Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
File: 32d9hpNHe5Kh6f58IEImls6oYJ0.mft (raw, json)
Hash identifier: RiP+s8zgZUBspMzrpvx1eO1YadhB/nFay0S5+TZYBC8=
Subject key identifier: 17:86:6A:A6:3E:E6:53:33:AE:67:7B:51:3D:2A:7D:60:9C:F2:0D:AD
Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
Manifest number: 02D4
Signing time: Fri 31 Jan 2025 01:28:35 +0000
Manifest this update: Fri 31 Jan 2025 01:28:34 +0000
Manifest next update: Fri 07 Feb 2025 01:28:34 +0000
Files and hashes: 1: 32d9hpNHe5Kh6f58IEImls6oYJ0.crl (hash: PgJh7l4boIzgRZt4i/dILjlP4aeaaNngphrbbDXFUBk=)
2: 756558C6D19611ECB75A996BC4F9AE02.roa (hash: Es4xWH/MOyfkkc/RYd9IRsc0K3PRc1MXcB8ZFrJBb4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Validity
Not Before: Jan 31 01:28:34 2025 GMT
Not After : Feb 7 01:28:34 2025 GMT
Subject: CN=679c2742-f8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:41:97:f3:da:61:0c:4d:59:ac:87:97:27:
c7:c9:05:1f:e9:c0:a7:e1:eb:8a:f7:6c:02:ae:d1:
2f:a6:00:72:50:81:84:de:07:56:76:7c:a8:d5:64:
c3:07:82:b5:a3:24:c1:68:36:29:49:c6:c6:65:75:
8a:c5:00:d7:07:05:25:fd:76:b3:89:dc:6a:32:6e:
39:b4:c8:18:2f:07:e5:13:3c:5e:cb:24:47:9d:f9:
ab:7f:58:23:81:a8:67:ed:ea:52:41:d9:30:a5:44:
53:c0:a9:1e:9a:68:16:5a:ed:c8:1f:53:95:f4:af:
b4:93:df:8b:fa:d4:f2:23:f1:72:6e:d9:1f:dd:d0:
5d:05:77:0e:e5:5d:e2:2e:ca:ff:5c:36:39:26:a0:
39:af:a4:58:c6:f6:d0:04:83:bb:69:3f:d5:a5:82:
51:2e:f8:ee:c1:52:2e:77:88:be:4b:05:e7:81:f8:
a6:36:93:8d:af:41:b7:fe:9f:b6:b5:3f:dd:9b:f5:
5b:d5:e1:a7:f2:0f:8d:71:0f:d5:63:88:2e:76:1d:
98:67:73:fb:91:7f:c1:9c:e3:d3:60:23:d6:2a:f6:
62:8c:b1:03:94:ed:a9:52:35:10:de:01:ca:8b:81:
64:6f:b1:35:5b:76:21:ea:83:0c:bb:62:37:b4:39:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:86:6A:A6:3E:E6:53:33:AE:67:7B:51:3D:2A:7D:60:9C:F2:0D:AD
X509v3 Authority Key Identifier:
keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7e:6b:f7:35:9f:0d:29:16:4b:09:fc:df:ee:66:d4:e9:9b:
ec:fe:46:fd:3c:b6:48:bb:c0:32:19:40:95:b8:ca:69:ce:ee:
c0:18:d2:0a:94:47:dc:0f:85:0f:e8:10:a8:e3:fe:6d:38:27:
12:5a:5b:b5:10:16:1d:38:91:bc:09:40:62:97:8c:f4:6c:33:
e5:00:ae:76:b2:63:2b:a7:22:c0:d2:61:15:6a:4d:24:c3:ee:
d7:51:63:a3:8f:b9:2a:57:7f:09:7b:43:9b:44:46:a0:4f:df:
9f:43:6e:fe:fe:73:20:89:9a:0d:13:a0:5a:5c:b1:3c:be:23:
b0:f9:db:cd:68:8e:3d:27:98:8e:95:71:c1:66:7e:60:64:e1:
5b:02:95:c7:13:16:cc:b0:c1:71:77:7d:5d:0c:8f:8a:e4:95:
1f:54:c0:e8:b2:cd:f1:c9:1d:43:f9:86:f0:ff:ba:60:03:6b:
62:15:78:66:e2:d4:7c:80:c0:78:3c:1b:a6:78:ae:9a:d1:3b:
20:1f:a9:9d:ac:ce:02:3b:68:c3:7f:f4:c5:5c:74:cb:2f:1c:
94:d6:c5:9e:08:bb:d4:9c:fb:73:56:5d:3c:eb:41:18:fa:2b:
62:b2:bf:7f:7e:c0:56:7d:8a:c2:a6:38:1d:9e:ad:d2:34:66:
7a:b8:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:54 2025 by rpki-client