Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: UG2ePHDisywQ5A/fwlJlOPHKH8De/3HyP+73UA/yzqM=
Subject key identifier: 0E:B8:41:05:DD:AE:95:68:DE:D0:75:83:BF:96:F1:35:00:41:90:ED
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: D1
Signing time: Fri 31 Jan 2025 04:57:30 +0000
Manifest this update: Fri 31 Jan 2025 04:57:29 +0000
Manifest next update: Fri 07 Feb 2025 04:57:29 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: ypVEmuKDLG7F0rQ3c4eN0yNlIxTUDYYO2NUofkC1vLw=)
2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: O0fu0v3WPuED8cBOoy32AaYeWLhEaTHf+1HtAp2psVc=)
3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: OkMxv7XekaJRzIADvdpn5P9SXPrJlEJXm6uXiRNfcN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Jan 31 04:57:29 2025 GMT
Not After : Feb 7 04:57:29 2025 GMT
Subject: CN=679c5839-ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:a5:8d:a9:b2:d5:6d:f5:5e:14:ce:73:31:
e1:a7:85:a7:2a:5d:96:ad:12:f0:53:8e:19:1b:e4:
62:65:a0:dd:0c:e3:35:52:7d:d4:f1:26:6a:cc:55:
40:01:1b:75:b0:fa:b2:d7:a6:a2:23:95:7a:d2:fd:
d1:7d:66:4f:2f:1c:f3:df:98:9d:3b:5e:84:cb:00:
1d:64:b2:f6:79:40:66:ba:eb:0f:be:5e:e9:f6:42:
43:2a:20:77:79:8f:21:ea:d6:e3:8d:1b:52:64:d9:
77:0e:94:e0:0c:11:00:66:c9:c6:fa:e8:df:6f:e8:
ee:7b:c7:dd:04:b6:cb:5a:86:fd:ad:ac:18:28:cf:
e0:6f:23:bc:a9:68:47:5c:56:86:35:ea:d2:eb:c7:
3b:f5:60:3b:8d:a3:80:18:5a:d8:10:7b:87:d7:7e:
9c:83:96:ba:2a:81:ec:0c:9e:e8:75:05:a7:9b:04:
89:98:49:6a:6c:d2:8e:31:c0:14:57:0c:55:56:3a:
5c:c5:c5:a7:42:24:30:ca:62:5a:97:95:fa:53:28:
aa:61:19:51:00:b6:04:0b:de:32:3f:c2:6e:67:33:
85:40:93:4a:ae:ce:4f:34:89:af:8e:90:92:ab:50:
e2:30:91:97:bc:ae:df:f8:57:2b:ba:60:11:43:31:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:41:05:DD:AE:95:68:DE:D0:75:83:BF:96:F1:35:00:41:90:ED
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a7:ad:0f:14:92:31:5f:cf:7c:95:b2:b0:e0:c1:16:87:b4:
55:f7:83:a5:db:d8:89:71:6a:f3:67:22:9e:b9:30:ec:98:10:
57:8d:c8:3e:8f:99:25:53:20:93:66:aa:d6:05:21:1a:66:e8:
57:8a:13:7b:ee:d8:16:03:67:e7:6c:6a:ed:8a:38:71:7d:4f:
b9:4d:76:c4:29:5d:12:a5:6a:9c:41:0b:9f:23:78:94:66:a4:
d5:ae:9c:97:e8:40:f5:8d:a7:00:d7:d4:ef:02:87:6e:46:69:
97:b4:99:f3:48:08:2d:94:f1:bc:f3:1f:1f:f7:b0:2a:60:ab:
c1:80:4d:69:c4:3e:77:7a:9d:ca:be:a5:16:44:80:9a:a2:a6:
37:a6:72:02:72:05:a9:d0:96:0f:e6:ae:be:1e:f4:c6:b3:0c:
53:d4:f3:05:5a:8b:0c:2f:7a:ff:c1:84:b5:f2:94:3a:c1:c3:
f7:e5:73:07:5d:f7:c2:26:59:f9:73:48:3a:a5:5a:e2:5b:9e:
92:9e:0e:69:22:e8:d8:74:db:6f:75:a6:83:2e:72:9e:ed:23:
9d:de:69:e3:60:3d:4f:cd:e7:92:f0:67:04:71:55:7e:d8:2a:
73:63:0d:23:38:c7:bb:9d:23:35:bf:b4:ec:51:b4:18:d4:73:
f1:5c:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:49:52 2025 by rpki-client