Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json)
Hash identifier: ZnUCysNymL6ZVT4n6QOk4MVXBJXHtrXWntByMDnfVnA=
Subject key identifier: 34:7A:D9:8C:A1:6D:8B:70:B3:6C:C6:29:98:AB:22:69:47:99:E8:91
Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Certificate serial: 34A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
Manifest number: 3481
Signing time: Fri 31 Jan 2025 14:27:36 +0000
Manifest this update: Fri 31 Jan 2025 14:27:36 +0000
Manifest next update: Fri 07 Feb 2025 14:27:36 +0000
Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: 5pdzX1Vsxun10JOLmO/SBA+xND4qB7e2yVQybB5ooTU=)
2: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: nQhhZUF5JMtMkPOaK5/t/80G84B3KX7W5B6XvFVgcbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13478 (0x34a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418
Validity
Not Before: Jan 31 14:27:36 2025 GMT
Not After : Feb 7 14:27:36 2025 GMT
Subject: CN=679cddd8-e751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:49:97:42:33:35:cd:4b:64:91:67:df:03:
2d:91:cf:8e:b8:8f:a2:dc:4e:18:e9:97:48:bb:81:
d4:e7:2f:d2:03:d3:5e:65:bc:07:8a:df:08:cd:b3:
5b:e1:b4:5d:ce:b6:83:17:fa:d4:b1:30:ce:61:2f:
76:8c:d3:bc:db:7d:a9:f0:f2:2f:0c:22:84:a0:37:
82:41:7e:76:0f:72:ac:63:0b:30:22:56:ca:f9:dd:
67:c3:27:11:d0:20:2b:b9:8d:1e:60:93:38:c8:1c:
ab:4d:cf:8c:ac:86:e0:a1:a0:75:ac:f8:f4:53:6f:
83:99:13:41:86:6b:8b:80:99:68:e4:fe:47:c5:bd:
9d:44:4c:37:19:e0:cd:4d:5b:2c:d0:a0:96:2b:e9:
b4:3b:10:58:c1:6c:b1:17:54:45:e0:f3:2a:99:5f:
2a:ee:59:cb:d2:92:fe:e2:18:3d:78:0f:b7:98:b9:
c0:a1:18:44:09:03:9f:1a:04:bf:d4:5d:3d:41:41:
da:df:45:d0:04:28:04:e5:fe:40:33:ee:f1:67:d6:
d8:0d:76:03:ba:3c:08:78:6a:31:d4:a5:5d:e2:c0:
61:38:44:fa:7d:2f:0f:b4:5a:c3:67:cb:c3:c0:f3:
f9:66:7a:7b:16:ff:92:f8:4d:a1:13:29:68:60:fd:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:D9:8C:A1:6D:8B:70:B3:6C:C6:29:98:AB:22:69:47:99:E8:91
X509v3 Authority Key Identifier:
keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4d:b4:53:89:1a:57:91:67:f0:dd:3f:44:f8:e5:25:a7:ff:
42:74:27:78:c4:c8:af:24:e2:67:64:59:af:fa:2a:83:49:8a:
f1:74:75:99:36:23:cf:74:2e:bf:3c:1f:a3:38:b9:23:49:2c:
ab:51:1a:93:90:da:0e:01:a9:8c:5d:f3:29:da:a9:5a:dd:d2:
44:ea:08:a0:df:d3:5b:3f:f9:4f:77:48:9f:fa:32:e9:67:03:
4a:6c:07:88:bf:7b:9d:e2:f4:49:c4:09:e3:e2:61:5f:28:29:
80:9e:b7:1c:76:11:46:16:1c:b5:e1:04:bd:5a:92:7e:c5:2d:
52:7f:c2:ad:2f:e1:5c:dc:7f:8f:f5:30:90:75:a2:ab:d6:bb:
fa:31:a8:f1:7a:a8:d7:ca:1c:6e:45:c6:83:27:8a:a0:0e:cd:
c3:fc:26:a2:98:e2:cd:15:2d:4d:79:9e:72:10:bf:96:92:09:
3d:45:1e:17:30:0e:10:0c:2b:3a:a9:c8:95:ac:a7:a9:7f:f7:
c9:fa:13:0e:7e:52:8a:3a:be:f2:86:61:e6:f5:80:83:e6:e2:
f1:e0:01:2b:ae:b9:e1:1c:17:b1:ad:49:31:90:76:16:cc:5d:
6e:1a:e3:09:4a:6f:f9:3d:b0:c3:d8:d3:ee:54:f3:e9:4b:3a:
a8:17:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:38 2025 by rpki-client