Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier: WWi25x8KIy7i3Eh/1gY99H6e9TWywqXhuQqFtuJJ8BY=
Subject key identifier: E7:03:F8:EF:B2:6C:B8:A2:F4:F2:F4:6F:0F:8B:BE:F8:14:97:9A:7D
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial: 0560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number: 055B
Signing time: Thu 30 Jan 2025 23:25:31 +0000
Manifest this update: Thu 30 Jan 2025 23:25:30 +0000
Manifest next update: Thu 06 Feb 2025 23:25:30 +0000
Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: jdWVmGf2N9epXzHUvquAqP6ELjtm44wqFBLCEoNkubI=)
2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: C2RsYbuvVkPn9nhOkeMiqyxQvhJHdbdxyne9j3bxktw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1376 (0x560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Validity
Not Before: Jan 30 23:25:30 2025 GMT
Not After : Feb 6 23:25:30 2025 GMT
Subject: CN=679c0a6b-3d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:c8:08:b9:40:41:4e:a8:47:9a:14:2a:df:
c4:23:f3:89:26:8c:33:b8:81:12:a2:8b:be:7f:0d:
f6:b1:8c:e2:4a:58:9c:bc:76:b2:a9:75:33:7e:3c:
24:e8:a4:35:47:b2:7f:70:3d:05:98:d3:f0:06:fc:
1b:35:a0:a7:95:0d:29:65:1e:fa:b4:31:03:a2:1f:
e1:7e:c0:a2:bd:44:fa:50:bc:6d:e4:f9:92:5f:b0:
46:79:a5:57:15:15:50:65:a8:c0:2a:8e:3e:4c:5c:
8b:a7:56:f0:80:35:4f:cf:8b:8d:14:dc:31:86:d1:
e5:93:88:6e:c8:e1:4c:2a:e2:4f:b7:c0:85:08:79:
f1:58:16:82:d8:55:99:43:75:14:e5:06:41:6b:4a:
4c:18:9a:09:3b:48:a1:e0:7b:36:73:5f:0f:d5:14:
2d:9f:6a:f5:cc:50:0c:49:ae:76:bf:28:0f:07:7a:
25:77:6e:3d:ab:4d:78:62:96:68:74:fa:73:1e:5d:
dc:63:2e:90:71:0d:78:db:0e:bd:32:09:7f:7e:be:
2f:40:c8:00:c9:36:79:33:64:55:7e:f1:66:0a:ff:
5e:0d:19:79:ea:b7:ad:10:7e:f0:4c:5c:38:ed:ba:
e6:00:48:65:cc:62:b2:26:23:82:0e:be:11:56:89:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:F8:EF:B2:6C:B8:A2:F4:F2:F4:6F:0F:8B:BE:F8:14:97:9A:7D
X509v3 Authority Key Identifier:
keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:5b:37:80:fb:e9:2b:62:d3:f4:53:5b:8b:2d:26:ce:10:6c:
36:36:64:c0:a0:a8:b0:5e:cc:0d:e6:9f:cf:f5:04:27:c3:15:
9c:5d:c3:04:41:c5:70:00:16:39:a9:1e:66:b0:9e:cd:98:76:
07:11:d9:0a:17:30:d4:85:80:e3:7c:4e:e5:81:ef:bc:7d:0c:
27:00:4f:09:87:4b:4e:e4:a1:e2:30:7e:d6:9c:73:1e:89:46:
6c:8e:09:a9:fc:2c:a7:05:eb:73:df:47:fa:87:25:e2:7e:2b:
3a:d0:6a:5b:ae:db:c6:6f:f6:bb:02:7d:00:76:9d:ca:8f:b9:
5d:bb:2d:a6:09:64:68:3f:40:43:d9:b5:f7:1b:06:88:53:3c:
98:54:ac:5f:55:8b:19:18:25:55:b1:69:ac:73:a2:bf:ba:89:
34:0e:c8:30:75:40:c3:ef:bf:e6:39:96:9e:31:17:14:cf:48:
22:f9:4e:9c:6d:27:33:c1:aa:dd:b8:43:11:09:6b:82:0b:00:
08:5d:86:b2:db:00:1c:d2:cb:f3:1c:f8:ad:66:db:0f:7c:8c:
22:a8:05:49:13:83:a9:9f:ec:12:a7:fe:22:b5:d7:8f:e0:d8:
fa:a6:e3:bf:8d:e4:a1:e2:13:ed:7e:e2:94:e9:c4:07:00:07:
9b:9b:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:55 2025 by rpki-client