Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json)
Hash identifier: /SpUhW/eFNshft4/+gl4K9/hzRp6lh/vtM3BCd/repY=
Subject key identifier: F6:9B:2A:80:A4:5C:ED:99:4C:AB:F3:09:4F:0D:26:88:0A:16:3F:BD
Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Certificate serial: 0759
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
Manifest number: 074E
Signing time: Thu 30 Jan 2025 21:31:34 +0000
Manifest this update: Thu 30 Jan 2025 21:31:33 +0000
Manifest next update: Thu 06 Feb 2025 21:31:33 +0000
Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: aAJOy34a5LEAdLebXBMWAncHt2rc4g/uaEBekzk3ghI=)
2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: TZy3mzqffsTM4n4Rbmohmuv3VCPWE9WJRvRzq53CbvQ=)
3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: IPmClsdSMbassfXddv44p/mv8kyQ7PdScutwrTiO+q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Validity
Not Before: Jan 30 21:31:33 2025 GMT
Not After : Feb 6 21:31:33 2025 GMT
Subject: CN=679befb6-ce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:9a:72:2b:b6:3e:ac:82:c8:a7:e9:c9:35:
ef:a8:b3:13:0c:76:22:b2:5f:e6:f2:d7:07:0b:5d:
c5:de:cf:c7:31:37:ea:de:d1:e7:e0:55:ab:6e:96:
0c:3f:eb:08:4a:1b:35:b4:17:a9:27:b2:d4:c5:42:
85:55:7b:93:c4:f5:ad:a2:72:9b:33:05:58:75:10:
f4:9d:d5:76:c1:fb:65:f2:19:dd:f3:af:71:b7:4b:
e8:e1:54:05:f5:80:b5:24:7c:71:7f:42:dc:77:70:
9d:30:5a:a5:9c:17:79:2f:cc:3c:d2:a7:37:a4:27:
e5:c3:74:38:37:6f:b4:3b:7d:47:c8:ea:1f:90:31:
8d:cd:ed:be:02:af:08:b9:ce:95:05:e4:ae:be:2c:
05:bb:ba:6f:46:aa:b7:e5:9f:1f:a2:54:61:0e:1a:
ae:7d:35:7d:dc:b2:33:13:36:6d:8a:a7:58:3d:4b:
63:32:98:4f:b7:ea:f1:0d:4f:b7:ba:9c:96:69:0f:
23:90:88:e8:13:da:20:ba:28:06:d8:b6:99:86:e4:
4b:e3:2f:41:c8:ac:3b:d2:22:8a:c8:fb:43:91:ef:
fb:c4:44:f4:c5:25:85:ad:6f:5f:41:91:63:e4:c2:
c2:7e:4f:7b:81:05:df:66:76:92:8d:21:23:34:21:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:2A:80:A4:5C:ED:99:4C:AB:F3:09:4F:0D:26:88:0A:16:3F:BD
X509v3 Authority Key Identifier:
keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:95:bc:24:1e:ab:13:c4:b5:30:88:00:c2:8c:37:13:79:ca:
b5:d5:16:92:84:9a:31:38:1a:ba:1c:1f:0e:d1:d6:03:d9:95:
4e:d8:f4:89:32:5f:00:da:1d:e9:8e:7f:23:b8:5c:95:c9:af:
fe:01:9b:0f:8b:c0:c3:d0:5e:b6:d1:6b:66:da:c8:04:2c:1b:
2c:14:b8:3e:59:5e:df:f6:19:38:8d:e9:0f:02:2f:41:17:a0:
00:c9:19:cc:98:fc:ab:58:38:43:06:df:f2:b5:a1:7b:77:1b:
d3:0d:3d:0e:2b:09:9a:da:5f:6f:57:ea:39:7b:4b:30:04:b4:
5b:8e:39:ee:18:a7:14:42:a9:bd:3e:04:21:5e:69:00:00:06:
8c:df:b7:c9:a0:d5:81:80:4b:60:4d:12:50:26:90:1d:1b:29:
96:8e:5a:d9:ed:b8:48:54:ca:d0:cd:54:42:a3:6c:27:f3:e9:
b9:6a:88:21:d6:a4:2d:05:01:bc:d3:05:03:bd:f3:b8:45:71:
00:1c:a5:b3:d5:6e:1a:74:9c:da:1d:05:3e:a8:09:f3:18:fe:
07:da:63:f8:6b:78:7a:c5:06:40:93:39:ef:6c:91:32:09:22:
28:99:c0:b8:4c:db:7e:3a:2d:f0:e5:82:47:5a:4e:8e:9f:75:
45:a5:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:59 2025 by rpki-client