Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: D3EvLGuPmiLu4bsLQ5UQf5hJAdWnT9wXaKP+9/4/3rU=
Subject key identifier: 8B:D4:CC:C9:93:6B:CD:24:4F:FA:D1:0B:C8:73:1C:6E:68:C1:46:59
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 0288
Signing time: Fri 31 Jan 2025 01:40:49 +0000
Manifest this update: Fri 31 Jan 2025 01:40:48 +0000
Manifest next update: Fri 07 Feb 2025 01:40:48 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: WMbOq9DaGk9bIYaFJgBIfki0K/oBqq1neT0Vez3i7uQ=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 06qlKoNMAgG5qkJwM6sNlRAgtRr58eOsszFhlsT8L0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Validity
Not Before: Jan 31 01:40:48 2025 GMT
Not After : Feb 7 01:40:48 2025 GMT
Subject: CN=679c2a20-2cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:7c:e1:83:0d:b8:e2:4b:96:5f:16:a4:da:
fb:01:57:3b:5f:ca:1a:ad:6a:07:69:b5:0b:9d:74:
ec:8e:a2:bd:cd:97:c2:10:32:85:30:32:e8:84:fe:
ec:57:1e:14:a1:27:85:6a:92:79:e3:eb:59:02:0a:
f6:5f:ae:8d:54:07:5b:00:9f:bc:4d:c7:18:3c:54:
7d:8c:ba:3d:cb:d1:32:6a:5d:36:b0:3b:da:23:49:
e1:ae:bf:6c:65:f0:f5:d1:59:71:25:5a:76:36:22:
13:8d:a6:86:a1:9b:4b:0c:e4:ae:60:95:38:14:a6:
5a:07:0f:8a:ac:66:1d:e5:da:a9:e9:aa:26:68:cf:
61:f1:7c:f6:64:4e:f1:56:79:31:d0:6a:4b:7a:d8:
98:97:19:97:30:70:68:57:fe:9d:46:2c:90:60:a3:
17:2e:fb:ca:1a:68:95:97:76:22:68:09:01:7c:39:
fe:42:e8:56:df:bb:68:e1:07:26:ff:c9:4d:c9:38:
30:0a:1b:0a:05:35:6d:20:ca:8a:e4:73:de:61:11:
bb:1b:f7:6f:76:f2:79:9e:38:dd:89:54:af:06:50:
a5:d5:8e:13:15:21:ad:cb:84:36:63:27:af:bd:90:
9c:36:05:1f:45:70:18:37:53:e9:2b:1f:ce:e0:8e:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:CC:C9:93:6B:CD:24:4F:FA:D1:0B:C8:73:1C:6E:68:C1:46:59
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:cf:6e:c6:a2:d2:db:f0:13:7b:ff:9b:ca:86:49:3e:26:ae:
42:6a:6c:90:4c:fb:93:32:9d:af:97:6d:e7:25:e0:47:ca:95:
be:29:ec:21:65:98:66:9a:1e:89:f9:c7:ac:79:47:07:18:74:
7f:f3:fb:06:c8:37:51:39:d2:64:e7:f4:a2:5a:62:0b:70:e5:
1d:29:3b:cd:20:c9:c9:93:94:01:9b:bc:55:d8:f6:d4:5a:30:
99:16:4e:eb:ea:2c:81:28:81:95:88:f7:ff:38:69:9a:3a:67:
0e:d3:52:20:1d:d1:45:70:8d:6e:69:fa:fe:4c:10:40:67:68:
77:00:95:cb:0b:bc:63:c4:34:63:3b:f6:53:b4:41:97:31:f7:
57:44:d6:0d:00:93:d6:ac:b9:5a:98:53:db:c0:c7:95:37:45:
42:2e:dd:fc:41:82:6b:34:73:13:5e:b3:87:36:9e:bb:92:50:
43:69:f3:86:39:27:1a:c2:bc:f2:4e:b0:4b:f2:a4:bc:31:97:
c2:ef:0f:74:de:aa:8c:99:8e:46:5d:cd:03:a7:b6:6f:c7:bb:
a2:3b:c0:b4:f0:80:f3:35:65:27:6b:18:f1:83:c6:4d:bd:93:
53:ff:3f:9e:7a:c3:e9:69:be:5d:a0:03:c8:89:d4:5a:27:de:
9a:5d:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:55 2025 by rpki-client