Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier: sseAofmmm2jTqTr788d35QhPssX3olAms5mP8roptjQ=
Subject key identifier: BC:30:25:AE:10:D4:D0:95:6E:3F:D7:08:FD:D2:8C:3D:4C:55:EF:69
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial: 3460
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number: 3455
Signing time: Fri 31 Jan 2025 15:04:37 +0000
Manifest this update: Fri 31 Jan 2025 15:04:37 +0000
Manifest next update: Fri 07 Feb 2025 15:04:37 +0000
Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: WaWt1nn5GgoeSO8mm/go46inVhzuNoRSK6++NyDR2SM=)
2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: MhJb3XjLOL3S3f85AHCTiNFrJTZkovxDcMZN2VWhFE0=)
3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: QKTIJoLV0kcmiUQHRhTLsS+Q9UN68Klhf4IOq31e6nU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13408 (0x3460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Validity
Not Before: Jan 31 15:04:37 2025 GMT
Not After : Feb 7 15:04:37 2025 GMT
Subject: CN=679ce685-2e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:5a:ad:47:d6:97:94:ee:85:65:6d:36:77:
bc:16:88:17:10:b5:83:c2:a2:df:e8:bc:76:b9:c0:
db:de:ec:35:60:fb:23:0a:ce:71:4f:e8:01:86:97:
e9:7c:81:5d:d7:2d:ed:35:a3:23:9a:c7:21:40:c8:
04:f5:1e:a8:54:85:dc:45:6e:db:13:db:8b:a7:92:
d0:06:9c:00:fa:d3:a6:23:01:67:a2:62:ba:e6:c2:
cf:1c:db:26:4d:20:7f:30:2a:74:d8:14:ab:1b:e2:
c9:0b:7e:1b:1c:45:9d:b9:56:19:59:78:b4:ce:e4:
2a:ca:59:d9:b6:58:cc:c3:c4:d9:0e:55:5a:d5:09:
7e:14:42:09:b0:98:b6:d2:47:3d:1f:a3:ce:f8:d3:
0f:c9:34:70:84:76:94:24:cb:f0:93:58:0e:61:8f:
4a:1d:06:b8:ba:4e:d0:ba:1e:a5:d8:a1:59:50:7d:
d0:c8:5b:e7:08:bc:ed:a2:39:99:2d:dd:d6:f8:19:
93:93:4b:b5:88:4b:a5:e7:41:3e:2a:c4:06:1e:1a:
e8:94:93:f8:85:d8:0f:80:73:0f:96:bd:b5:be:b5:
6f:58:12:cf:7c:6c:b6:ab:8d:c6:40:93:16:e5:e7:
14:de:d7:c8:ba:6b:5f:8e:50:f5:30:2a:53:92:4c:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:25:AE:10:D4:D0:95:6E:3F:D7:08:FD:D2:8C:3D:4C:55:EF:69
X509v3 Authority Key Identifier:
keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:72:a4:d9:d2:35:3a:52:e6:22:3e:13:3c:86:db:c0:ae:21:
22:3f:7b:fe:ba:46:1c:58:be:a8:bb:0d:9e:5e:ba:50:a0:77:
55:38:05:74:11:1c:bf:e9:ce:65:3e:71:bc:01:9a:7a:d7:d5:
3a:92:9d:74:4e:86:a9:55:48:cb:0b:8c:2d:33:06:8f:45:cc:
94:e0:33:09:a4:60:03:ad:88:96:fb:9c:21:05:d8:bf:e8:c9:
92:71:77:5f:a7:d7:e1:db:90:4e:fd:04:72:5a:a1:93:14:a5:
70:33:06:d3:fd:a3:a9:f5:a4:ed:f4:61:b7:a6:be:38:fa:b2:
13:3d:a1:4f:5a:8a:6c:06:26:17:83:17:f8:20:fd:16:d3:bc:
9c:dd:62:4e:cd:43:d4:29:53:d5:52:42:ec:49:84:35:bc:e2:
b4:65:76:cd:14:97:c8:fe:a2:14:d7:35:43:e8:fd:0d:06:64:
81:ca:d0:04:56:69:42:36:b9:73:f9:29:d1:cf:b1:30:4b:74:
70:22:bc:8a:98:e2:77:1c:0a:97:20:2a:4f:71:92:fc:ee:6a:
8a:e8:97:9f:35:24:e7:ef:a5:10:d9:03:29:09:3b:f7:ad:1d:
2d:99:7b:cd:d3:b7:98:9f:42:5e:14:3f:b0:fe:bb:f0:bd:ca:
ec:f3:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:52 2025 by rpki-client