Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json)
Hash identifier: oLWtALwtLdEphnWz8Ff+oJ0p1fkrs1GrowTFp97d3zk=
Subject key identifier: E4:7D:12:05:D6:99:56:52:42:E2:75:37:48:91:23:B9:97:EB:07:75
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
Manifest number: 01AC
Signing time: Fri 31 Jan 2025 02:28:22 +0000
Manifest this update: Fri 31 Jan 2025 02:28:22 +0000
Manifest next update: Fri 07 Feb 2025 02:28:22 +0000
Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: tGdtxssVREXuonZ0SACUy+v/oO9LQV78u3x/B0KA+k8=)
2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: 41cGdysFB7ELok3zBoJln9hijehCtCniAdRLT6XAhVQ=)
3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 9MrQo9vUmAekuiwNJY8bO0MSIs29CkXwLMPEFiKNA44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Validity
Not Before: Jan 31 02:28:22 2025 GMT
Not After : Feb 7 02:28:22 2025 GMT
Subject: CN=679c3546-332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:a3:d4:79:76:ff:07:11:5c:37:78:86:43:
e0:50:67:84:b6:69:f9:34:1b:d5:c5:1e:94:04:a3:
2c:5f:37:f6:b7:bf:5f:ee:e6:7f:79:cb:f6:ce:78:
b2:31:e6:7a:73:39:a0:c3:e3:11:ec:50:b6:c9:7e:
37:5e:de:4c:78:d9:8c:e1:fb:40:52:72:01:36:94:
d7:6c:c5:a8:03:b5:6b:2b:c8:4d:34:63:78:37:bf:
02:68:40:41:bd:b0:d3:5a:7f:14:ef:b0:68:01:7c:
15:03:d6:ee:cf:e8:78:16:05:81:2e:ac:f3:06:0e:
10:a1:85:d5:10:66:dc:e1:43:97:2b:57:c8:a8:7d:
0f:17:e8:7b:c5:20:44:9f:9b:c5:c2:4f:4b:ef:d6:
26:3d:31:d4:da:d9:66:e0:d7:aa:85:4e:f2:b9:4f:
ab:f3:32:1a:9d:01:b2:99:f5:9a:4b:7d:22:76:38:
23:7b:f7:9e:bc:da:22:b2:fa:7b:c8:a6:41:11:36:
46:8d:ab:1b:91:a2:fd:5e:4d:9f:0f:67:94:eb:7f:
77:0e:d3:ea:38:94:32:d9:fb:65:24:c1:01:b1:00:
bf:d1:1a:eb:33:ea:c3:ec:f0:4a:ab:1e:18:81:a8:
fc:a5:e7:94:7d:06:7c:98:8f:a3:fd:64:4f:68:fb:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:12:05:D6:99:56:52:42:E2:75:37:48:91:23:B9:97:EB:07:75
X509v3 Authority Key Identifier:
keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5e:d1:ba:9d:e2:e6:3e:40:4b:8d:06:09:fe:48:ba:1e:d7:
65:70:71:e6:b3:0b:4b:78:1d:fd:2b:31:80:6b:b9:91:4a:e9:
34:14:74:6e:fc:62:dc:d6:71:d4:c0:1c:09:8e:5a:56:a4:01:
be:2a:6f:55:40:e4:e7:40:34:30:bd:94:84:9b:e2:8a:3d:96:
0a:59:1f:e9:c2:73:64:ef:98:5e:8c:99:2a:a6:2a:be:32:06:
29:d3:9c:cf:1e:51:2a:e6:6a:11:a9:43:3a:8a:ae:15:f6:b3:
02:1c:62:bf:14:05:c3:20:79:9e:04:82:e8:01:ad:fd:38:44:
18:d0:22:d1:e3:34:97:42:46:14:96:b0:de:db:11:0c:2f:b3:
8a:4c:4b:1e:18:3b:8e:84:e7:95:a9:3d:7d:97:68:c1:4f:9d:
97:57:10:65:6c:f7:1d:c2:d5:e2:a5:e6:29:d7:f5:41:db:9c:
be:99:ed:52:38:44:6f:6c:13:5d:7c:f9:f3:4d:a3:e7:d3:ca:
74:3d:ad:14:7f:0d:01:c7:c5:f4:8f:5a:8b:61:b9:e2:22:cf:
5f:71:19:7b:64:62:f6:29:0c:b1:56:ae:08:c3:20:91:67:6a:
f5:af:53:1e:c0:90:42:03:78:d9:51:09:3b:0f:ca:a2:15:8e:
00:80:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:15 2025 by rpki-client