Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File: svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier: NGguuDLeSeVEqWuiisKDNd5QU1tUtjwKFSFC5ESYi+4=
Subject key identifier: F4:28:F0:F5:10:42:69:DA:4C:A7:19:0C:E4:E0:F2:88:DE:42:2F:4D
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial: 0378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number: 0373
Signing time: Fri 31 Jan 2025 00:57:01 +0000
Manifest this update: Fri 31 Jan 2025 00:57:00 +0000
Manifest next update: Fri 07 Feb 2025 00:57:00 +0000
Files and hashes: 1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: A3XqpfghkTzg0ZMJq8tsMUheUGxPK+wyW2nrQFYj4Is=)
2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ixpGpZxeJE6MjqJE4TZF5F7RqpJksuo4R/FnZcP/pPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Validity
Not Before: Jan 31 00:57:00 2025 GMT
Not After : Feb 7 00:57:00 2025 GMT
Subject: CN=679c1fdd-dfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:bb:2f:f6:42:6f:5e:1a:41:33:8e:90:fd:
95:36:c8:ce:3a:0a:07:e4:93:a3:47:04:c2:69:ce:
a3:e9:f4:64:58:38:8b:3e:ca:e7:79:1f:d5:a9:5f:
ee:9f:34:0b:73:df:36:7c:c1:6b:2f:86:61:26:58:
4c:e2:fd:96:56:4b:44:d3:58:7a:37:7a:c2:76:d2:
5c:20:6e:ac:64:01:e7:ae:5b:08:2c:80:fe:6f:c3:
c9:78:74:dd:3b:d9:31:cf:22:de:7b:06:09:48:82:
0e:32:df:3c:2a:fc:2b:d6:11:b8:73:fe:cc:48:3a:
f1:86:27:d3:dc:8b:b5:b4:ab:f5:7c:1e:9a:b7:ea:
c7:7b:49:4f:b9:b2:83:e7:18:78:b0:fb:57:c9:d9:
a4:9b:47:b6:d6:92:f5:d2:dd:5d:46:db:4c:6a:18:
9e:85:87:93:40:91:55:83:e2:66:ad:54:86:7e:ab:
47:fe:1f:ce:fe:46:18:13:c8:57:46:98:ff:46:48:
d0:ed:38:65:f0:aa:28:70:40:05:c2:ee:67:9e:52:
c7:51:56:19:c7:dc:49:59:cb:4b:c6:48:9a:0a:7e:
bc:80:40:b1:68:50:2b:81:39:13:7f:39:3b:2a:18:
3a:af:36:31:9d:df:4d:21:7f:7d:34:5e:fe:46:8c:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:F0:F5:10:42:69:DA:4C:A7:19:0C:E4:E0:F2:88:DE:42:2F:4D
X509v3 Authority Key Identifier:
keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:1b:b1:94:08:f1:ea:46:f7:48:8d:27:c0:44:bc:8b:29:17:
2a:8c:cd:c7:3e:bc:84:e2:ac:8e:de:e2:79:10:08:40:4a:e0:
3f:83:6f:94:9e:e0:b9:cd:32:94:a7:8d:d4:e5:5f:88:99:24:
27:90:1e:48:34:de:ef:fd:da:e5:8a:2d:03:f6:a4:2b:a5:b3:
08:1a:d6:ad:47:e8:64:3e:51:80:58:f4:9b:6b:ad:13:1b:62:
0e:80:a5:11:c8:99:9f:1e:97:27:dd:5b:a0:5f:21:72:67:29:
c2:e9:52:68:09:32:8d:38:90:bf:07:91:22:d6:db:7e:ae:66:
aa:c5:31:6f:3e:8c:e9:2f:c8:b1:a0:15:85:31:3b:16:2e:62:
4b:83:fe:a3:26:65:ee:c9:2f:fd:c5:d7:1c:6b:a3:22:57:8c:
9b:ef:fa:08:af:70:03:71:ff:ce:7d:c0:cf:6f:07:f9:f4:69:
5e:10:11:47:2b:e9:1c:e5:20:14:d5:a4:90:d4:e9:12:37:83:
9d:17:e1:9c:76:63:ae:21:a4:07:db:d7:5f:74:48:d6:db:21:
ac:92:69:22:a3:77:4b:cd:03:08:7f:99:84:cc:0d:26:f4:df:
91:07:d3:b3:80:d2:99:88:c9:69:20:09:92:dc:65:11:c7:a0:
13:e0:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:57 2025 by rpki-client