Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier: TwU+uYf8bgPSwhOscyFj8VQ6931R7C+2JqiHbR4rm6A=
Subject key identifier: 8C:D2:A5:12:7B:7B:88:41:8F:D9:CC:A5:55:9F:B9:DB:1A:4B:24:BD
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number: 0C03
Signing time: Fri 31 Jan 2025 18:32:16 +0000
Manifest this update: Fri 31 Jan 2025 18:32:15 +0000
Manifest next update: Fri 07 Feb 2025 18:32:15 +0000
Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: Ob8iEKIbNoozD5WkV5cEuPqkL05n1pqtslXbJkwwxhM=)
2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: SVlu02hkSNzBlCDk2yMt2xQVwlZY+Mck+6jTuLXWYgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Validity
Not Before: Jan 31 18:32:15 2025 GMT
Not After : Feb 7 18:32:15 2025 GMT
Subject: CN=679d1730-425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:61:01:80:70:e8:57:87:46:15:de:ce:ae:
15:02:e4:ef:23:62:17:2d:e0:d8:7d:ee:c6:6c:25:
b3:33:38:dc:68:56:00:07:cd:23:d6:5b:30:b5:b8:
05:7a:22:5a:5d:68:90:07:7a:ec:41:de:34:87:4f:
1e:e2:13:3e:04:77:d4:74:39:0d:a4:55:0c:20:3a:
a8:21:45:51:05:8d:29:59:7c:63:83:ef:cc:b2:08:
4d:f7:08:58:37:4d:6f:46:00:8c:76:52:6d:4e:3f:
0c:6b:4b:27:9f:43:3b:50:9a:e6:2e:66:73:d3:92:
a6:c3:2d:1a:77:f8:fd:3c:10:b9:8b:cf:48:3f:19:
45:d0:59:60:f6:09:1f:35:dc:34:50:e8:1d:3f:a2:
61:8d:61:5e:f5:e7:47:02:d2:87:86:20:bc:fe:7e:
85:8a:4a:f8:fc:6e:b2:02:8c:30:02:04:1e:da:01:
8a:b7:48:8d:58:35:f6:ed:14:5d:2d:3a:63:43:e2:
fa:c8:c6:af:89:ba:40:8b:30:89:af:be:f9:a5:04:
a2:c4:88:95:3f:8c:2a:00:46:99:ce:66:92:7e:84:
5a:c0:32:28:82:d2:41:1b:89:22:2a:e3:1c:54:f2:
4e:3c:2e:93:bc:b3:2a:7b:51:c8:7a:f5:90:61:3c:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:A5:12:7B:7B:88:41:8F:D9:CC:A5:55:9F:B9:DB:1A:4B:24:BD
X509v3 Authority Key Identifier:
keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ac:96:13:35:7a:6f:a7:3c:d4:9b:cc:5c:01:67:0b:91:af:
5a:a5:b7:ed:cb:f8:75:00:01:7f:cf:8c:c7:b6:06:85:ae:f0:
db:d7:11:19:1b:3c:72:65:fb:d7:ab:a5:ad:aa:45:4c:e4:45:
d6:bd:b5:11:e4:0e:44:f7:b5:a1:bf:ca:9d:55:bf:91:0b:d3:
63:9b:01:7d:57:3f:84:90:ff:4e:38:60:48:7b:0f:49:a3:29:
49:00:a3:a9:21:b0:a9:c2:d3:e1:10:9a:05:ad:fa:bb:b2:39:
63:ab:4b:73:b7:f8:08:aa:fb:28:3c:24:77:2d:a8:cb:20:fe:
3e:b1:e2:2f:3b:f2:d6:a5:d7:7c:70:88:3d:0b:eb:8f:4f:bc:
ab:0d:fe:35:bb:f8:c3:72:62:23:1d:4b:b7:22:ae:e8:92:13:
8c:8b:d9:9b:1e:95:15:2d:74:a2:b5:9b:c7:4a:30:b0:cd:66:
b0:fa:c9:30:5d:bf:5a:74:66:2c:83:db:34:0e:f0:bb:fa:b3:
2f:1d:7f:ed:f9:80:fb:36:f5:a3:45:1f:65:cc:ee:ba:07:c2:
f4:51:94:b8:2f:a6:15:3b:15:5f:58:ca:9b:25:3e:57:1d:4e:
4e:51:c4:79:a8:71:5c:0e:de:a5:f5:7b:c3:97:c6:d3:7c:a3:
11:9c:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:28:59 2025 by rpki-client