Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json)
Hash identifier: 5MqcyVTZ4E2CdN0sCsBGytBcQ75aos6H9jxxpo41dnQ=
Subject key identifier: 18:2F:83:BD:E2:10:BC:34:52:8A:CC:76:A1:9D:BD:07:EA:AE:76:01
Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Certificate serial: 068E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
Manifest number: 0688
Signing time: Thu 30 Jan 2025 22:18:06 +0000
Manifest this update: Thu 30 Jan 2025 22:18:05 +0000
Manifest next update: Thu 06 Feb 2025 22:18:05 +0000
Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: ERccEUImQ/aOCrbBl7j6Rx8hxUwJLdvf42xuMBUxhLE=)
2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: owZNdsc75aBAEeMxk8dZOIuYb/+Ukc36obf7oLhTJGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Validity
Not Before: Jan 30 22:18:05 2025 GMT
Not After : Feb 6 22:18:05 2025 GMT
Subject: CN=679bfa9d-525d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:32:c9:8f:a5:e7:a4:d1:ff:3f:1e:5d:97:
8f:1b:4e:fa:71:03:80:5d:8c:32:09:8c:47:7c:cf:
8f:df:68:86:a0:1f:b6:48:8f:9e:3d:cf:6f:1a:bd:
ea:00:bd:24:3e:a9:07:87:98:63:7a:8f:16:7f:33:
ea:51:65:29:57:29:73:f5:e9:23:90:35:5e:15:e2:
e0:ff:d4:4c:ba:6c:34:d9:93:ea:9f:19:d6:c3:c5:
29:66:fb:0a:3e:3b:8a:3f:3c:bb:9d:c1:6f:aa:46:
71:93:24:d9:92:79:42:a1:44:e1:86:ad:d4:20:e6:
31:92:7f:b5:df:0a:c5:f4:aa:94:d8:9b:ed:35:df:
44:c1:ab:b5:e8:43:c7:64:e2:58:ca:e2:2a:ce:3c:
87:f2:62:11:69:de:10:f9:b0:0b:61:3d:89:be:5f:
0f:1c:4d:c2:37:89:bc:63:e2:6f:fa:b5:71:a1:c8:
6f:b2:a1:2e:00:9e:b4:39:f3:43:31:22:8b:2e:3e:
e0:e0:42:66:ab:98:12:f3:50:18:b5:78:ec:cf:cc:
74:71:bf:36:23:54:55:a1:8d:e1:2f:6f:8f:db:67:
a5:e6:ad:7e:ab:43:39:e5:52:f0:34:36:6c:22:a4:
78:ce:5d:44:2a:d9:a5:f8:09:ea:1f:26:7c:ff:fc:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:83:BD:E2:10:BC:34:52:8A:CC:76:A1:9D:BD:07:EA:AE:76:01
X509v3 Authority Key Identifier:
keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:aa:95:59:82:09:b9:db:1d:bd:b8:2e:b8:6c:2b:72:b7:
91:08:5d:db:1a:ff:3e:46:1a:5e:88:d2:fe:6c:d6:77:2c:d6:
bd:cc:ce:8a:d4:9a:6d:53:77:7c:9e:ee:74:b4:9c:11:0f:53:
ab:29:14:5f:2d:e0:87:38:c0:12:81:11:15:7d:a2:fa:35:f1:
37:4d:f9:80:dc:7a:59:66:62:74:18:8c:68:de:0e:93:f8:c5:
ce:a0:de:5a:a6:d2:62:ca:a3:43:4c:38:9c:ff:2a:0b:27:80:
4a:e3:18:f5:bd:1b:e6:72:ff:85:7d:f5:ac:cd:0d:ea:10:bb:
5e:0c:5c:b6:42:9f:24:44:01:92:8c:c8:bd:7d:2a:fb:7f:62:
1f:99:b6:14:d5:6a:1d:af:0e:69:f2:7c:2d:6c:38:fd:73:49:
2f:b3:9c:ed:1d:36:50:b8:74:3e:d5:3f:93:aa:04:fb:0f:46:
75:e4:af:7a:61:01:bd:5f:2d:3b:05:0c:c2:8a:1f:be:59:df:
70:ab:f9:2d:87:e5:2e:e6:36:79:d2:2a:69:37:f7:5c:1b:3e:
94:2d:76:b2:8f:21:50:17:1a:3c:24:ee:5b:3b:ec:63:da:54:
d6:02:8d:db:38:1e:17:ff:77:af:2e:64:4e:85:da:8a:39:bb:
41:7b:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:53 2025 by rpki-client