Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json)
Hash identifier: SCBDkjGwl7ze0qaKAkvmARkRtlEo9pPaBaR3o8spse0=
Subject key identifier: DC:85:8F:31:13:DE:0E:1C:6A:EC:23:65:2E:F3:6C:BB:F8:6F:3F:4E
Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
Manifest number: 24
Signing time: Fri 31 Jan 2025 06:52:51 +0000
Manifest this update: Fri 31 Jan 2025 06:52:50 +0000
Manifest next update: Fri 07 Feb 2025 06:52:50 +0000
Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: zRTdzuQWQAswV6ix899F01lMaKiybJ2P8jxOo1IwfXg=)
2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Y+fJ5KK7IVdhYlyuLVkF2P1TQN/5/+n0ri0WCyCm2Xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Validity
Not Before: Jan 31 06:52:50 2025 GMT
Not After : Feb 7 06:52:50 2025 GMT
Subject: CN=679c7343-9b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:69:8c:03:47:ab:cc:98:1e:ff:31:04:1c:96:
82:7c:35:bd:e1:76:47:1e:15:92:ce:55:27:80:ea:
65:ce:43:65:a6:eb:fc:dc:aa:f8:21:85:8c:15:13:
58:15:22:8d:42:ad:af:92:75:bc:8f:0b:68:83:98:
32:38:00:6a:1e:6b:01:5f:cb:b3:dc:38:d0:0d:41:
95:27:eb:e7:89:6e:13:a7:17:fc:53:95:4d:db:b5:
9d:39:f2:b6:d2:51:41:9b:d3:ca:b8:17:b8:3c:a6:
26:a5:f9:4d:64:19:2f:9f:52:c0:be:0c:a4:0e:bc:
cc:28:fe:09:57:a5:1d:97:0d:51:9a:45:12:f2:d7:
f7:74:c4:22:97:66:8a:15:94:ff:4a:ef:aa:20:dc:
a4:7d:7f:da:b3:f8:35:4c:2b:40:46:39:31:fd:4d:
56:60:90:05:20:97:f1:0d:20:06:f1:cc:18:b6:f1:
dc:13:40:1e:1c:35:29:21:31:87:73:5c:da:b1:1a:
e7:f8:5e:fe:1a:c5:77:1f:0c:a4:c8:2c:25:62:8c:
fb:69:f6:5a:ad:7a:ea:47:2d:72:02:86:17:f8:12:
36:00:32:dd:aa:76:92:84:b7:a7:bb:6b:56:b0:68:
22:9a:4d:13:d1:6c:e5:ee:8f:a8:52:eb:65:67:4f:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:8F:31:13:DE:0E:1C:6A:EC:23:65:2E:F3:6C:BB:F8:6F:3F:4E
X509v3 Authority Key Identifier:
keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:77:da:cf:22:24:06:e5:80:15:ab:60:d5:03:34:b1:b8:
e6:fd:2d:70:c1:0d:1e:66:10:c1:a0:b1:c0:dd:0c:f7:40:0b:
e8:3c:f3:68:82:58:dd:c0:7f:29:99:78:95:f0:20:0e:45:e7:
9e:e6:5f:59:31:ba:fd:86:2f:6d:bb:cc:fb:de:cf:05:6c:15:
a0:6e:9e:49:f1:f0:a5:30:a5:0f:db:10:7e:d8:58:62:d5:73:
14:f6:3b:80:8b:05:04:20:3a:32:da:b7:58:d2:24:4b:f9:57:
3b:d2:2b:f5:32:ca:d5:05:37:8c:f7:d2:40:86:22:f0:3d:b4:
f0:d2:d5:bc:37:d2:a4:da:9c:b4:bb:ca:c9:15:bb:42:29:2f:
d1:19:b4:40:50:82:4a:8f:19:5a:f7:e1:74:c0:33:69:d6:90:
0a:bf:a6:23:cd:db:b0:28:01:1f:32:c8:98:74:d8:6b:a5:bf:
c0:77:7d:44:8b:55:cc:df:f5:4f:b0:50:86:01:5a:1e:93:87:
16:91:59:24:55:ac:6e:e9:44:45:e2:e1:fc:a3:0d:df:3e:96:
0c:d9:18:60:52:60:48:55:5b:c3:e2:89:b0:93:a7:d4:18:b2:
c8:c6:0d:ad:0a:4b:bf:33:0f:35:7e:0d:e5:a6:d5:93:05:ff:
41:02:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:46 2025 by rpki-client