Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json)
Hash identifier: nGxl9d/mqKe53MZF9gMiI5ztDG5WA2xcmEbwGXxZvcU=
Subject key identifier: 47:E0:FF:64:B3:DD:30:85:AF:C0:47:7C:C0:C3:A9:79:72:7D:B5:23
Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22
Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
Certificate serial: 045C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
Manifest number: 0457
Signing time: Fri 31 Jan 2025 00:14:52 +0000
Manifest this update: Fri 31 Jan 2025 00:14:51 +0000
Manifest next update: Fri 07 Feb 2025 00:14:51 +0000
Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: mHcST2YXAJkz3QgmlXB6aGZQ2SA95wt1gZW0XucLKRs=)
2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
Validity
Not Before: Jan 31 00:14:51 2025 GMT
Not After : Feb 7 00:14:51 2025 GMT
Subject: CN=679c15fb-3233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:90:0f:ae:06:07:88:49:29:c4:bd:fc:29:
bd:ba:28:d9:6c:cc:35:28:c8:bf:70:2a:ba:73:d7:
c1:b5:8a:a7:6e:f8:9e:d9:2b:82:81:0e:a0:7c:46:
35:69:e9:e1:51:93:07:af:71:6b:15:0a:5d:d9:3e:
e6:f5:45:ef:7e:0a:3e:1d:0e:24:fc:fb:16:b5:1d:
9c:a6:92:41:e3:56:21:ae:22:77:7e:4b:a7:ff:22:
2e:77:e0:a2:8c:26:6e:d8:3d:66:3c:4c:ab:47:fc:
19:8c:37:29:3b:7b:65:08:de:39:b2:1e:e2:41:f0:
0c:47:0c:96:19:3e:c1:56:b6:73:d8:48:5f:9c:db:
d7:f4:06:f5:66:97:09:11:e4:13:1b:4d:ca:0f:03:
d7:b9:8f:44:fe:41:0c:72:f2:11:cd:35:da:9c:a3:
4a:cf:fd:d2:44:a0:22:6d:f1:74:84:97:f7:2a:42:
ad:5d:ee:4c:26:8b:3c:f0:56:f9:b0:73:04:5b:38:
13:f2:70:0b:8d:80:64:b7:85:11:71:13:a9:5f:16:
09:7c:7f:4a:14:ff:2d:77:13:73:12:03:e1:9f:24:
81:fb:97:29:b0:34:95:48:cb:9c:fa:c9:fc:af:ed:
5f:37:5e:ff:d9:b9:f2:b7:0c:fe:9e:00:55:13:fd:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:FF:64:B3:DD:30:85:AF:C0:47:7C:C0:C3:A9:79:72:7D:B5:23
X509v3 Authority Key Identifier:
keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:ab:5b:d9:de:b7:40:d5:ff:59:f0:1e:bc:eb:01:e6:bf:
3f:2e:6c:ab:e2:98:47:45:e2:28:a4:91:fd:d8:6c:eb:88:c8:
77:81:83:10:2c:41:ab:9f:e4:85:dc:b5:66:d8:fb:5e:9f:d7:
65:2c:ea:5a:2f:f3:89:76:c2:26:5b:73:03:12:f2:e7:bb:f2:
68:0c:c5:52:1e:8c:3f:99:ed:60:0f:22:bf:87:05:8b:22:2f:
81:0b:55:68:37:b3:9c:35:eb:62:fc:9c:11:95:f9:88:bf:69:
ac:4b:ed:14:a2:7d:51:5e:1f:dc:a9:59:ce:e4:c3:64:b3:02:
2f:d2:42:0f:95:37:7e:53:53:7a:5d:b9:b6:0e:a9:96:5f:83:
b8:7b:75:bc:fb:ba:31:e8:27:91:ef:ba:e5:2a:18:46:1e:fb:
77:bd:71:f1:c9:ab:a2:72:64:e7:f9:14:0b:0b:e2:25:5a:b0:
d2:92:e3:6a:ba:24:b6:99:ea:97:30:5c:24:ec:68:e3:9b:44:
cb:27:74:3a:87:39:5f:79:c3:a9:42:09:ee:44:73:99:ae:eb:
17:c7:be:48:4e:13:c5:ad:0a:3d:f2:35:8f:6b:37:df:85:c3:
ad:a9:bc:6e:ab:d1:7f:f1:87:9d:3c:f3:3f:b4:b3:0c:01:90:
2c:3c:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:16:51 2025 by rpki-client