Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: TMj5J2u4gIHJBtqCttDBQO3kxFgaQYYxX/xf5rfjJgI=
Subject key identifier: D4:2A:04:18:73:9E:A7:92:D2:82:E7:C4:43:F7:95:8D:9D:5E:8C:8E
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 010F
Signing time: Fri 31 Jan 2025 04:07:55 +0000
Manifest this update: Fri 31 Jan 2025 04:07:55 +0000
Manifest next update: Fri 07 Feb 2025 04:07:54 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: UKuakKP8GJ1TS7CwYEd30JNLhhwHPwzQCAaCLi5Tzio=)
2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: p2OaGBXnB53QIaUdiYcGSS4yEhTNuLi2jw8pgHfs/zU=)
3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: hqa3bLAwVOwmpF9Y6KqNaSGq/0Ts7TL9Rvw8QWvgERw=)
4: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: uzoq++xFu38JBN6N2UCnRV7497O3ABRHnG8fvqp6Dtc=)
5: 585745526BC111EEA163E774C4F9AE02.roa (hash: SgiPpSzjVYRUuSbfrex/g+dkVgdfWShv5j9Fj2CdmAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Jan 31 04:07:55 2025 GMT
Not After : Feb 7 04:07:54 2025 GMT
Subject: CN=679c4c9b-af99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:db:4e:7c:8e:c2:55:5c:75:a4:3c:d0:6b:
de:c7:e9:69:9a:78:7b:b1:a7:16:02:5c:e8:63:f8:
16:fa:64:c0:26:5a:e2:f3:9a:ce:0a:76:d6:19:a6:
16:31:8b:0d:56:99:2a:a1:f1:ba:52:da:97:cc:31:
b7:04:6c:b1:88:75:f4:72:e2:af:bc:f4:32:57:08:
50:17:d3:20:b3:d3:61:89:06:50:8d:5a:63:13:53:
ad:cd:62:3a:d2:78:c1:40:88:74:f4:fa:fb:26:6f:
8b:57:71:95:e6:9f:2d:6f:ce:49:23:75:8b:7a:4c:
e8:31:46:3f:8c:c9:5b:82:14:22:c1:73:97:7e:73:
82:7c:c0:52:8e:ba:d4:6f:3b:ac:8f:a5:4f:93:67:
fe:cf:a7:0a:12:97:ab:44:b1:b1:39:e7:51:52:cf:
e2:cc:79:6e:a3:22:db:d6:6b:43:de:3e:c3:4e:6d:
ad:54:a9:03:1f:d2:58:dc:e8:44:33:72:e0:08:04:
1d:bd:fd:26:c4:e1:3c:6d:e0:35:2a:43:8a:8c:df:
f0:7e:21:e1:59:e2:10:22:9d:6b:ab:e2:60:56:38:
41:69:d5:dc:bd:a5:91:4b:15:e1:f4:8a:ab:fe:45:
d6:1d:a1:b3:48:4f:d4:48:ca:2d:98:08:37:08:4d:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:04:18:73:9E:A7:92:D2:82:E7:C4:43:F7:95:8D:9D:5E:8C:8E
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:15:9a:8b:a7:08:b3:dc:59:97:93:de:90:e6:69:19:53:06:
26:c4:84:69:33:26:ba:22:7d:5d:18:b1:26:53:ce:cb:7d:25:
90:a3:6e:76:69:9e:6c:3b:4f:e2:0e:05:d3:70:fb:19:e6:29:
da:e2:12:ec:74:e6:45:7e:d7:8a:d6:de:12:34:ad:be:f2:5a:
a9:df:96:e5:16:38:b8:9b:36:4c:da:37:ef:ea:ff:66:3b:cb:
76:2d:dd:1f:09:bc:ad:8b:9c:9b:d6:75:6c:fd:ec:74:4f:91:
bf:ad:b6:b2:87:37:c6:c3:13:72:5b:5e:2a:73:a0:3a:b8:80:
80:14:7e:26:06:1f:e2:f9:3e:d8:4e:5a:cd:c7:93:cd:11:31:
e3:91:39:5b:19:80:34:01:23:c9:ed:48:6c:ad:fa:7e:9c:51:
ea:b4:69:11:35:6d:37:97:a7:8d:d1:b7:2e:4a:b8:ed:f7:2a:
a4:4e:7c:7d:80:b9:15:16:72:64:e9:e9:3c:78:bb:e4:64:ff:
38:92:ec:13:a0:b6:34:d0:ea:8e:31:0e:9f:2a:f8:04:69:88:
ca:0a:ca:5c:78:3a:40:5d:a2:bd:e8:60:f6:46:b6:7e:45:f3:
1e:b8:ae:62:61:8c:b8:a2:e9:5c:a4:79:16:c6:be:9d:d5:38:
b8:13:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:42 2025 by rpki-client