Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft
File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json)
Hash identifier: 0V7qhebcRNnuZ83SMCqaISYGsIumYXqA0P7TMuP+pwc=
Subject key identifier: 5C:D3:DD:3C:E6:7A:63:1D:FA:46:34:99:08:27:5E:F3:4E:A9:47:0C
Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA
Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft
Manifest number: 0604
Signing time: Thu 30 Jan 2025 19:53:00 +0000
Manifest this update: Thu 30 Jan 2025 19:52:59 +0000
Manifest next update: Thu 06 Feb 2025 19:52:59 +0000
Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: jx+A4jOiRWyk35V1fNbHYiPWIVSXXW3kVT55AH54BQI=)
2: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: W590cMYjFz6FF4sW9oqplqFnjP+zPSYVDh+Je0kzPIE=)
3: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: eFxwV6TYZjxk4/Ekn5nyzAgAfEQn65e+4zP6/WFsXnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA
Validity
Not Before: Jan 30 19:52:59 2025 GMT
Not After : Feb 6 19:52:59 2025 GMT
Subject: CN=679bd89c-0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:33:0f:ae:85:33:0d:cf:e9:ee:c6:2e:b1:
4b:89:e2:ab:fa:be:88:ba:1a:68:b0:fc:04:21:60:
8d:44:3d:8b:91:22:47:b2:2f:2f:ae:5c:49:84:b3:
21:cc:4e:8e:da:b9:50:ee:2e:f4:97:e6:b5:82:43:
49:00:8e:dd:2d:8b:19:13:2f:6c:09:bd:e4:61:f5:
5f:d8:7f:5a:29:e3:ca:23:da:3e:b3:59:7c:2d:33:
bb:a6:c1:67:92:57:a5:22:a1:f0:ba:72:ba:63:33:
b9:07:fb:f0:04:ce:ba:b6:56:94:c9:50:81:e2:d7:
4d:79:1b:e4:dd:d3:a9:50:cc:1f:86:88:ca:54:f0:
a5:58:2e:21:31:76:a1:c6:a9:b6:31:a2:19:83:bd:
78:b4:5c:52:e0:4d:94:c8:01:9a:a7:f6:a8:75:53:
38:24:6d:f6:0e:7c:c0:fe:8b:86:13:69:2f:35:ea:
26:16:73:06:54:26:88:9a:0c:00:70:8d:39:10:6b:
7f:ed:1b:a3:8f:77:2d:45:df:23:1a:3c:9b:02:23:
b0:4a:8f:10:dc:c1:9a:97:ec:9c:2d:87:b8:99:35:
e3:6a:e3:82:58:e7:b5:98:35:d2:c8:95:a9:15:9b:
04:90:0f:64:c8:57:05:cc:75:d6:8e:b7:7c:bd:29:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:DD:3C:E6:7A:63:1D:FA:46:34:99:08:27:5E:F3:4E:A9:47:0C
X509v3 Authority Key Identifier:
keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:07:18:5f:b7:ca:de:28:2d:6f:e9:f7:95:c0:52:f9:28:ee:
5c:a4:50:f3:e9:14:df:c0:95:52:8a:eb:12:49:94:4e:fb:59:
ba:1f:8b:1f:4c:ee:12:c6:26:a4:97:f3:94:a7:4c:b1:30:7e:
e2:56:69:fe:79:0e:97:df:30:91:ad:b0:43:fb:5c:7d:c6:b5:
67:88:1e:53:cf:59:d8:03:53:ca:2d:73:6c:ee:7a:3a:b7:94:
c4:61:6c:30:12:c4:27:c7:42:c1:81:f1:89:9d:1c:a5:8d:34:
2c:3d:5a:85:a0:53:79:f4:f3:e3:d4:ca:41:de:2c:54:1f:f9:
bd:3c:e8:1b:08:3a:51:85:ee:e9:25:dd:ab:e8:99:65:72:15:
5b:8a:b7:95:51:62:b2:fb:78:2f:22:aa:ee:e7:89:55:54:93:
e1:96:da:b7:31:d9:32:1d:5b:59:de:1d:74:a9:07:a4:52:4b:
ad:70:76:e3:7e:18:c0:31:cc:b3:cd:33:da:97:fa:01:9c:83:
eb:5a:92:b6:5c:ef:24:8f:39:78:7c:10:24:1a:7f:3b:d7:47:
a1:20:c0:73:9f:dd:2b:a3:aa:14:2b:65:74:3a:fa:df:ad:84:
64:36:c6:c0:0b:02:75:88:bd:13:51:08:cd:2f:3e:f7:85:82:
28:fc:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:54 2025 by rpki-client