Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json)
Hash identifier: e9ADLoJVVCZ/UobSyzRxyQYuqrDe5JhGq42miMURPEk=
Subject key identifier: 00:97:DF:71:23:CB:91:42:2E:ED:1D:54:52:E4:AD:61:A5:9C:BD:57
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial: 1F17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
Manifest number: 1EF1
Signing time: Fri 31 Jan 2025 16:02:32 +0000
Manifest this update: Fri 31 Jan 2025 16:02:32 +0000
Manifest next update: Fri 07 Feb 2025 16:02:31 +0000
Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: eg3Ombt3zQ/InCEHc8PQtMeLSvDNntZKQ8+A9zec2xQ=)
2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: RIwHYJzTiAWJxrJm6ZlI9pwCw54A8DHzjwyPnvWV7go=)
3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dCOIN/2nmGcz+3ww4TNjjrCMZCl/2EWyMlSqG1WrmiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7959 (0x1f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Validity
Not Before: Jan 31 16:02:32 2025 GMT
Not After : Feb 7 16:02:31 2025 GMT
Subject: CN=679cf418-8b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:8e:ce:17:1e:6f:fa:48:b5:50:94:86:8d:
f2:ef:6f:2d:a5:f0:64:1c:1b:a0:47:89:52:fa:59:
f0:20:b0:18:e2:a6:7f:df:7a:25:4c:28:bd:8f:a1:
b0:b6:06:e3:c7:55:3a:82:00:90:6a:eb:b5:d9:46:
a2:5f:8a:45:5b:64:d3:76:ef:49:f0:1e:75:15:c7:
58:e7:bf:ed:29:ad:fa:ed:64:2b:4a:82:66:fd:96:
b7:c2:c7:da:e1:67:3e:5a:fc:c4:8b:07:d2:ed:6c:
13:5d:4b:16:ea:74:4a:d9:30:18:eb:50:70:b2:88:
5a:ca:2d:e1:f0:ec:f3:00:c9:fd:8d:aa:b8:ac:91:
5e:63:8e:31:d7:21:6b:ff:ac:91:71:67:ad:8a:b8:
b6:8c:f0:d2:b6:e5:25:f7:be:b1:00:0d:1a:14:eb:
8d:ec:83:59:55:fb:2e:da:62:84:84:80:60:16:8c:
ae:c0:da:7b:3d:3e:3c:3c:32:4c:4c:26:fa:06:56:
be:ed:2f:24:15:34:61:64:b2:f4:5e:bd:7f:f2:06:
a7:ae:c9:9d:c3:5c:53:2c:61:e5:84:8d:22:d2:a2:
df:56:66:e4:21:31:1d:1d:65:22:4c:cf:b5:97:f0:
e6:ef:e4:eb:b1:d4:ad:64:09:67:76:69:ab:0a:a3:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:DF:71:23:CB:91:42:2E:ED:1D:54:52:E4:AD:61:A5:9C:BD:57
X509v3 Authority Key Identifier:
keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ae:d4:65:a7:f3:ea:8d:c9:4e:90:cd:a2:38:d3:11:05:8d:
3d:46:e9:4a:35:a1:8f:55:4a:ce:3f:3c:0d:71:5b:4e:2f:f4:
d2:d0:0d:b0:13:75:43:40:bd:0c:6b:29:1b:59:dc:41:55:6f:
19:65:3d:d3:7c:87:c7:37:bb:83:39:00:d1:1d:53:74:ac:4d:
b5:2b:0b:bc:fb:4e:f7:85:8f:44:72:05:fe:8e:fd:64:dc:e3:
64:2c:0a:1b:ae:ae:6b:d0:3c:87:82:78:54:bd:2b:a2:6c:2a:
05:68:b6:63:6e:2a:8d:b9:85:05:79:da:87:85:c3:c5:9d:db:
3e:73:89:2c:82:b0:7b:29:67:50:17:40:21:1a:e8:7f:6c:e0:
1c:67:49:f2:43:67:1f:7c:20:4c:cc:ce:aa:3b:94:5f:53:44:
9c:32:08:9b:7c:08:47:a3:b6:20:76:2c:d8:e5:3d:f4:73:19:
72:fe:b5:89:60:07:01:ac:93:bf:71:8b:e3:ea:dd:0e:0b:20:
f1:17:48:95:8f:7e:61:5a:09:a9:f3:85:2d:d9:4f:1e:c5:89:
74:64:dd:db:07:7a:ea:69:bb:6d:de:2f:3f:a4:75:be:93:5d:
34:a6:e6:e7:9d:d6:e4:39:79:c6:78:5b:59:16:7c:96:2a:d0:
d9:20:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:09 2025 by rpki-client