Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier: C5ju22ToT0oOD1mlz1hZbSgbPgAA32CyXM2pPCIlor8=
Subject key identifier: 7E:01:8F:C5:08:40:E9:F9:B3:BE:E7:0E:D8:F4:9D:46:41:CA:36:03
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number: 0100
Signing time: Fri 31 Jan 2025 04:14:24 +0000
Manifest this update: Fri 31 Jan 2025 04:14:24 +0000
Manifest next update: Fri 07 Feb 2025 04:14:24 +0000
Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: M2moO+jCH6vMzYyXHYnakMtVYOG3jZra/VqrZlxsAaw=)
2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: vLLtqJRwe55PLrIjKzUZV3hunL6I7HlofeTqMR4Wk9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Validity
Not Before: Jan 31 04:14:24 2025 GMT
Not After : Feb 7 04:14:24 2025 GMT
Subject: CN=679c4e20-3d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:61:7e:63:3e:bb:dd:9a:cc:76:4f:9a:12:
10:de:eb:2b:76:87:b9:eb:ec:a5:5d:02:77:75:9a:
f3:57:96:4a:c5:00:b4:cc:14:19:19:f7:39:5b:79:
de:29:c0:c6:af:84:5b:67:0f:99:79:75:16:f5:1e:
bc:c7:e0:f3:1c:a4:f5:9c:0d:c5:df:5d:c4:06:4d:
2b:b3:84:4f:69:db:38:d9:6f:46:06:39:da:bf:4f:
4c:38:8c:ff:71:20:b5:5c:98:1f:6a:e8:4a:f1:79:
3f:7b:e4:de:c3:c7:31:e9:5c:5b:29:2e:2d:b2:cc:
91:d0:c7:c5:bf:89:44:22:b3:09:7e:ac:a0:b4:c7:
77:17:7c:6a:67:89:dc:12:a3:2f:eb:f2:bc:59:3f:
49:0e:1c:2f:ae:ea:1b:c7:9f:5c:22:38:58:0b:b3:
c5:07:84:28:40:dd:9c:37:78:fc:62:42:0f:b5:e9:
86:9f:5b:1a:be:43:3d:29:3b:22:08:03:c7:01:df:
15:31:54:9c:57:b8:7f:b3:b4:b2:ca:51:dc:6d:ca:
da:9a:cc:59:78:ac:b1:22:cf:8a:69:3b:d3:82:8d:
6a:1a:ef:c5:c8:ac:e4:9a:cd:14:d2:3e:d7:ef:c7:
09:3a:d9:3e:d5:1e:5c:79:fd:ef:e3:55:ba:5d:87:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:01:8F:C5:08:40:E9:F9:B3:BE:E7:0E:D8:F4:9D:46:41:CA:36:03
X509v3 Authority Key Identifier:
keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:fe:16:ea:bf:1e:d5:4c:64:60:a7:3e:3c:95:00:47:c7:
e2:ba:2b:1a:31:7a:70:2e:b2:7f:b8:1a:37:cd:68:d1:45:04:
4c:15:96:58:d7:82:37:8b:11:72:67:18:65:ee:8d:88:81:f8:
83:ef:22:c2:0e:5f:1f:4d:2b:b6:54:13:6d:92:a7:cd:ad:ae:
36:1c:19:3d:a3:e5:f5:55:e2:f8:01:de:3d:3c:0f:64:d7:db:
52:65:90:04:59:ca:13:1a:02:c2:4f:12:36:f8:11:13:3f:ff:
b6:13:80:70:74:80:2c:67:81:8e:62:3b:50:fe:17:62:12:83:
74:16:c5:f4:d5:cb:4f:a8:11:eb:b4:3a:9b:27:0d:4f:29:3e:
4d:28:24:7d:52:a6:c0:ad:3a:e5:4b:2b:8b:d3:30:d9:b7:3f:
04:d7:87:b0:f3:ef:fb:1c:be:d3:d5:76:73:02:de:3e:b6:1c:
8e:60:81:97:4c:c6:45:39:ee:67:c5:55:5f:84:0e:4b:17:ad:
15:b7:81:65:1a:38:cf:1c:92:d1:a8:2c:3d:71:8f:af:6b:56:
d3:6d:3c:ff:f0:3d:cb:f3:95:94:43:e7:6f:cf:b3:40:85:8c:
a1:2c:b3:67:09:3a:b7:da:58:33:ac:09:f3:23:31:c2:77:44:
6d:df:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:52:28 2025 by rpki-client