Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json)
Hash identifier: qU2fBSsOM/0fvUMNJpbmryjxi+bfyp87e9O+t0OBxqY=
Subject key identifier: FC:E3:14:F6:F5:22:3B:F4:98:AC:4C:88:77:A5:8E:57:E0:FB:6D:A0
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial: 0BD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
Manifest number: 0BCF
Signing time: Fri 31 Jan 2025 18:41:08 +0000
Manifest this update: Fri 31 Jan 2025 18:41:08 +0000
Manifest next update: Fri 07 Feb 2025 18:41:08 +0000
Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: nhCw7cqQAiBdfbpmQ9FuBAhqHTx10IrcD7aTFqr8/TY=)
2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Validity
Not Before: Jan 31 18:41:08 2025 GMT
Not After : Feb 7 18:41:08 2025 GMT
Subject: CN=679d1944-0667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:44:3d:73:58:a4:8b:51:a1:43:0f:d4:7e:
29:90:9d:00:36:40:ea:ae:c2:83:ae:f3:a0:db:6e:
f8:d9:07:9e:1e:2a:c9:8b:63:87:25:cb:09:ad:4c:
b0:7f:62:3c:f8:bf:21:ea:d4:aa:b5:57:eb:65:ee:
ca:eb:14:c3:33:9c:44:70:39:26:c9:73:13:1a:61:
45:b9:10:b7:86:87:3a:a7:d0:0b:ab:a9:5e:39:84:
10:e1:91:57:d1:d9:f4:dd:ba:10:08:b9:3d:33:8a:
cf:de:b3:98:aa:26:a6:3e:fe:a8:90:85:cf:ee:b1:
31:5d:eb:f0:3d:54:fd:cb:93:03:88:c1:ef:f2:eb:
c1:b4:29:2e:88:96:bc:93:b8:11:1d:48:83:99:0b:
9f:cb:ef:d2:5a:25:91:97:66:d6:2d:8d:e5:a7:2c:
92:d5:92:40:1b:f1:3f:bd:b9:da:5d:0b:f5:cb:db:
f2:71:34:34:21:f8:ac:35:5d:8e:36:51:0a:e9:2a:
df:2b:5a:a0:8e:03:96:0a:cb:23:33:2e:f5:1e:a9:
8e:44:dd:e4:e8:9e:bf:b0:70:14:2d:72:8c:72:ee:
36:3c:9e:cd:19:f2:a5:65:97:9a:87:99:1e:fa:44:
c5:e3:d0:1e:57:df:0e:1f:96:4c:98:08:cf:c2:a2:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E3:14:F6:F5:22:3B:F4:98:AC:4C:88:77:A5:8E:57:E0:FB:6D:A0
X509v3 Authority Key Identifier:
keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a6:a6:8d:f8:14:c1:7d:d6:64:c2:b1:ea:c2:cb:6d:fc:a9:
11:3a:56:a1:7c:ed:b4:74:f4:32:42:46:42:c5:13:55:ec:5d:
7c:a0:c4:ba:8a:f0:0e:ce:b6:c9:4f:5c:cf:7e:55:0a:f8:f2:
48:7c:86:21:d7:8c:44:fa:62:10:b6:d0:e6:f4:20:a1:ea:7c:
ea:15:11:03:ca:0f:46:33:84:ec:51:1e:58:9f:ef:a1:e7:c3:
9d:e4:80:15:e1:9f:7f:3d:11:e4:9f:7a:e9:47:34:95:5a:c1:
49:37:6f:f0:a5:53:2c:8d:1a:3d:c8:02:a8:fb:34:cb:1b:ad:
24:56:e9:c2:46:48:cc:dc:a1:b4:69:12:9a:84:d0:a4:65:5e:
3a:df:68:71:4b:e3:85:7c:35:16:2b:51:c4:67:74:ef:36:75:
83:6f:fb:3e:df:f1:4b:df:c4:3e:3f:41:55:db:87:5c:7c:85:
e6:04:fc:29:6c:1d:02:2f:fa:a0:c0:24:df:aa:01:f2:0d:82:
8c:7d:77:23:83:df:68:b0:0e:9f:b9:30:a7:1c:7c:7d:62:a7:
6b:c8:ee:b4:19:0b:6e:30:e7:a9:e4:33:02:1e:27:46:6e:71:
f7:64:0d:25:4c:3d:fd:c3:3b:47:e4:96:84:61:46:8c:0e:77:
08:83:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:23:06 2025 by rpki-client