Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier: FTJV4/Q/Oid+pDwk/8ZOSWbdk1kqkebslnrmcYna5GE=
Subject key identifier: 29:B4:F5:3B:88:D1:E5:84:44:23:88:99:0A:00:78:73:60:DC:77:01
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number: 0627
Signing time: Thu 30 Jan 2025 22:39:49 +0000
Manifest this update: Thu 30 Jan 2025 22:39:49 +0000
Manifest next update: Thu 06 Feb 2025 22:39:49 +0000
Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: U0ViXyyCAmqWAtMhNZU+bb9mGVvxMwYLHibbuIPHZHs=)
2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: ut9kkhaYpPkueMT9PUXekkExmboRUtj4jv3lyVcffmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Validity
Not Before: Jan 30 22:39:49 2025 GMT
Not After : Feb 6 22:39:49 2025 GMT
Subject: CN=679bffb5-98b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:b7:ba:0a:3a:67:82:00:38:bc:12:61:b9:
a6:26:76:72:93:92:b9:36:d2:0e:c3:7d:67:ed:dd:
f0:99:94:06:23:46:42:87:0a:8f:fd:c6:0e:7c:58:
6e:f1:e0:48:e9:78:95:a6:6e:2b:af:6a:90:fa:39:
c2:71:3c:7a:f8:b9:7d:9a:d5:8e:17:d2:43:32:a4:
af:df:47:65:f0:f6:3d:ca:00:46:5f:df:8d:d3:9a:
21:65:73:44:de:22:32:1c:33:75:67:c0:8b:49:7b:
60:cd:63:73:dd:57:c1:85:49:df:2c:f0:f1:56:79:
9d:db:7c:5a:f8:d8:b9:98:d6:6d:65:62:4c:f8:55:
d2:db:8c:8a:c7:0d:f7:ba:02:17:d0:cb:41:2f:e3:
65:d8:37:06:74:29:26:fd:ef:0c:c9:dd:36:19:f5:
db:bb:ce:c4:e7:e4:06:35:b5:82:0b:c5:6a:3b:cf:
d5:a7:82:b6:5a:bc:09:ba:ef:f6:bd:db:64:2b:36:
62:39:f5:e0:c5:7d:e7:1f:33:4f:2b:28:43:0e:c9:
9f:49:fb:9c:8e:98:5d:77:41:58:8d:da:d6:d7:d8:
6f:f3:7b:6e:0a:38:74:0b:e1:9c:53:af:85:9b:15:
9d:33:6d:c3:92:76:59:74:40:2d:d5:f2:d1:58:3b:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:F5:3B:88:D1:E5:84:44:23:88:99:0A:00:78:73:60:DC:77:01
X509v3 Authority Key Identifier:
keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:9c:4b:e5:fb:fe:37:a0:52:57:4b:b9:7b:9c:e8:5a:c3:
3c:52:ba:df:b4:72:1a:46:01:2f:81:3c:0d:96:85:bf:1e:13:
27:60:55:62:b8:bc:28:9b:60:f9:12:27:63:19:79:8b:af:87:
df:1b:20:8f:53:09:79:81:c9:2a:34:d6:a5:2b:ae:95:7d:6c:
57:f5:ec:a7:56:18:f0:0d:04:b5:bf:1b:b1:99:c5:17:1b:0f:
04:13:88:df:87:23:24:1b:c6:ef:4b:af:38:a8:1e:22:2e:1c:
38:81:8c:84:0f:d5:a4:86:23:13:c9:a1:9e:9b:e6:13:a8:7b:
a8:eb:9e:91:27:9f:77:a4:09:dd:fe:46:76:88:2f:55:c3:a5:
99:6a:3c:ff:61:dd:f2:91:ec:63:29:b9:a2:13:db:3d:6e:8d:
9f:bc:df:8e:ca:e9:ce:68:45:e1:08:e6:a7:93:76:de:36:ee:
b2:aa:69:cc:10:22:c1:5d:84:02:61:bf:e7:d4:21:55:12:86:
71:c9:a3:4e:86:cb:77:54:76:fe:82:87:e1:e9:dd:2c:b9:00:
64:d7:22:d6:57:c7:31:cc:c1:5d:8e:18:72:e5:ff:23:03:ca:
67:05:9d:05:e1:54:00:85:f9:af:43:d4:49:09:12:bc:14:a4:
8d:77:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:54 2025 by rpki-client