Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier: p/i7YgEMjoHSEwLlm6kbol61sgFlKLMPWQ9+yVBvrus=
Subject key identifier: F1:73:76:FE:C0:2B:0C:B5:DA:0F:01:C7:14:3A:E5:E1:72:1E:25:A2
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial: 0909
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number: 0900
Signing time: Thu 30 Jan 2025 20:26:14 +0000
Manifest this update: Thu 30 Jan 2025 20:26:13 +0000
Manifest next update: Thu 06 Feb 2025 20:26:13 +0000
Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: du2jaur56BvpOvqEDOiBAC/k+vE5Iwj0SNcKCbw7rUg=)
2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=)
3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Validity
Not Before: Jan 30 20:26:13 2025 GMT
Not After : Feb 6 20:26:13 2025 GMT
Subject: CN=679be066-a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:86:64:cb:a3:35:0a:43:eb:0c:fe:89:b2:
80:e3:56:3f:f0:99:58:c8:82:4f:c3:b0:13:28:c8:
01:d4:a9:c9:b9:8d:e2:15:4a:a5:85:33:91:5c:60:
52:ec:05:75:df:37:a6:d0:8c:6f:5e:51:d1:6b:39:
da:b9:b7:8f:e0:b5:0c:67:8a:47:34:78:be:1e:ad:
7f:10:a9:95:75:88:93:73:3a:ef:db:39:65:bb:4a:
88:e5:cf:0e:2e:f3:31:9e:cd:f8:9f:1f:45:b2:66:
7f:22:61:18:bd:cb:d1:92:17:59:95:21:0a:9f:ca:
0f:98:f3:62:f8:e6:10:4a:16:3f:ca:a3:f2:8a:b3:
27:fa:c0:5a:b4:e8:b5:6f:23:72:a0:82:9d:ad:b6:
dd:6f:a4:80:65:de:7d:63:12:83:dc:df:23:59:9c:
45:91:90:12:08:86:aa:cb:e9:80:ff:12:95:5a:be:
d0:1e:d6:70:0e:9a:85:73:49:81:33:25:81:04:f9:
5d:72:14:84:6c:26:80:2b:66:b5:51:2d:8b:4a:a7:
f3:9b:c9:7c:ed:b0:c0:5f:51:ec:7a:af:2b:bb:12:
a0:2f:74:da:bd:75:a7:ae:6e:d2:8f:91:7d:ac:1c:
13:3a:48:89:e9:8d:9e:12:36:ab:6a:41:1e:92:5e:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:76:FE:C0:2B:0C:B5:DA:0F:01:C7:14:3A:E5:E1:72:1E:25:A2
X509v3 Authority Key Identifier:
keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:1d:72:3e:a7:21:29:44:ad:9a:54:59:ac:91:1a:91:98:
da:71:1f:66:5e:a2:81:0c:1b:c8:62:01:f5:48:ae:38:38:30:
7f:8d:99:74:0f:aa:9f:3e:3a:fe:de:50:35:97:45:a3:8e:b1:
d8:35:44:06:be:7c:a3:07:8c:97:4c:1b:dd:f0:9c:f1:60:dd:
f4:a7:78:58:dd:a4:4f:8f:be:9c:f7:c7:f8:32:7c:a8:ea:80:
ca:e1:c6:f4:53:d9:08:67:45:32:27:ea:19:43:94:64:41:6c:
e3:3f:8b:d2:61:69:87:8d:71:f6:9f:b1:79:5e:a0:16:35:b5:
f9:8d:3e:b1:cc:b4:bd:49:9c:f9:fb:cf:02:1d:e0:bc:43:ad:
5e:fe:40:32:7a:12:89:68:d2:ab:8c:f5:13:11:4b:17:da:b0:
e6:54:d6:1a:48:57:18:00:0d:c9:27:f1:67:dc:ab:29:bd:d5:
6f:6a:5a:aa:d6:83:67:40:3d:19:e5:7b:5a:f4:06:e6:84:66:
23:d4:ef:4c:49:0b:b7:ca:5f:cb:4e:12:49:a2:9d:72:db:48:
ea:e5:3c:c7:00:b2:47:06:0f:6f:f9:12:1c:f5:b3:72:47:75:
4c:97:82:f7:5a:38:47:8e:7f:1c:c7:f3:e5:b2:40:2d:da:dd:
89:a7:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:39 2025 by rpki-client