Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json)
Hash identifier: v5Mk62DgHXDkw5b7/ejWMWWne6rC8TH8O2ADg/1O4FI=
Subject key identifier: BD:96:05:9A:76:1B:EC:1B:08:9E:82:40:29:07:91:BE:34:45:E1:BE
Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18
Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118
Certificate serial: 0BDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
Manifest number: 0BD6
Signing time: Fri 31 Jan 2025 18:41:00 +0000
Manifest this update: Fri 31 Jan 2025 18:40:59 +0000
Manifest next update: Fri 07 Feb 2025 18:40:59 +0000
Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: IHPREFSp46VdD38RoSUrrZjLOT2XL5NUMddnje3/02U=)
2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: H306zJ6w0u++pxJwnmCEZeb1MJYQzvBqunxs7beIBF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3037 (0xbdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118
Validity
Not Before: Jan 31 18:40:59 2025 GMT
Not After : Feb 7 18:40:59 2025 GMT
Subject: CN=679d193c-0bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:36:ee:5d:ec:d0:cc:fa:f0:80:e9:54:b0:
6a:27:92:f2:38:1b:45:06:9d:11:0e:30:7e:db:b6:
c2:3d:d1:f2:d2:1f:be:5e:5e:48:8b:55:80:5b:63:
f1:c8:af:10:59:16:10:5b:03:d0:2e:e0:17:11:b4:
b2:86:b1:0d:7b:49:4b:ba:94:bb:3d:c1:25:45:a8:
05:7b:ab:b5:99:6e:b8:b1:65:73:5a:23:96:47:1e:
4a:a1:09:b1:cf:95:31:b5:aa:ed:d5:cf:4f:e0:c8:
85:fa:16:1e:40:63:68:92:c5:98:0d:6e:3e:ec:68:
14:8f:00:9b:e3:13:74:b7:a8:cd:fc:d5:1a:8d:8d:
76:b5:76:be:dc:11:cc:89:87:a5:66:b4:18:1b:07:
71:ff:54:2e:09:40:43:26:2b:1c:5b:03:8d:5d:7e:
d4:d0:54:0b:94:7f:f6:fe:b5:a8:b0:80:46:50:22:
30:26:ae:13:73:b8:52:da:36:6c:eb:54:9b:25:ab:
65:e7:98:57:80:d6:ae:17:6b:bd:66:8f:96:f1:e3:
45:13:98:6f:5c:9d:79:a3:2b:c0:75:9f:22:41:98:
9a:66:fc:c5:57:4f:4a:ce:dc:ae:84:25:db:8a:b9:
22:17:a0:f3:a4:a4:7c:5c:b6:f9:0c:20:4c:8a:86:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:96:05:9A:76:1B:EC:1B:08:9E:82:40:29:07:91:BE:34:45:E1:BE
X509v3 Authority Key Identifier:
keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:64:0d:82:4a:79:d8:b4:cd:77:00:0c:aa:73:a9:e4:3f:
a9:26:7b:49:89:97:60:b8:68:2f:27:6e:00:e9:74:13:47:ad:
6c:73:a9:64:30:9a:6e:8c:c9:22:5c:47:ef:af:c4:02:97:78:
0b:59:7e:de:9b:67:37:ac:15:70:b9:97:3b:e8:9c:25:2a:20:
a2:fc:24:ec:91:22:11:82:72:f2:05:79:ae:59:28:3c:8c:71:
ac:df:1d:c8:4a:82:dd:12:d4:25:cc:e9:52:ec:ac:d2:8c:74:
e9:86:fa:64:d3:8d:8c:e4:e8:38:b9:d4:ec:2b:58:b8:9f:d3:
f6:32:45:23:24:92:2a:00:7b:10:30:ce:94:5d:fc:17:aa:fc:
1f:a2:b3:69:8e:ec:98:b6:16:db:eb:24:9a:5e:f7:77:6c:bb:
b1:2d:a8:97:af:d7:c3:e6:7c:b8:27:60:5a:a5:4d:ac:b2:0a:
22:cc:61:eb:db:e0:f6:23:d7:3d:bf:b9:5a:2a:44:06:e4:c2:
70:e8:bd:39:d2:ad:63:9a:a0:a1:0a:d2:34:2f:b6:14:b6:3c:
e8:44:e0:aa:6b:b5:0a:98:36:82:04:20:e3:cc:72:6b:91:93:
0a:79:42:08:08:f1:ba:4f:77:0f:02:95:67:58:46:01:08:ed:
91:bc:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:13:54 2025 by rpki-client