Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File: xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier: MxnWwLIWlC+cGueKFXZXggSELpZZ8GomR3NjASqaKTw=
Subject key identifier: 23:B4:C8:7B:E6:E2:F4:AB:77:C9:E9:DE:75:8B:AB:5F:26:2A:76:1D
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial: 0381
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number: 037D
Signing time: Fri 31 Jan 2025 00:55:19 +0000
Manifest this update: Fri 31 Jan 2025 00:55:19 +0000
Manifest next update: Fri 07 Feb 2025 00:55:19 +0000
Files and hashes: 1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: 5D52y0Qc4VwSDyzZdlpywOvQcn0etCXTCbR0vlpgb/U=)
2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: nlvzWGcCzQ3g4WB0QEnebQiCK2io0J1tCDKfBVlK9FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Validity
Not Before: Jan 31 00:55:19 2025 GMT
Not After : Feb 7 00:55:19 2025 GMT
Subject: CN=679c1f77-8589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:e5:a4:5a:40:41:3c:66:f7:4b:c7:15:6c:
4c:27:c0:d0:a0:bf:d9:c8:6f:3e:7d:9b:06:db:1c:
c5:14:d2:86:b5:e5:40:66:8d:48:51:55:ad:03:e1:
90:7b:a4:e1:88:11:e4:bf:3d:21:d9:09:e0:52:34:
02:38:c2:a8:b9:6b:58:09:44:40:24:70:ad:c1:d8:
95:fb:a9:de:d0:9a:d9:72:ee:d1:73:48:01:c6:a5:
8b:5a:19:15:73:6b:d3:33:0d:fa:85:5e:90:4c:68:
e5:93:ac:23:29:09:cc:1b:8c:e6:e0:55:87:95:e9:
38:17:69:7f:36:83:f3:2a:c9:eb:43:32:9d:05:23:
ec:00:ae:99:e1:61:19:77:5c:5c:1d:a0:50:b7:2b:
9e:1c:21:7d:7f:2d:90:56:b0:f2:3b:81:60:1f:74:
09:c7:f8:34:fd:30:56:0b:d1:88:3e:33:40:b4:13:
83:aa:73:79:ab:94:e3:f1:ed:f3:65:5f:40:67:42:
37:89:14:28:3a:b0:9c:b6:f1:76:a1:05:58:a6:46:
9c:7d:67:28:29:4b:ed:59:2e:68:e1:43:83:c2:ae:
12:61:2b:92:d0:5d:e1:ed:18:bd:29:c2:07:49:8c:
bf:94:cc:b5:01:d1:fd:38:24:df:16:cb:0d:74:c6:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:C8:7B:E6:E2:F4:AB:77:C9:E9:DE:75:8B:AB:5F:26:2A:76:1D
X509v3 Authority Key Identifier:
keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d2:75:28:59:36:d7:46:14:3c:8f:75:52:a8:1f:79:91:21:
17:65:6f:f7:b9:f7:e2:cb:16:3a:54:7a:4e:21:fd:a7:63:e0:
c1:00:76:8b:ee:4e:42:28:7e:ff:b8:cd:b2:5b:90:29:a8:ee:
9c:ae:50:dc:84:19:f2:5f:2f:ba:66:f3:09:56:b9:d5:63:1d:
5a:be:73:7d:33:a1:30:97:2e:c8:bc:69:0b:dc:ff:e0:da:22:
8c:d9:ed:39:62:99:06:48:05:b4:0b:4d:5b:09:e0:56:a0:2f:
b6:d5:c0:ce:43:9c:97:a8:bb:d3:21:93:5a:87:2e:97:a7:9e:
c7:e8:4c:b5:f2:7c:b1:90:61:eb:a2:64:8c:b4:65:d3:44:36:
9f:00:05:64:93:ae:ae:12:7d:6d:a6:f0:87:26:78:7d:3c:01:
c2:9c:eb:f3:b8:3c:46:0a:8d:64:b5:b8:18:af:d7:8f:1c:d4:
75:61:78:24:21:56:68:e4:06:b7:e3:6e:13:92:12:c9:57:1e:
c4:2b:ed:90:b8:6f:e6:f9:80:21:37:02:f4:59:a3:b1:ec:f6:
69:7a:5f:2b:fb:f9:48:00:41:a9:b3:0b:b2:5e:f0:ab:c6:cf:
04:9c:32:e6:37:cc:05:af:cf:0a:f5:b6:43:5a:60:55:5e:bd:
5b:9a:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:15 2025 by rpki-client