Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json)
Hash identifier: Uo+M9S9UPCIUWf5IV2Xo74hZckzUkqypzYdiEbQ1l/4=
Subject key identifier: 8E:FC:EA:38:F8:1F:88:3F:58:AE:72:FA:ED:6E:8E:86:94:AD:D5:AC
Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Certificate serial: 25C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
Manifest number: 253C
Signing time: Fri 31 Jan 2025 15:46:07 +0000
Manifest this update: Fri 31 Jan 2025 15:46:07 +0000
Manifest next update: Fri 07 Feb 2025 15:46:07 +0000
Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: viLUlGcDL0CtJ8RR5slD1Cb/rsxn8MfxEU8qL5kIeu0=)
2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=)
3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: sPjEV8NdOTwFwPMcdQnUOL5yo6ytt7upFB96AA18yK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9673 (0x25c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Validity
Not Before: Jan 31 15:46:07 2025 GMT
Not After : Feb 7 15:46:07 2025 GMT
Subject: CN=679cf03f-8fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:32:bf:21:b0:84:69:aa:22:18:1e:1e:6a:
2c:4a:5d:5a:62:ac:31:3c:e4:64:5f:dc:d8:0d:9b:
07:84:fb:30:f1:e9:26:e6:df:5c:19:1a:a2:47:97:
59:2c:e6:a9:b2:20:35:0d:26:1e:5d:c1:1e:3d:33:
89:3d:87:6f:36:42:b7:bd:db:e4:7f:9f:ad:6e:36:
9c:75:cb:b3:dc:9b:99:6e:e9:fc:07:4b:f5:c0:f5:
7c:45:f4:f5:6c:8c:62:d4:53:99:e4:40:7d:c6:66:
96:98:f6:c1:bd:cb:e2:d7:b5:7f:37:8f:fa:33:9d:
66:77:1b:b7:60:6e:e5:44:e2:29:d3:40:1e:0b:92:
3d:52:63:a2:42:ee:f0:2d:b4:02:13:5b:d3:30:d9:
5f:ed:f8:05:a2:85:d1:83:b8:fd:cd:64:64:01:5b:
73:ed:d4:4f:cc:2c:70:03:eb:94:57:40:c0:de:9f:
e9:ed:f6:ca:df:a4:ba:86:28:99:b5:3c:59:f3:eb:
9f:47:7c:6f:e2:fc:1c:d4:54:cd:7f:21:56:cb:72:
47:45:9a:cc:36:0e:86:f8:eb:4d:dc:aa:21:e1:8e:
8d:07:bb:78:32:18:73:f2:93:ba:24:fc:bb:f0:56:
75:b1:a3:02:8a:57:78:0e:2a:f1:d0:ee:24:a5:2a:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:EA:38:F8:1F:88:3F:58:AE:72:FA:ED:6E:8E:86:94:AD:D5:AC
X509v3 Authority Key Identifier:
keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c3:b2:fd:ae:04:8d:1d:a1:09:06:87:d7:df:91:7e:b4:9a:
8a:40:7f:62:32:8e:84:51:94:dc:9f:e9:f4:32:bd:44:79:fc:
47:43:d5:db:20:fb:ad:e0:e2:c6:a1:a9:f3:a6:15:2f:c7:b0:
7e:bf:50:92:a6:08:d5:16:ff:1c:12:8e:d7:66:68:81:79:55:
a1:ae:d4:2b:9d:54:93:6f:4a:43:d1:15:4d:6e:86:53:0e:ef:
d3:8f:4c:0a:c9:a8:28:d1:05:9d:ed:11:5c:cc:91:20:85:56:
43:2f:8f:8b:d5:5e:c6:81:75:fb:12:1f:10:6a:be:58:5c:cb:
82:0b:9d:3b:14:f3:98:e9:bc:22:4b:e7:65:67:68:76:10:a7:
c9:3f:45:f5:b6:7a:b7:94:bf:7e:cd:9e:c4:cc:c9:e0:d5:28:
ea:96:ea:3e:69:06:5a:b8:f2:be:96:02:9a:6b:57:d8:21:75:
52:da:9a:a8:ce:0e:f3:7b:fa:3f:82:f8:cd:9f:b4:6d:40:24:
00:90:b3:40:1f:bc:0c:41:67:36:88:05:0f:ff:eb:a7:34:61:
ea:20:2c:94:91:77:59:02:27:8a:50:3f:be:e8:e0:96:b8:ca:
69:ef:45:71:f4:9d:7c:ef:22:c3:ab:e1:82:f5:ec:9a:89:7d:
bf:21:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:12 2025 by rpki-client