
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json)
Hash identifier: CoRkVW9uY37NIcHTZJLzAJX3f0YocD8DGLSEFJnkNk8=
Subject key identifier: 98:6F:23:6D:5D:92:8A:41:24:C7:5E:B9:E0:9C:21:A5:5D:99:2C:54
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial: 036F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
Manifest number: 0369
Signing time: Fri 31 Jan 2025 00:59:47 +0000
Manifest this update: Fri 31 Jan 2025 00:59:46 +0000
Manifest next update: Fri 07 Feb 2025 00:59:46 +0000
Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: CW8VXkic4t0bTOGAufqJz8+5HGcrZtPD5TmB998I5Xk=)
2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: 0Kz75Ec+aiyaTgQW5w9kydRmf1vsulhgyrIgS2fmNao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879 (0x36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Validity
Not Before: Jan 31 00:59:46 2025 GMT
Not After : Feb 7 00:59:46 2025 GMT
Subject: CN=679c2082-0ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:89:4e:05:e1:80:88:27:63:aa:19:32:ae:
b5:1c:ea:6d:1d:9d:77:16:f6:92:e8:08:4d:78:2c:
4d:48:e1:5a:80:3c:d6:49:44:62:c9:50:58:7c:85:
9a:88:c5:33:42:81:2b:4f:af:4b:f6:be:bf:dc:8a:
a5:09:20:51:06:c6:f5:04:c8:b2:89:b0:cb:e0:61:
40:75:e2:77:0e:a4:a5:cf:cf:eb:96:6e:5d:ce:6c:
32:80:68:1e:84:42:6c:49:28:67:83:97:af:9d:08:
ae:0f:c4:94:c7:d8:2e:c8:21:23:b1:40:ab:4e:7f:
ba:d9:3d:a7:f2:a3:0f:e3:ce:7e:32:e3:ae:23:f3:
5a:09:36:a1:9a:48:3e:88:44:5c:e0:42:81:b9:41:
44:e7:7b:fd:1d:05:95:ee:9d:06:bc:26:f2:8e:5e:
28:03:54:b1:83:bb:61:12:09:4e:5e:2c:af:b8:1c:
7e:82:50:6e:59:3b:28:55:6b:f3:a0:4d:4a:fa:0e:
f7:c1:a5:d5:1a:71:22:c7:2a:ad:b2:9c:4a:cf:ea:
e6:92:0a:89:d5:0a:44:b9:c3:53:a6:32:ef:16:8a:
b1:9e:48:28:6d:4b:2c:cb:f7:19:c4:48:8c:c0:46:
78:cb:70:10:90:45:81:b0:9f:f9:03:94:89:3b:9c:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:23:6D:5D:92:8A:41:24:C7:5E:B9:E0:9C:21:A5:5D:99:2C:54
X509v3 Authority Key Identifier:
keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:7c:f4:9b:02:ec:cf:8c:a1:2b:90:a7:4d:60:55:7b:91:
ac:3f:33:16:3b:b1:d6:fb:4c:df:78:7f:8a:58:4c:74:e9:89:
91:b0:a5:f2:cc:b7:98:8e:b5:f1:1d:a4:2e:4f:a7:96:85:b4:
1c:b5:f4:0a:d5:f2:06:53:ea:53:1c:ed:bd:ac:b7:38:16:99:
e2:0d:c3:b0:de:60:27:8f:ae:09:43:08:3e:e1:26:a0:67:84:
ed:b7:fc:a7:06:0d:46:32:85:24:8b:30:fb:44:3a:e1:db:8b:
98:03:87:32:a3:6f:33:b4:da:26:65:a0:d1:b2:51:c9:c3:c0:
e5:f3:3a:54:b6:97:42:88:98:12:16:4c:5e:f4:30:b1:88:18:
72:fb:d1:d2:cb:4a:ef:d7:c4:20:9e:54:f0:a9:b9:b1:38:be:
54:2e:e1:d3:6a:22:b5:9f:74:ff:eb:18:fd:3a:d6:7b:14:d5:
d1:af:6a:d8:0b:13:da:fe:5d:b6:1d:df:0e:81:b5:ec:39:20:
0d:a6:8e:87:c4:84:fc:0d:c1:55:9b:97:fc:44:11:ec:ea:63:
50:23:ac:aa:de:05:0d:c8:2f:1b:9d:0d:aa:ec:55:33:e5:93:
5a:ec:e5:f4:02:83:6d:cb:b1:a2:92:c3:26:45:61:e6:2c:7a:
c6:43:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:56 2025 by rpki-client