Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier: 3Ha4vXwWwSAcnMWqqL8z00XqCzsgrIMULeRVlWokZvk=
Subject key identifier: 35:DC:C6:12:3F:20:52:44:4A:D3:92:40:0C:99:6E:81:F9:CD:D7:8A
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial: 02BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number: 02AD
Signing time: Fri 31 Jan 2025 01:36:24 +0000
Manifest this update: Fri 31 Jan 2025 01:36:23 +0000
Manifest next update: Fri 07 Feb 2025 01:36:23 +0000
Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: WayZPf932zrLuKyFlsWjF+VEfqFLp71mPwBIfxZXaqM=)
2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: F2rD9DTyJO/8KZY6J1+Hne/amu0UrQKM61Lrb0l7cz8=)
3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Validity
Not Before: Jan 31 01:36:23 2025 GMT
Not After : Feb 7 01:36:23 2025 GMT
Subject: CN=679c2918-7b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:c3:77:c1:16:e9:8f:7e:eb:3c:92:5a:c1:
da:cd:bf:bd:fb:6c:a8:80:48:6e:21:b7:fe:29:46:
f0:a4:98:48:d5:f4:84:76:ab:75:4a:a5:b4:8f:0b:
4d:ca:97:fa:7b:c9:d0:6a:6d:a1:19:8e:3f:10:85:
6e:e3:6f:6a:ff:35:46:d4:16:3a:1c:1a:b6:a0:05:
eb:09:ae:9e:8a:25:15:5c:41:9d:a0:a0:c1:da:73:
6a:11:0e:d9:ed:cc:a3:0c:1d:a8:84:65:0b:59:5b:
15:58:49:b8:46:91:04:47:b3:30:75:12:5a:24:8c:
c3:eb:34:54:5b:5c:c8:02:41:06:e4:06:8a:0d:b4:
b9:7f:f3:4e:81:be:c0:8c:35:91:d4:ee:d3:43:57:
ce:dc:7e:b2:d6:a7:e2:7c:63:49:3b:38:31:f5:31:
dc:1b:91:88:c3:48:0f:7a:6a:2b:2a:4a:d7:18:c2:
4c:fe:06:78:8c:86:22:1a:8a:6c:7e:00:4f:cb:25:
38:ff:6b:57:ff:d7:fb:61:ce:27:90:61:d6:f0:4f:
23:99:1b:a4:68:ef:49:b2:96:24:b9:4d:72:09:f0:
57:b9:f0:84:7c:9f:b5:cc:b7:a9:bd:d8:ce:e0:73:
60:67:0c:3b:18:40:fb:02:73:f5:0b:7b:c1:84:64:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:C6:12:3F:20:52:44:4A:D3:92:40:0C:99:6E:81:F9:CD:D7:8A
X509v3 Authority Key Identifier:
keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:67:f5:df:71:ea:ce:29:86:c5:35:67:98:ab:dc:e6:4c:df:
f8:28:73:60:83:c1:df:61:53:cc:89:56:e3:4c:bd:ab:7f:e8:
6a:2e:61:4c:33:cb:95:80:06:19:4e:42:3f:13:9f:0d:3b:00:
96:35:b9:e5:0b:4c:13:9d:d0:42:a1:df:ec:a9:77:53:de:9b:
ea:e8:6e:6f:fe:34:ee:08:73:f0:92:cc:93:61:7b:e2:bf:b2:
5a:d5:89:28:30:46:20:18:ee:3b:e9:a1:c2:e2:79:a7:36:63:
ed:c1:62:52:df:5d:91:d4:03:fb:a7:71:ef:56:d9:1e:73:c9:
38:2d:a7:86:8e:d4:51:af:1b:d0:86:8d:04:86:1f:69:f7:4e:
28:f7:d5:d2:ed:62:96:03:82:57:b4:82:81:9f:21:21:eb:c2:
50:6c:cd:c6:fa:08:41:53:78:c5:3c:01:20:e4:2d:08:59:46:
00:21:79:4b:23:d5:84:3f:a4:94:de:37:ed:d8:3b:2d:39:4a:
3f:55:d1:1c:8c:8a:44:49:d6:38:5d:f9:68:78:47:c7:c1:34:
b7:91:7d:b5:28:c4:76:b0:42:e2:83:cf:68:df:7a:47:e2:52:
cc:ae:79:6d:be:78:eb:7a:39:26:2e:86:50:1a:29:49:58:58:
b8:98:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:49 2025 by rpki-client