Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier: 8XPiXq7jAVQomR3ctukf7IvEvGAxqpyvbU3q2+gCmhY=
Subject key identifier: A9:9B:76:EA:67:E8:46:98:92:12:39:36:83:21:2A:35:C1:FF:77:26
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial: 04FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number: 04F6
Signing time: Thu 30 Jan 2025 23:43:07 +0000
Manifest this update: Thu 30 Jan 2025 23:43:07 +0000
Manifest next update: Thu 06 Feb 2025 23:43:07 +0000
Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: VnIHJJMbeTwhgVf6xOCr9Zzy+eQ3/WQXNnR14R4Y7UA=)
2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: gsNxtD+HCrA+T6b9YqONqQ4jv3lalAETh9MJihh24Cg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Validity
Not Before: Jan 30 23:43:07 2025 GMT
Not After : Feb 6 23:43:07 2025 GMT
Subject: CN=679c0e8b-ad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:44:80:d6:24:7a:48:c7:52:13:07:38:f6:
0a:08:56:d3:f9:4f:80:f1:7e:6f:ff:69:d9:d4:60:
f9:10:b4:a6:d5:9b:19:96:68:28:f7:f1:8c:ce:b2:
26:a7:b8:49:1e:c2:11:25:77:08:97:04:ec:f2:33:
f1:be:1b:bd:ed:8a:8e:f6:a9:a5:c8:a1:23:e2:6b:
d9:05:83:0e:e8:8a:aa:89:c0:84:08:83:2f:8f:c6:
14:92:aa:03:a0:3f:87:75:69:3c:2d:f3:49:46:ae:
b5:93:de:62:2f:ab:a5:f5:64:bd:c1:cb:92:7b:f0:
30:1d:f9:89:b6:ac:20:b0:04:72:20:89:49:90:ed:
3b:a5:6f:af:72:59:96:fb:25:17:85:7b:4b:d2:ad:
0e:12:95:53:c8:6f:fe:6c:44:99:36:75:19:52:b2:
bd:72:41:4b:33:76:27:9f:ae:90:ea:6a:d9:e5:6e:
d5:13:91:b1:db:fe:e0:9c:1b:0c:11:80:54:bc:ba:
1c:87:59:6f:8f:4e:aa:80:68:4b:3d:14:3b:80:4f:
bb:7f:69:7d:5c:69:32:f9:39:2c:80:99:95:ec:bf:
7d:be:60:d5:ad:43:a3:aa:39:6c:1f:ad:18:41:b9:
0e:02:26:6d:22:f4:a6:62:fd:38:39:a6:33:8c:ae:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:76:EA:67:E8:46:98:92:12:39:36:83:21:2A:35:C1:FF:77:26
X509v3 Authority Key Identifier:
keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ec:c4:ff:21:da:d2:a8:4a:91:70:d4:d0:d4:b0:6d:7a:93:
11:70:18:1b:fc:e2:02:52:fa:b3:5c:bb:07:3c:fa:23:c1:96:
ac:4f:ea:64:0b:8c:1c:40:79:6c:98:af:dd:e1:28:4d:c8:d4:
44:ae:ee:bc:d7:aa:12:1c:14:86:6c:45:f3:10:83:ba:8b:71:
87:24:f4:d4:69:da:7c:4f:9d:49:90:fb:c5:40:c3:ac:aa:a7:
9c:01:92:90:88:a8:b9:66:5d:e1:85:0a:73:b1:bd:01:23:06:
cc:5d:b8:df:47:70:3b:66:4e:21:26:d4:46:43:a7:03:5a:53:
b1:37:5f:43:19:3a:f9:fd:3c:10:a8:6a:ca:d2:87:06:18:56:
86:d2:04:20:19:1c:8a:82:6e:d2:40:92:5c:ac:68:22:05:8a:
d9:57:f7:b9:ed:c2:ec:18:d6:4e:52:4c:07:ca:17:cd:9a:88:
6c:66:4f:d2:93:11:28:b5:d5:a0:02:89:38:ad:f5:80:a2:80:
85:65:fb:46:64:22:8b:ba:4f:f5:c2:a0:4b:ed:16:6b:bb:23:
87:c6:bd:57:52:bd:e1:c2:a1:ae:9c:04:b1:57:49:51:5b:b2:
44:8f:7e:29:a5:f8:3a:35:07:17:09:9e:5c:2e:3f:aa:75:c8:
45:88:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:55 2025 by rpki-client