Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier: wWXmux3HPDW+dArgYYvKT97aUKbWoxoqoxTaJaDC1qs=
Subject key identifier: DD:F1:2A:EA:2B:D7:3E:DF:7C:FE:B7:0F:50:DC:77:97:32:88:F6:9E
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 3473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number: 3462
Signing time: Fri 31 Jan 2025 14:23:14 +0000
Manifest this update: Fri 31 Jan 2025 14:23:13 +0000
Manifest next update: Fri 07 Feb 2025 14:23:13 +0000
Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: WS9/RuxgEv3gxjgpq7RUX9kRsUo/yid4So4BHh1qQPg=)
2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: nOTO05trzCD6uEEv4FInP/xVHgXMSyk7YCzU2yFeaPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13427 (0x3473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Jan 31 14:23:13 2025 GMT
Not After : Feb 7 14:23:13 2025 GMT
Subject: CN=679cdcd1-2bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:f9:de:c1:72:7f:dd:87:5a:8b:a2:c2:b9:
e5:0b:6f:5b:ed:a9:9d:7a:69:6f:c2:37:26:b4:64:
f9:1c:22:98:3f:88:6b:4c:21:d8:d6:8e:a0:ba:c9:
dc:e4:28:33:2b:7a:20:9c:cf:71:55:d2:3a:d5:1a:
a6:9c:78:cc:18:79:86:1d:3b:9e:83:e0:5a:ff:50:
45:68:b4:03:b7:c2:8d:9e:cf:24:08:03:1a:22:4d:
e7:68:be:bc:76:3d:3d:af:d8:dd:d2:64:df:70:1a:
19:4a:c9:66:6f:f9:88:58:e3:8b:2b:37:b2:f0:e0:
d2:e8:db:77:6e:f2:eb:dc:83:a5:cd:a0:d5:8d:cd:
cf:87:f4:15:97:f4:80:13:75:a6:ed:1c:c9:8c:ca:
b5:d6:e0:76:c2:a3:ac:79:ef:dd:42:c0:18:8d:46:
2b:a8:f8:3b:43:77:9a:0f:d8:04:52:ea:4e:f6:54:
a2:82:43:10:e3:f9:12:74:ea:a6:bb:d2:61:6c:af:
0e:5d:b1:ee:63:05:c7:17:63:14:a1:a9:74:c6:dc:
a7:65:af:c2:00:58:52:03:7d:00:d6:08:d4:21:31:
16:40:e0:e5:81:be:ca:97:5b:97:3c:f8:6f:95:43:
9e:72:35:2e:a7:c6:e2:b8:58:ce:77:23:64:51:a3:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:2A:EA:2B:D7:3E:DF:7C:FE:B7:0F:50:DC:77:97:32:88:F6:9E
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:eb:bb:05:e4:9a:d3:71:38:c5:86:1d:fc:b4:01:49:56:80:
e2:9c:6d:d6:38:80:44:c1:b0:c1:b8:bf:c9:36:7f:8c:39:39:
d6:a1:95:75:00:dd:43:c2:98:41:c8:8d:81:b1:86:4a:41:2b:
08:3b:c1:a8:03:b2:14:c4:30:49:6a:84:a4:41:3a:9a:52:ca:
1b:fb:40:61:11:49:93:b2:35:0e:4c:c3:57:a4:da:af:c7:07:
55:19:90:06:6f:4a:a2:00:1d:f4:67:d0:1d:e8:0b:da:5d:cc:
9c:ed:9e:52:d6:09:d1:e0:45:c1:21:df:a4:1c:23:45:f2:f7:
82:e0:13:c4:33:c5:a1:da:f4:24:8a:e5:8e:6c:c0:15:91:b6:
4b:f9:ac:0f:3d:40:7b:86:7e:68:38:5e:db:08:52:9d:99:cc:
6d:b8:d4:6e:92:dc:92:54:16:22:2d:2c:e6:46:ef:16:bc:2e:
e7:ac:14:cd:a5:d9:27:f5:19:6f:f9:a6:7e:58:f3:ff:5f:dc:
23:0a:1c:f3:bb:b4:1f:70:e3:ad:22:68:fe:3c:8b:0a:12:ed:
7f:38:9d:8e:94:be:9f:c3:fe:b7:21:d8:28:35:18:0f:b3:80:
ce:61:4c:bf:62:46:69:d3:5f:56:66:4a:20:57:d9:df:c9:26:
6b:6f:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:57 2025 by rpki-client