Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json)
Hash identifier: ZqpcgOjRqISHbz/XKjS+ecEXALhrnD7bXIjFd8tt+ls=
Subject key identifier: 4D:9A:B1:05:2F:00:3E:23:A4:5F:C0:0E:79:37:33:C8:7C:0A:B2:FF
Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44
Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
Manifest number: D0
Signing time: Fri 31 Jan 2025 04:48:57 +0000
Manifest this update: Fri 31 Jan 2025 04:48:57 +0000
Manifest next update: Fri 07 Feb 2025 04:48:57 +0000
Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: lJhSt3OUo8cZX5b2AP8qZOTVu7miLsSzUreyZgA2o40=)
2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
Validity
Not Before: Jan 31 04:48:57 2025 GMT
Not After : Feb 7 04:48:57 2025 GMT
Subject: CN=679c5639-d131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:b8:23:12:d8:8a:6b:2c:6f:de:d6:5d:c6:
be:ac:3d:f1:13:40:cf:a8:6d:67:c1:de:60:96:44:
d6:ce:fb:07:ea:29:00:07:17:95:23:67:73:ba:fa:
a4:04:f7:7e:00:15:34:ba:c5:8c:ec:58:61:b2:35:
77:5b:87:5e:e9:ed:d2:e2:72:35:84:d3:82:ac:4d:
16:4e:13:78:1a:4c:60:81:56:ca:61:4b:93:8c:0b:
a3:8d:fd:09:03:e4:57:c5:ef:85:c1:54:fb:63:c8:
f0:35:23:65:ab:0b:76:54:03:f8:c3:6a:5d:62:cb:
ad:e7:19:5e:af:25:41:98:fb:ec:a2:22:f6:57:53:
10:b5:7b:7c:b7:4f:09:47:43:2c:fe:ae:f0:ae:f2:
2e:9e:dc:03:61:c3:d4:fe:21:6d:e5:af:0f:8a:7e:
45:15:7c:5f:f4:48:9e:27:57:44:b3:3b:3a:d9:af:
cc:a3:2a:33:f8:13:90:5d:31:70:78:fe:f4:eb:b8:
46:77:05:2c:94:3f:d9:6f:9d:03:de:c4:9f:9c:38:
5f:13:82:f9:a4:d1:5d:12:fa:18:b0:18:2d:14:bb:
79:12:50:e6:af:0c:ef:26:72:fa:76:be:85:c0:2f:
23:61:bc:0c:83:a6:d7:92:cb:d6:22:37:f0:01:b3:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:B1:05:2F:00:3E:23:A4:5F:C0:0E:79:37:33:C8:7C:0A:B2:FF
X509v3 Authority Key Identifier:
keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2c:c8:82:e3:02:4b:b5:8c:46:69:d7:fa:6e:92:f2:68:38:
f8:8e:24:fa:e4:6d:3b:73:c6:c7:22:b1:37:52:a5:13:b3:f4:
76:4f:ac:bf:d2:f0:75:9a:ac:42:6c:01:24:57:ec:b5:3a:ac:
18:ca:b6:a6:b6:bb:0e:c3:22:a5:fa:bd:b8:0b:2f:df:a4:84:
2e:1d:1a:62:05:de:99:53:d8:f0:01:40:07:9b:c8:ab:33:db:
5a:23:b5:b1:f2:3b:e3:df:5d:e4:20:eb:8a:16:6f:f0:a4:7e:
36:89:72:51:c7:e3:e3:0b:cb:e3:e5:0e:16:03:d1:96:e0:e7:
93:02:de:1c:54:ec:33:e3:30:a8:2c:f5:de:d4:fe:61:fd:74:
0a:7c:58:ff:38:4c:ae:c0:3e:3b:0d:6f:4c:03:3b:5a:a8:a3:
6f:79:6f:99:81:76:63:6e:52:3e:89:bd:40:13:e9:0b:f8:6a:
1b:c0:47:b8:99:01:1a:1b:57:8e:c7:f1:e5:dd:ef:c8:b8:92:
1f:6b:ab:73:28:06:ba:24:2e:ee:45:f7:2a:b9:69:1b:00:ac:
42:a4:eb:57:aa:40:e8:dd:5e:69:97:9b:17:93:8d:8f:a5:77:
77:8b:11:55:21:32:12:fd:5f:d5:91:c6:a9:e8:82:78:50:8e:
11:a8:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:15 2025 by rpki-client