Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json)
Hash identifier: Gz5Y1ODIHz8aikqpKpLponfLXMGU42rvOgN+VtjSmMs=
Subject key identifier: E3:C4:C5:73:A6:77:57:34:D9:E3:4C:3B:D0:9E:9C:09:FD:2B:C7:4F
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
Manifest number: 035B
Signing time: Fri 31 Jan 2025 01:01:12 +0000
Manifest this update: Fri 31 Jan 2025 01:01:11 +0000
Manifest next update: Fri 07 Feb 2025 01:01:11 +0000
Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: Xgz6H/XFBZK/m+L8B0HOnvgv7jyYh0veqDYAQD+gYxI=)
2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: VGGURIxzJCDv/3kAdTJQ5HhkYnZtQ+U2j75w1fSIEjs=)
3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: N3iYb1exvwHt+Rgew6r5CS3daUkG797TW6/8BnfLNMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Validity
Not Before: Jan 31 01:01:11 2025 GMT
Not After : Feb 7 01:01:11 2025 GMT
Subject: CN=679c20d7-2e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:c9:9b:97:40:79:a5:d3:b4:d0:2e:2f:43:
1f:3c:95:a5:d4:65:4c:1c:56:79:a2:44:e5:56:a4:
7b:58:27:7c:c0:d8:1d:59:11:26:b7:49:ac:63:1e:
c7:3a:02:fa:39:b5:96:51:e4:a7:12:22:6d:81:21:
3e:d9:2c:d1:de:37:e9:07:26:e0:27:46:8c:b2:3b:
98:08:80:ed:2d:96:76:69:a6:be:aa:3c:9a:d0:bc:
9b:82:2e:da:44:c7:da:e6:6d:dd:45:d9:9a:52:6f:
d7:eb:d6:51:81:a9:49:ec:5f:b0:54:49:ce:1c:bc:
bb:c4:ca:09:d2:3d:46:32:e4:b9:da:38:d5:ff:87:
15:45:eb:6d:bd:2b:a6:4d:3f:50:10:c5:fa:17:50:
1b:76:07:d9:a7:6f:c5:27:3f:ed:67:9a:bd:49:c4:
8e:d3:5d:36:70:31:a9:d6:29:74:8e:90:0a:cb:4d:
b5:5f:ea:af:ef:aa:27:e6:c9:96:c2:aa:9d:67:57:
43:aa:f1:6d:37:2d:7f:c2:a9:26:2c:ba:91:5a:24:
b7:bf:64:23:0b:59:80:19:85:2d:f4:7b:ec:4c:f8:
6f:fc:4b:e2:aa:a1:3a:2c:fa:e0:12:15:8c:80:19:
13:14:91:00:98:e7:61:42:56:f8:9a:5b:e0:a6:76:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:C5:73:A6:77:57:34:D9:E3:4C:3B:D0:9E:9C:09:FD:2B:C7:4F
X509v3 Authority Key Identifier:
keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:18:55:f2:ab:5d:4a:06:0a:c8:43:92:53:b4:f0:a9:1a:d1:
e8:1d:ce:38:14:cc:f2:5d:cb:df:60:21:8c:84:b2:68:3e:1a:
84:3e:3f:84:64:f9:61:fd:c2:7d:36:1b:06:d8:d5:61:1d:06:
35:17:fe:aa:ad:5c:14:d4:d6:62:ce:c7:20:97:fe:86:49:65:
c8:9a:16:d1:95:f4:de:be:fd:15:da:88:2a:11:e3:46:f2:aa:
8f:d0:4e:dc:0e:20:ec:6b:08:83:6e:7f:2f:e0:47:dd:36:6b:
9f:3a:51:54:bb:71:a6:75:c6:3c:8b:79:d3:62:ed:7f:b1:c2:
fa:5b:32:97:b5:cf:10:92:81:5a:d8:c0:80:df:5b:8b:e3:90:
20:0d:95:25:85:e0:60:aa:c4:c7:45:7f:d4:cc:d6:7f:dc:59:
1d:bb:9a:87:26:c3:a5:e9:5d:3f:46:bf:ed:bd:4e:05:77:bd:
eb:bd:fc:8f:a3:84:ea:e2:2c:0d:3d:b6:72:bd:c2:b7:c4:1f:
ee:d2:3f:01:f6:e8:e4:ca:8e:5d:a2:bb:33:f2:8b:4e:08:3c:
d3:0c:d4:37:38:39:0c:dc:46:a9:5b:9c:4e:65:d0:0d:e9:3f:
6a:c9:45:0e:be:62:6d:48:6d:44:04:98:c6:67:11:fd:1b:02:
13:ba:98:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:04 2025 by rpki-client