Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier: 9CWN19sdIiFyYh2zjtVDd2v5zSXlF2qPskIJT7kahmo=
Subject key identifier: 4B:3C:94:CF:3D:51:53:36:56:E0:C4:20:A1:42:74:4F:0B:4B:47:F1
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number: 05CC
Signing time: Fri 31 Jan 2025 00:33:36 +0000
Manifest this update: Fri 31 Jan 2025 00:33:35 +0000
Manifest next update: Fri 07 Feb 2025 00:33:35 +0000
Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: V8hVIlkPBmTP5tegz8ye6WulXq+0b0swUuer/6/D11A=)
2: 21E1440A1E7711EFB69BE070C4F9AE02.roa (hash: 6xK46XhJtyZvl0GV6Tg9wg5kNg7cdtZOaQsNEIc5Pf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Validity
Not Before: Jan 31 00:33:35 2025 GMT
Not After : Feb 7 00:33:35 2025 GMT
Subject: CN=679c1a60-26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:4d:8a:af:88:fc:cf:33:e0:c6:c0:78:dd:
99:2e:91:0e:96:ea:6a:0b:0b:e9:7b:be:78:75:c3:
1f:0b:b1:bb:b8:ab:36:7a:d1:f2:c7:62:ce:20:53:
0b:00:46:20:68:8b:c4:97:3b:ff:9b:7f:66:b4:09:
e4:9b:29:6c:0b:d1:77:86:85:68:b9:0f:30:c0:79:
b7:3f:23:ff:7c:be:75:f8:54:b3:33:d9:09:53:97:
b5:e6:fb:80:8a:1e:08:0a:4e:e6:ac:32:ce:70:ff:
40:9a:4e:1b:fc:54:b4:19:dd:2a:a7:85:e9:09:fb:
7b:8d:01:dc:51:83:13:0c:6d:2d:84:92:fe:17:46:
da:d1:27:df:6d:15:53:4a:3d:82:28:d4:65:ee:72:
e2:9b:6b:97:73:cf:e6:b8:23:68:a9:eb:3f:31:1a:
8d:47:ff:2f:08:a3:08:7c:27:50:5e:aa:10:e9:3c:
ea:8a:92:e1:2a:f8:4a:37:aa:df:d9:20:72:7e:de:
42:4c:00:ac:ed:fb:34:a7:9a:b6:a4:89:a7:4c:54:
9f:d8:cb:b5:8e:4b:bd:b4:5b:87:00:06:45:1a:b3:
1a:f2:91:c9:34:79:5f:18:ab:f3:b2:67:4b:25:e9:
36:c5:89:2e:cf:4a:8a:fd:dd:dc:e5:52:d4:9b:76:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:94:CF:3D:51:53:36:56:E0:C4:20:A1:42:74:4F:0B:4B:47:F1
X509v3 Authority Key Identifier:
keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:7e:c0:21:aa:3d:20:63:09:c9:76:97:54:ea:fb:6f:49:0f:
d0:24:ce:93:a8:2a:22:99:1e:ef:40:d1:c9:1e:e7:33:83:35:
82:b2:28:cb:8e:6c:98:e0:a2:dd:e9:ca:80:38:b4:9c:d3:79:
16:40:0a:1c:24:29:69:35:76:51:af:b5:22:4e:af:5a:70:f6:
02:ce:74:6b:99:e9:e1:d8:69:3b:53:86:48:84:62:06:16:96:
4d:47:ec:45:e7:e6:5f:6a:02:46:a7:ad:31:87:f3:fa:96:f3:
c6:d4:2d:28:9c:a0:ea:3d:b7:f6:e8:5e:bd:8f:ff:b0:85:ca:
0b:29:c3:90:22:ed:4e:df:0d:03:36:34:6c:01:b6:aa:bb:94:
c6:01:e2:74:53:4a:e5:3d:48:10:6e:15:2e:ce:92:d3:3e:31:
b0:41:9b:a0:51:7c:fd:39:25:1f:cc:d3:52:92:b9:8c:a5:2a:
bf:ef:bf:3d:b9:8d:a3:75:bb:78:b8:b8:a6:3b:da:7b:ef:42:
bc:45:30:38:bc:46:5b:39:93:87:c8:b1:9c:68:5a:eb:e8:37:
5f:de:8b:34:c6:04:07:25:fd:b0:71:49:20:96:be:dd:69:a0:
8d:c5:24:85:75:2d:17:ed:b4:e4:b1:2e:79:c5:33:fd:aa:17:
9f:37:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:35 2025 by rpki-client