Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier: sfCcxVwcvQeywAZQmWBMTQ1Qk7e44wdXqpQvDqwfBXc=
Subject key identifier: 39:71:37:41:98:A3:AF:BD:7E:6C:E2:6F:C5:20:E1:A2:AE:C5:DB:7C
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial: 0ED9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number: 0ED0
Signing time: Fri 31 Jan 2025 17:38:42 +0000
Manifest this update: Fri 31 Jan 2025 17:38:41 +0000
Manifest next update: Fri 07 Feb 2025 17:38:41 +0000
Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: EUuGBPlP3x89NEG6XNf+AY6TpCIjS0ikORKrhOa/xeY=)
2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: IUxOhh5i3F8AXkiEHRy2ZFcsd2EB0EPXzUnc2RHCPV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3801 (0xed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Validity
Not Before: Jan 31 17:38:41 2025 GMT
Not After : Feb 7 17:38:41 2025 GMT
Subject: CN=679d0aa1-fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:97:da:f8:7b:a0:9e:53:9f:c4:15:b3:af:
04:01:27:ed:45:a5:f5:c1:34:c5:48:ad:17:f6:e7:
6e:76:79:cd:c6:c1:58:90:f4:ed:12:4e:25:c6:6b:
ac:f3:6b:4e:87:ab:1c:19:1e:a2:5c:34:68:5a:c2:
10:f7:6d:fa:42:fc:8b:11:d1:0b:c0:31:2a:40:1f:
8b:53:1e:b9:e4:56:5e:57:3d:6e:53:8f:50:90:74:
f6:ac:10:d6:3e:8a:20:7a:db:63:15:1a:d5:f9:e9:
e5:75:39:53:95:66:2c:05:07:76:29:04:bb:80:e3:
77:08:50:6e:ce:7e:7e:11:f3:a3:3d:f7:ea:40:28:
92:ec:ef:53:fd:02:b0:6f:d4:aa:10:43:38:8a:8d:
44:b0:4b:4c:22:78:cf:16:ac:c1:19:46:7f:24:75:
ec:e6:f1:b9:de:4a:d4:f0:2a:32:c2:c0:f7:21:fd:
d2:b3:ee:34:fc:b2:a8:f7:5d:64:86:8a:6b:5d:3c:
49:48:fd:c5:12:da:5b:af:4c:d3:22:f6:06:ef:31:
1b:59:ac:b0:11:2e:88:02:87:94:b4:31:60:08:cb:
40:64:ac:f8:62:9c:1e:41:cb:c5:64:66:70:4f:cf:
b6:9e:f2:30:f9:0c:db:f5:72:4a:28:7b:84:d3:4e:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:37:41:98:A3:AF:BD:7E:6C:E2:6F:C5:20:E1:A2:AE:C5:DB:7C
X509v3 Authority Key Identifier:
keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:18:de:f9:1a:fb:4f:f2:4f:66:ee:18:fb:62:2c:b5:03:
00:d1:2c:a6:87:22:77:5c:ea:90:fc:80:eb:89:75:8c:59:65:
05:f4:ef:0c:cb:0b:32:7f:4b:15:c7:10:5a:55:ce:7f:4a:c1:
ae:95:a7:ef:79:bc:1c:e3:06:0e:54:57:36:48:b4:e3:b8:3f:
d4:a5:d8:2a:e1:ba:d2:df:a4:34:f0:59:30:56:d1:29:c1:4b:
f3:8c:62:cf:52:b0:f1:e2:08:e9:ca:f7:0a:f1:88:4a:f6:e0:
46:eb:54:7f:1c:30:79:13:ee:b8:54:08:30:6a:16:11:fb:b0:
f7:53:a0:77:9e:31:05:0f:1c:d7:8d:a9:6f:c7:91:4c:fb:97:
74:34:b5:3e:49:9e:e4:30:8f:03:35:77:98:0d:8b:82:93:27:
18:ee:e5:90:89:43:ff:00:f3:36:57:41:21:61:9e:08:cb:e2:
90:85:8f:8f:ad:fa:5c:58:29:18:49:8c:4a:56:ec:85:85:23:
ce:99:1c:c8:fb:02:26:35:65:4f:62:9b:89:7e:95:50:8a:4c:
c3:7f:68:64:2d:34:53:32:65:92:05:d3:fd:aa:fe:e5:f5:af:
98:1c:83:62:b9:cd:d6:43:29:0f:f1:3c:82:96:15:8b:f7:c8:
29:c9:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:25 2025 by rpki-client