49:2f:94:f9:dc:
9c:13:62:5b:e4:4b:f0:8a:1a:ed:d3:49:40:95:7f:ff:20:4f:
8e:9d:78:c1:96:3a:bd:f2:8a:a2:b1:87:fb:b9:c6:69:56:92:
c6:b6:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:04 2025 by rpki-client