Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier: iKYVLMmth6Vy3JKZ4wMdrfLM+8YUAHNl2j86paBz0Vs=
Subject key identifier: 43:F9:AD:B6:1E:1F:A2:39:3D:60:10:A1:8E:E4:17:18:DA:D2:2E:6C
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number: 023D
Signing time: Fri 31 Jan 2025 01:57:28 +0000
Manifest this update: Fri 31 Jan 2025 01:57:27 +0000
Manifest next update: Fri 07 Feb 2025 01:57:27 +0000
Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: ph3PWrwMQCf2pCMQEPO6R4VMHGIXMiTcWEcE/xhvyFQ=)
2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: p+7htth4BYnY9ZHE2+xDn3g7oJbyqr4j+0PWu6MDReI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Validity
Not Before: Jan 31 01:57:27 2025 GMT
Not After : Feb 7 01:57:27 2025 GMT
Subject: CN=679c2e08-c5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:65:b4:7d:6d:4b:d1:73:9c:e0:81:80:fc:
df:c2:a3:a4:eb:89:ec:e0:28:0b:73:2f:97:d8:b7:
41:8e:ba:65:44:d9:f5:44:a0:bc:89:13:18:1d:1d:
b2:57:35:0a:d7:1b:77:a8:01:16:df:3d:98:d2:bc:
ac:19:4c:81:77:4e:7c:da:18:38:32:06:34:f0:52:
70:c7:95:3e:d4:7f:8a:1b:fe:cf:f6:aa:c7:7b:e1:
c2:50:c4:86:21:ea:d8:c5:27:78:70:ee:e1:96:b1:
4a:8c:db:33:90:69:84:9b:01:f8:ab:12:6a:e5:41:
c4:c1:78:a2:6e:f4:0a:ff:c1:69:f5:3d:f8:f5:60:
da:fa:86:5c:1e:48:e4:df:de:ae:67:2b:09:55:08:
e8:67:32:df:97:ff:29:a8:08:23:fe:9a:03:64:a5:
32:57:e3:8c:fa:1d:ed:f9:5d:fb:3f:64:b5:6e:3e:
47:36:8e:7c:c6:ee:17:a5:c7:77:4a:b2:50:a4:8e:
2e:7e:e6:7e:d3:30:65:fa:6d:9c:b1:c0:58:59:81:
7e:ce:87:a7:bc:00:1e:db:38:01:7b:33:07:6f:60:
8e:a1:a4:65:7b:0b:7e:c9:92:93:17:0f:69:23:79:
1b:cb:57:59:e4:e8:2e:b4:be:14:c4:a0:0f:6d:b4:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:AD:B6:1E:1F:A2:39:3D:60:10:A1:8E:E4:17:18:DA:D2:2E:6C
X509v3 Authority Key Identifier:
keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c6:13:fe:6e:f2:31:db:83:9a:ea:8c:ad:33:09:5f:16:e3:
29:8f:44:8c:f9:84:71:4f:0a:c1:42:7e:d4:9f:f1:2e:aa:2e:
2e:f0:23:49:ed:96:9c:fb:c6:90:90:91:16:83:54:4f:78:ae:
3a:ca:42:a6:c4:34:7e:31:46:5b:b0:f7:76:67:27:19:e3:19:
c6:00:7e:3f:aa:b8:e4:0e:b4:c2:7f:c1:8e:9e:8b:c6:60:5c:
fb:c6:52:dd:c1:92:75:50:28:4c:cd:65:d0:ef:f8:a1:f9:59:
e3:84:8c:9f:ef:1b:fe:a8:d8:e1:47:b2:e0:f5:31:9a:6a:36:
d3:a0:7e:30:4b:bf:37:5b:11:93:88:c9:1c:54:24:ea:8e:df:
d0:58:3b:d5:c5:35:1e:7b:82:4c:0d:73:a1:6a:57:8e:16:61:
a5:28:ee:00:43:da:e0:fe:53:c8:e3:1e:e5:b2:8d:ea:63:a6:
de:4e:bc:d5:b1:10:c1:41:b9:a0:e8:b0:f1:6f:6a:aa:09:03:
9f:85:45:d1:9a:04:88:8d:36:c2:67:35:7b:24:27:e7:76:44:
ab:07:36:7f:e3:3d:bc:dc:17:52:ad:a7:5a:b0:08:f4:81:33:
77:2c:13:7a:c4:b0:1f:5f:4c:da:21:e6:36:02:f4:0d:fb:d2:
8c:6a:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:11 2025 by rpki-client