Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
File: cIW1tFSazbW2wnBMhbp4h2D4iic.mft (raw, json)
Hash identifier: PTYDBaAgpXneCt7v0QsvFp8LkixXpizboUKfr3nolxo=
Subject key identifier: A7:B0:00:2D:8A:0F:30:35:C9:E1:7F:3D:C4:16:C9:DF:D7:2E:2F:6D
Authority key identifier: 70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
Certificate issuer: /CN=A91722A3/serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Certificate serial: 0B47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
Manifest number: 0B40
Signing time: Thu 30 Jan 2025 19:13:13 +0000
Manifest this update: Thu 30 Jan 2025 19:13:12 +0000
Manifest next update: Thu 06 Feb 2025 19:13:12 +0000
Files and hashes: 1: cIW1tFSazbW2wnBMhbp4h2D4iic.crl (hash: SF76Wi5q1gZEyuaf1coWswZiMHguDSg9QawES2ziT1Y=)
2: 002DDDC22B9D11EA92F3094CC4F9AE02.roa (hash: RIHPif0x1JlxdJG6P0E7caIIVbjXsOlXYot9xZqPb2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2887 (0xb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91722A3/serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Validity
Not Before: Jan 30 19:13:12 2025 GMT
Not After : Feb 6 19:13:12 2025 GMT
Subject: CN=679bcf48-7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:d7:47:c4:ca:11:41:2d:cd:5e:99:77:66:
f6:16:b7:a7:97:e6:7b:d2:0c:eb:6f:4f:a1:30:e7:
e2:3c:20:77:d2:f3:bf:1e:96:0e:ae:4f:33:c3:f0:
dd:88:c9:ef:98:f9:01:76:77:b1:d6:86:a8:f7:d4:
9c:67:e4:86:d2:5b:24:8e:99:2d:13:ba:ca:38:0a:
aa:a3:25:1d:2a:e2:09:93:22:9b:ca:c4:4f:fe:c3:
6b:f3:65:88:f4:bc:61:74:19:36:ae:30:88:fe:c6:
1a:a2:c0:aa:8b:4e:e8:4c:f9:0e:f5:dc:ce:ba:73:
71:5e:f8:81:9e:b6:4f:90:d3:9a:50:d4:63:e1:9e:
f4:40:7b:11:82:66:04:fa:1c:47:d7:de:39:ec:76:
8b:c9:87:29:44:1d:c1:b2:1c:03:0b:d5:b9:31:bd:
41:5f:94:8c:1a:fe:1c:7a:f1:17:48:fb:87:65:cd:
0a:58:de:ec:ec:6a:8e:4e:fe:63:12:9a:7b:fa:a2:
ea:ca:2e:04:f2:90:8b:fb:43:19:51:2a:54:d6:9f:
5c:6c:72:40:f3:23:e0:e8:08:d0:e2:5f:c1:e8:1e:
ac:f8:4e:c2:23:a5:d6:8e:6f:da:dd:bf:58:89:67:
7b:37:15:d0:a2:99:15:8f:af:18:50:bc:a1:70:57:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:00:2D:8A:0F:30:35:C9:E1:7F:3D:C4:16:C9:DF:D7:2E:2F:6D
X509v3 Authority Key Identifier:
keyid:70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6f:9e:e1:d6:69:8a:f2:69:cb:42:7f:65:c9:a4:c8:a0:e3:
cf:4d:da:8f:9c:22:95:80:fe:84:99:13:6a:a0:6a:1b:65:dc:
33:8e:63:94:5a:17:cc:85:74:ff:ab:ee:6f:7c:3b:9d:7d:01:
15:06:15:a7:8b:f7:a4:ab:66:79:f9:18:cb:f6:26:c6:8e:76:
38:10:bb:e5:ec:da:b9:6c:39:83:e0:ff:5b:c5:4c:ad:df:16:
72:bd:cb:44:7c:b9:57:86:95:d8:29:c2:be:f7:7c:a5:4d:1a:
e4:7e:e5:e9:2a:07:5c:b5:59:05:f0:56:0c:85:ce:e1:ec:6c:
7a:3f:5c:3e:18:3d:af:8b:ce:1b:cf:a5:65:07:84:49:76:aa:
44:6a:f9:1b:ae:be:73:7c:05:65:f5:c7:67:98:3c:3b:18:0b:
e0:86:20:65:65:ab:0d:14:dc:de:43:01:21:53:06:69:7e:94:
c0:c5:d1:29:7b:5d:51:4b:94:06:15:72:7b:30:66:24:55:4e:
18:d1:9a:de:d0:c6:24:62:4f:1b:1c:1b:d5:c9:32:86:e9:ba:
60:86:92:79:2c:7b:11:10:f4:2d:32:e2:ac:62:d7:ce:74:71:
58:1a:f1:16:f8:77:d3:85:7b:e6:54:5f:c6:11:50:52:c8:de:
d2:0f:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:35 2025 by rpki-client