Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier: v+GVGs0D+iQKJVfD+2tqGqCBpViRZclpznNBX5+sMvc=
Subject key identifier: 24:97:B1:AB:21:0D:A6:FA:63:25:38:79:7E:5E:9E:1E:C3:CF:71:4A
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number: B2
Signing time: Fri 31 Jan 2025 05:09:08 +0000
Manifest this update: Fri 31 Jan 2025 05:09:08 +0000
Manifest next update: Fri 07 Feb 2025 05:09:08 +0000
Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: 7OLEExwTtAh12lIwmKj8oIDwOKWRrywGeuCbEwiMHgM=)
2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Validity
Not Before: Jan 31 05:09:08 2025 GMT
Not After : Feb 7 05:09:08 2025 GMT
Subject: CN=679c5af4-fb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:da:3e:54:87:22:43:92:3e:bb:48:71:5e:
98:74:b1:bc:4c:8c:00:b5:00:85:d1:24:75:f3:28:
d9:79:40:8f:4b:44:e5:3e:29:4e:ef:48:c1:3a:2b:
3a:26:1f:96:e2:fb:0b:36:b0:ec:06:57:51:16:fc:
d1:88:58:16:fe:8e:9e:aa:89:82:a1:e4:51:17:be:
1e:6e:61:bf:c5:a5:4b:21:4c:bc:cd:5a:31:47:3e:
4d:ba:db:2b:63:be:aa:4d:fc:da:5e:f4:e8:3a:cd:
25:55:cc:04:0e:80:71:28:81:14:a6:ae:bf:9e:d2:
36:85:65:ff:b0:6a:ff:03:41:fc:b9:4f:cb:b9:92:
2c:1c:2b:94:3a:82:c4:9e:4d:b4:a8:65:7c:41:7d:
60:a1:ed:df:ec:45:73:d1:4d:5d:41:fe:68:3f:e2:
ad:88:a1:d2:c1:00:8d:c6:81:3c:db:f6:3d:9e:0d:
c0:b5:eb:20:b5:40:6a:36:87:9f:07:f4:cd:1f:cf:
3a:57:f0:f6:d3:2f:87:9b:d7:3c:43:74:c3:3f:ed:
2b:b2:5d:01:d8:77:1c:99:d7:74:9b:0a:8a:3b:a0:
e0:c8:77:d0:58:ca:cf:ae:e3:3a:11:44:3d:7a:f8:
61:a8:1b:04:50:db:5b:5c:99:55:96:95:74:f9:7e:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:B1:AB:21:0D:A6:FA:63:25:38:79:7E:5E:9E:1E:C3:CF:71:4A
X509v3 Authority Key Identifier:
keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2c:18:6f:ba:6c:97:5c:6f:52:01:2a:d6:6a:83:4f:6c:fa:
f0:1c:4d:3f:1b:cc:c6:bd:b7:3b:7d:cb:fa:e5:0f:63:e4:d6:
7d:7f:1e:cd:87:d2:b5:67:57:07:82:82:fd:88:ba:89:22:5e:
01:12:b2:05:56:5f:c4:9a:c0:91:73:e8:b4:b1:87:10:3b:d9:
09:bc:98:8f:23:dd:41:9b:97:0a:4c:35:81:b1:3c:8d:fc:fc:
5e:e7:49:52:2c:44:82:c1:0a:64:79:a0:8d:fc:d8:7f:3d:8a:
24:4d:6c:6a:90:ba:e6:af:1d:50:88:5a:73:b8:d3:fd:09:eb:
41:c2:3e:00:29:3a:82:9f:56:a5:18:ef:81:5b:ec:59:0e:02:
b6:a1:19:57:ba:7c:8d:57:6c:88:3a:45:70:d1:0c:e2:18:c5:
11:a6:81:59:b3:ec:c6:62:00:a4:96:ca:be:d1:e0:d7:ac:6f:
e7:7a:bd:c1:b2:d0:46:b9:12:63:31:7f:92:0e:21:96:51:1f:
53:6c:d2:52:69:e3:ae:93:38:27:66:af:ff:80:5f:3f:ae:2b:
32:83:f7:0f:07:0b:85:fa:29:9a:c8:f2:07:83:96:bf:ea:4e:
ff:9f:5b:08:f1:fb:54:25:87:b8:67:8a:f9:23:1b:b1:f5:9d:
04:57:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:08 2025 by rpki-client