
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier: Ax/i95XaAPEojtIL9wzEezvYb9YfJTkxAbqWR14V6Oo=
Subject key identifier: DE:12:37:92:3A:C3:CD:98:41:35:13:77:DE:6A:1C:39:F8:BE:5F:7F
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number: EF
Signing time: Fri 31 Jan 2025 04:28:33 +0000
Manifest this update: Fri 31 Jan 2025 04:28:32 +0000
Manifest next update: Fri 07 Feb 2025 04:28:32 +0000
Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: qVk5AMqpmN3oCAoXVjREklCzhULF8mI4+L2UsQ0TkEQ=)
2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: 0mz+0e1i75LjHInfBODtd+9jL2NlY68nRhoEgkLCSZI=)
3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=)
4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: iSOdJt+BL8ENRxFcv4jaFJ7KNoHUX0Q/WLaLzbaI1bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Validity
Not Before: Jan 31 04:28:32 2025 GMT
Not After : Feb 7 04:28:32 2025 GMT
Subject: CN=679c5170-63d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:bd:41:f1:2d:03:a4:ea:c3:d4:48:60:d8:
b7:b1:77:fe:f5:47:98:aa:a8:79:1e:11:a1:09:b4:
ba:27:0b:8f:18:4d:a5:67:50:04:8f:58:bf:10:c5:
90:b9:39:da:a0:11:16:15:3b:7e:04:97:4e:27:d5:
c3:8b:52:d3:b2:24:95:84:8b:8b:85:ea:c6:0e:67:
b3:f1:42:26:d5:89:47:a0:64:b4:02:d2:5e:6a:96:
1d:94:a9:77:eb:de:14:88:3f:ce:8d:86:09:32:fa:
61:1d:e3:02:c8:65:a2:3c:45:06:a7:81:f5:49:0e:
07:0d:68:32:08:b4:67:f8:4a:eb:03:cd:ee:46:18:
30:f4:77:4d:2f:63:ab:c3:75:95:01:50:40:a8:2c:
bc:5b:4d:6e:e2:85:cc:f9:bc:02:0e:6c:4a:1f:98:
cd:de:9b:74:03:a5:f7:c2:08:2a:e1:35:70:70:a9:
68:7d:83:a1:ab:ff:e8:65:06:72:27:53:9b:79:bb:
b9:63:83:e9:0c:65:29:41:e9:a4:90:2b:3b:e5:ba:
6b:d7:b0:13:72:18:19:1d:c1:6e:5f:59:b1:48:1d:
68:de:f2:10:e8:e8:6d:bb:15:d2:23:f4:46:a9:6b:
bc:f1:81:f6:c1:a5:7b:13:43:4b:5f:44:76:b7:3c:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:37:92:3A:C3:CD:98:41:35:13:77:DE:6A:1C:39:F8:BE:5F:7F
X509v3 Authority Key Identifier:
keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:1f:29:50:bb:5f:25:bb:e5:6b:95:69:72:75:0c:bc:25:f5:
78:22:a3:fb:08:ed:7e:19:dc:0b:c2:84:f0:ce:fe:b8:ba:4d:
c6:81:78:7a:20:4c:61:31:fc:f4:bb:88:d1:5e:01:61:58:8b:
0b:17:c2:a7:1b:22:2f:e9:b4:56:f4:f8:c8:90:5f:35:b5:7d:
60:ef:48:50:57:a9:79:98:68:25:9f:40:fc:ee:7e:4b:fc:6a:
fc:f8:ac:77:cf:13:18:54:c1:6f:9e:7b:9a:4a:46:7e:34:49:
24:e5:3d:bf:73:1c:b8:a7:c3:3c:cb:ce:91:98:6e:58:8c:95:
e3:c4:fa:e1:b5:5c:80:df:d8:23:aa:ee:a0:64:b1:f9:a9:3b:
0f:a6:66:93:b4:20:41:bf:7d:31:15:8f:d1:1a:90:5e:85:89:
10:18:af:39:c5:71:a8:45:96:93:fb:aa:17:2d:36:47:4b:6f:
78:aa:26:a8:f2:7a:b9:0a:7b:f5:0a:05:cc:14:f2:a3:c6:82:
99:22:c6:f3:56:80:4c:94:dc:39:28:f8:59:90:a2:c2:70:4c:
e4:f5:9e:c4:bb:2e:f6:9d:fc:3a:bb:c8:e5:4d:89:d4:32:23:
b6:03:d1:c2:be:f1:d1:2d:4c:be:62:8f:00:36:83:d7:0b:17:
1f:53:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:18 2025 by rpki-client