Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json)
Hash identifier: EU0azCCW5aXXJM7fyWLHnPEepbjI/hIHDXd28kp753g=
Subject key identifier: A2:55:8C:BC:11:6E:D4:E2:23:B0:67:15:47:EE:D3:EA:3F:E0:D6:A5
Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Certificate serial: 0942
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
Manifest number: 092D
Signing time: Thu 30 Jan 2025 20:23:21 +0000
Manifest this update: Thu 30 Jan 2025 20:23:21 +0000
Manifest next update: Thu 06 Feb 2025 20:23:21 +0000
Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: qYCnUoZ/kcmz+eaMI4Uc3H+m6KIt3793LpL+wldCYGo=)
2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: bUYUEG9rlvWLeJULxYTOt+yyfrQInR4t1BBt7mMKyis=)
3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: Fq/pVmaUyaXfhTK7mExdKDljB++79tgdQzG08MLch8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370 (0x942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Validity
Not Before: Jan 30 20:23:21 2025 GMT
Not After : Feb 6 20:23:21 2025 GMT
Subject: CN=679bdfb9-75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:63:da:b8:c0:d1:d6:34:d6:d9:b8:f2:0f:
af:ec:1d:a1:51:28:3f:ec:f9:1c:bb:52:f6:b3:19:
e4:01:86:d1:21:f4:44:02:44:72:6d:0e:11:54:0e:
1b:c6:e5:81:97:16:fb:c2:56:d5:60:09:5a:62:38:
18:db:08:aa:3d:0f:7e:76:f2:1d:9e:0f:8a:c6:ac:
a3:c1:14:84:af:6b:71:85:18:47:c1:ed:56:10:2d:
92:5f:35:0e:55:dc:29:04:3a:20:2e:83:0c:50:9f:
95:7e:fc:8a:c0:82:b9:35:dd:c1:36:78:da:fa:36:
4d:16:98:b5:a2:14:a9:a2:a3:fd:d8:36:d8:42:7b:
44:f1:5f:ec:ce:dd:8d:42:58:a7:bf:16:7c:8f:56:
99:da:a0:cb:ee:98:be:b9:4a:1a:4f:16:7d:24:62:
12:22:bd:bc:61:09:8a:25:a5:49:ae:ef:4c:3e:fc:
18:66:c7:88:fd:81:79:1b:6f:be:dd:12:84:69:50:
3c:d8:e2:7c:0d:36:e4:e1:c9:62:ef:28:d7:17:07:
17:17:f2:e9:48:93:e4:15:12:77:79:20:ba:c6:6e:
78:41:ec:90:b0:ae:62:7c:ff:18:9b:bb:ee:68:3f:
bf:6a:6c:f1:c9:61:97:4b:c0:9b:24:b8:da:64:4f:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:8C:BC:11:6E:D4:E2:23:B0:67:15:47:EE:D3:EA:3F:E0:D6:A5
X509v3 Authority Key Identifier:
keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:23:0a:af:99:be:b2:e3:94:26:5a:af:36:56:6f:91:97:
72:42:1b:10:1c:e5:0f:cf:f4:2b:34:2a:ba:9e:a3:91:d4:4a:
b7:d6:ad:fe:62:1b:ae:e0:8d:0b:b4:cb:0a:bf:01:b5:6e:8f:
1a:e1:c9:6d:47:41:1a:32:30:ca:f9:f9:21:fa:98:7e:84:28:
3d:f1:c4:b2:16:2d:af:cb:75:9f:41:b8:92:e0:de:87:55:fd:
34:1f:71:e6:e9:ec:fe:d5:dc:10:09:76:d9:b9:a8:5f:2e:51:
5f:d1:81:43:38:0c:46:a5:46:d4:ea:fe:85:ca:69:09:4f:26:
77:4f:e7:e7:a6:b4:69:06:69:46:4c:99:e6:ef:da:1d:17:32:
ce:7d:e7:8a:99:44:0a:4f:09:a6:ce:5a:b8:bc:6c:be:63:08:
b5:ee:a8:b1:dc:a4:04:69:a3:4f:56:04:d0:d6:dc:df:85:06:
3b:c3:6c:d4:8e:99:8f:05:e6:ba:1f:44:0e:71:c8:94:6b:a7:
12:3f:b3:60:35:34:35:60:18:49:8e:40:92:7a:d0:89:c1:e6:
5e:e6:eb:17:87:4e:37:2e:c1:1f:3c:34:3c:4d:64:47:5f:58:
19:64:62:e3:55:42:0d:2f:d7:9f:e8:02:08:ee:bf:cf:1e:2f:
3b:75:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:03 2025 by rpki-client