Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier: HFfLJBIg4c0mjKfkLEczyc99zVKuFhEYHr4EwT8GuVA=
Subject key identifier: 9D:3E:DE:02:F2:5E:C7:74:14:58:04:40:8F:4F:49:A5:C2:EB:66:40
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number: 0115
Signing time: Fri 31 Jan 2025 03:59:08 +0000
Manifest this update: Fri 31 Jan 2025 03:59:07 +0000
Manifest next update: Fri 07 Feb 2025 03:59:07 +0000
Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: gLs/iuaN6Aai3CGRFtlP2ixzw/FbQ1cY4gZAGVBlyog=)
2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: YBS7N1V85GEsKAdkA8SgTeGUq7xGqu6t+13xBrFpNlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Validity
Not Before: Jan 31 03:59:07 2025 GMT
Not After : Feb 7 03:59:07 2025 GMT
Subject: CN=679c4a8c-5b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:d5:ac:60:e4:53:68:b3:a4:99:6f:fb:72:
f8:8e:18:00:fb:90:a6:17:72:72:74:6f:b9:6b:cc:
57:0a:1d:f1:8a:86:8c:17:76:4c:05:77:1b:44:0e:
16:6e:87:77:c4:aa:37:e2:d8:15:43:1c:80:a3:3b:
21:48:c2:c3:8f:89:ac:0d:00:d0:4b:68:87:a0:04:
18:5d:ac:62:c6:48:1a:bc:e0:20:0e:33:d5:ce:35:
18:bd:24:43:3f:2e:8d:58:95:b5:37:35:29:ed:e1:
f4:44:2b:03:f0:83:0b:12:fe:89:72:bf:45:19:69:
5d:67:9d:e3:69:92:6e:7e:00:b6:73:c1:49:7a:84:
b7:38:13:ef:27:44:1d:07:b1:47:df:02:d7:8b:de:
49:2b:d6:b4:e6:a6:6a:bd:4c:4c:78:63:7a:04:3d:
e0:37:94:6e:01:f1:9f:12:7e:49:bf:61:a8:c6:e4:
7a:66:73:90:85:88:d6:60:a6:31:1f:e2:a6:3a:46:
76:88:32:38:c9:dd:26:33:2f:b0:5e:5b:37:78:a1:
3c:dc:03:2e:33:8e:09:39:3a:fa:30:68:f3:dd:df:
63:88:33:5f:f6:45:7c:50:ee:a9:00:17:ee:e2:70:
b2:a6:d6:32:f3:fa:dd:6f:20:47:0f:ff:eb:a8:a3:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:DE:02:F2:5E:C7:74:14:58:04:40:8F:4F:49:A5:C2:EB:66:40
X509v3 Authority Key Identifier:
keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:e9:90:4c:7b:a9:25:68:f5:ef:f8:1a:50:6d:55:54:41:
9b:13:b1:3a:bb:ac:89:77:1d:29:a2:35:63:dd:7d:f1:20:e0:
b1:8c:7a:c6:54:11:af:52:88:1b:01:37:9b:8c:36:b0:fd:1c:
83:c9:9c:a9:eb:89:0f:77:e3:9b:f5:80:93:d3:94:ba:67:e1:
45:17:1d:54:67:ab:d0:83:44:f8:8d:f7:8c:f6:2e:3e:b9:b4:
a8:01:ef:fb:a6:53:bc:22:64:d5:0c:25:54:99:76:7d:a3:d6:
25:ac:2e:11:3d:9d:3f:d1:16:f6:8d:c0:36:42:ed:58:4b:2f:
fd:9b:e7:9d:25:98:81:ed:26:1e:a3:ad:49:98:5c:ef:72:2e:
9b:39:4f:84:d9:a7:74:aa:55:39:44:03:01:6a:dc:3a:55:e4:
4b:ce:1b:31:84:5a:35:10:e4:29:0d:80:2f:37:bb:29:28:d2:
9a:a0:6d:aa:80:8e:b5:6d:5d:02:e5:5b:41:31:34:14:17:ce:
dc:98:ef:76:97:f6:30:8b:14:7a:52:8e:28:2a:43:94:bb:41:
08:d6:ff:6a:38:ee:c3:36:53:6e:be:9d:d2:bf:0c:8e:be:d7:
be:e4:e4:6c:86:89:56:5d:3d:e1:c1:6f:60:df:f5:c1:2e:02:
97:3c:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:43 2025 by rpki-client