Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft
File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json)
Hash identifier: +PCUbsms234ZBxopha9/N/zH/QZLPbRjteSO0jN/NmE=
Subject key identifier: 4F:EF:27:B4:E9:1F:7B:95:84:F9:5D:D7:F2:FD:B7:67:54:62:AE:9B
Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27
Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft
Manifest number: 0118
Signing time: Fri 31 Jan 2025 03:56:40 +0000
Manifest this update: Fri 31 Jan 2025 03:56:40 +0000
Manifest next update: Fri 07 Feb 2025 03:56:40 +0000
Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: flSwqwsy49OnvTv+TUJQui0BH7xXr5YA1rI635jrr2M=)
2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: 6KqNq4cdtHhz/rpHpQGDibxzs+UH6NBhNOISI8YbXQE=)
3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: 4JGUeecx58BBmafBCfjWDOEaD/pbsFBnC8eWlzMDtQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
Validity
Not Before: Jan 31 03:56:40 2025 GMT
Not After : Feb 7 03:56:40 2025 GMT
Subject: CN=679c49f8-27e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:88:8d:3b:43:60:57:a6:a0:45:6d:1c:63:
ea:c2:d5:35:9b:47:c9:94:58:b8:9d:db:59:bf:d2:
ba:6c:a2:58:69:70:69:50:b6:24:bb:52:30:29:2f:
31:c0:df:ad:cd:cf:0a:f4:b3:a0:12:b1:69:90:a2:
48:8d:ea:5b:18:69:b0:b0:4c:16:48:c4:22:02:89:
4b:c6:9f:75:cc:d1:1c:55:00:92:d7:fa:6d:06:5a:
0d:91:be:2c:f9:26:75:ad:60:ab:d5:d9:b0:29:ac:
5e:ff:1e:80:f1:c2:f3:49:9f:53:f8:2b:34:cd:13:
50:71:f7:46:23:e2:30:a4:f7:1e:59:90:93:c0:c8:
6f:39:21:db:9e:cf:77:e8:5d:40:94:d2:f4:43:8f:
7b:af:90:96:65:f6:a6:d5:d1:47:3d:e0:54:32:21:
64:8c:a4:6d:62:80:b8:80:a6:4e:24:3b:b7:74:74:
3d:4d:77:f1:8a:1b:4c:db:52:12:cf:61:f1:84:25:
97:f1:0e:27:15:04:c5:b6:b9:dc:2e:03:0c:60:7d:
a5:76:dd:e5:0e:36:1b:03:9e:7a:35:f4:17:57:30:
c4:7b:d4:de:92:12:9c:e4:1f:c9:b9:e1:b4:81:41:
8e:22:91:1b:7d:b4:aa:33:f8:27:f7:be:4b:46:26:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:27:B4:E9:1F:7B:95:84:F9:5D:D7:F2:FD:B7:67:54:62:AE:9B
X509v3 Authority Key Identifier:
keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:33:90:58:e6:5e:01:77:0b:80:db:76:90:60:63:e6:c4:37:
67:f0:54:c7:01:2c:d2:20:27:28:06:c2:6b:d0:e2:6e:67:05:
16:2c:86:ef:81:2d:cd:98:ea:e0:d0:29:6b:fd:9a:df:79:2d:
2b:e9:84:73:35:64:84:46:9e:4f:80:91:d0:c9:da:27:22:10:
45:c3:f0:dd:ed:65:19:23:5f:d9:7f:ab:3c:e3:ef:ad:f0:09:
53:5d:f4:c4:92:93:49:4c:a6:ef:48:da:3f:ad:67:36:5b:1b:
b1:44:4b:c4:fd:d3:ae:e9:eb:23:76:1a:0c:c2:47:c4:49:66:
87:13:4e:8d:52:da:53:b5:eb:48:d0:cc:55:29:f6:36:7a:66:
2c:69:43:fd:f6:ce:0d:de:6d:c4:42:28:90:32:00:d0:ec:a5:
40:fc:57:33:30:a9:b1:b6:62:97:eb:7c:9e:50:a8:59:e2:91:
28:e7:c0:16:76:27:da:28:8a:cf:2e:db:db:84:36:a3:45:ec:
1b:75:c3:6e:9b:99:9e:3d:0e:fb:a1:bb:3a:ea:1a:ed:ef:81:
1c:23:df:a8:23:9b:8b:26:72:d8:65:f2:f8:7b:10:5b:78:4c:
9a:66:b8:ce:05:16:4b:2b:40:00:b2:e2:3a:fb:e0:8c:19:70:
16:d2:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:43 2025 by rpki-client