Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier: XbbU+k+iQMCmIEbssGBDfyX6l3t1R2oUi1JYZnS1RC8=
Subject key identifier: 37:AB:80:14:67:82:21:1B:26:4F:F4:14:A9:95:2D:BC:78:E0:E9:D6
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number: 018E
Signing time: Fri 31 Jan 2025 02:48:50 +0000
Manifest this update: Fri 31 Jan 2025 02:48:50 +0000
Manifest next update: Fri 07 Feb 2025 02:48:50 +0000
Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: 3XEWzkOMWYPvVX/9iRAKurJ0hI1kUIAzucTkroEh3eA=)
2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=)
3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Jan 31 02:48:50 2025 GMT
Not After : Feb 7 02:48:50 2025 GMT
Subject: CN=679c3a12-e519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:db:ae:ab:a5:92:ac:2c:13:d0:5a:30:45:
7b:02:3b:98:36:95:86:12:9c:25:07:67:1a:87:cd:
2e:65:bb:26:db:34:4a:b7:68:fd:f2:a6:13:95:79:
97:ab:f9:77:0a:f4:c5:cf:1e:b0:40:4f:88:41:1e:
7f:46:6a:c0:04:b6:61:2a:5a:ce:75:a1:fb:27:d8:
6a:23:f6:19:de:00:62:b5:d7:a7:56:a7:3e:26:b6:
7f:05:ab:6b:a1:38:12:d5:9e:80:bb:36:c8:c1:74:
06:ff:83:14:50:b6:8a:e4:d7:9d:d7:e0:41:85:d6:
48:95:5f:be:96:f7:a1:51:ec:90:2f:97:ea:36:f2:
24:4e:00:29:cd:32:13:40:c2:b4:a7:41:4b:dd:d7:
aa:90:ef:5c:6d:63:e5:fe:db:7f:5d:b7:54:5a:75:
27:44:69:e8:6c:4c:61:e9:ef:2d:77:46:94:f3:dc:
fe:b2:d0:fd:2c:65:a1:18:a0:85:1d:eb:3f:ab:fd:
6e:d8:46:86:57:53:11:c7:e9:12:11:2a:a2:51:eb:
aa:28:8e:da:fe:72:bc:25:09:e6:63:35:20:6a:e5:
30:0f:7c:85:10:7f:a1:39:48:30:dc:61:cc:be:a3:
fe:15:a5:42:66:2a:4f:b3:26:68:7b:70:c8:44:7b:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:80:14:67:82:21:1B:26:4F:F4:14:A9:95:2D:BC:78:E0:E9:D6
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:89:2f:6f:5d:63:67:0c:23:e2:4c:56:50:f0:34:39:c1:
18:c6:d8:c8:cd:7d:24:6b:bf:e1:6d:28:71:ae:3f:ed:ce:74:
cf:8d:c9:c5:9a:f9:4b:34:68:2c:ac:85:9d:09:14:48:ba:c1:
b8:ce:f5:8b:eb:8b:3d:e6:49:37:1d:c7:c1:53:5e:c2:b1:db:
49:5a:9a:5a:1a:9f:0f:41:96:8c:55:83:84:a1:6e:bc:2d:40:
53:c9:d3:bf:80:a5:28:3f:0c:4e:ed:46:d2:4e:09:a1:c8:0b:
cc:0d:8b:5a:0e:b0:77:e5:9a:1a:ab:b1:8b:df:8d:cd:e3:ce:
2c:b7:25:d6:75:45:1e:99:e6:17:b6:35:5b:b8:83:f5:53:ef:
10:25:4e:74:ce:5d:43:78:52:93:2a:e0:53:96:b2:5f:e4:39:
f8:c2:a6:ee:8c:bc:39:06:35:34:12:c3:a0:22:a4:98:b0:64:
1d:fa:ed:6a:4e:f4:40:06:cf:66:1a:fd:2f:07:79:7f:52:28:
b9:82:9f:e9:dc:90:6f:65:ee:b9:24:90:aa:e6:4c:21:c9:34:
d8:c5:3f:77:ba:cc:b4:67:38:02:d5:e0:f7:ce:fe:f9:93:24:
8b:e1:05:23:29:c4:3f:08:63:af:0c:f6:26:2f:cf:a4:2d:c5:
50:a9:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:07 2025 by rpki-client