Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File: A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier: K2aLI67+wjdIO5JwH8hch5urTqTc4tQpz7jKdgnHORg=
Subject key identifier: 27:41:BC:74:04:2E:4B:00:B5:F1:B5:4D:DF:C9:67:EC:F8:BB:E7:79
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer: /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number: 0115
Signing time: Fri 31 Jan 2025 03:59:15 +0000
Manifest this update: Fri 31 Jan 2025 03:59:15 +0000
Manifest next update: Fri 07 Feb 2025 03:59:15 +0000
Files and hashes: 1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: KV9OtyozsUtbQ9XEg8jr/ZjKMInjTSeeOski67PxUpE=)
2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 8KhdFf717KdtqIgoQSLRSc05ReV0MsZo2CeN3+2la54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Validity
Not Before: Jan 31 03:59:15 2025 GMT
Not After : Feb 7 03:59:15 2025 GMT
Subject: CN=679c4a93-a988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:69:5a:c4:03:36:2a:21:4e:5d:24:8b:9b:
ba:e2:bc:f1:c2:fc:29:a8:67:ea:a3:39:27:d8:ff:
2d:56:e9:6e:d5:81:4e:49:f1:3d:97:1f:65:99:b5:
2d:44:10:9c:a4:4c:f0:fe:b0:7c:6e:c7:87:66:64:
41:31:96:a5:56:a2:ff:39:fd:8a:bf:49:e0:2f:4b:
db:95:2c:af:4f:c0:78:d9:44:e5:a5:05:7f:c8:2a:
13:ed:10:67:de:69:72:93:9a:1d:02:35:34:9e:b4:
30:3b:de:0a:61:70:a5:3d:db:f5:f1:7d:fa:84:ac:
a3:88:e1:f8:b9:98:42:0a:22:4f:32:79:ba:c6:de:
51:44:99:2f:b9:46:bf:76:9b:a7:fb:b8:06:7e:53:
53:85:c0:e1:11:ed:1b:26:d9:93:b1:19:7a:16:4f:
82:a2:29:b9:8b:c2:3b:d9:84:bf:e7:62:07:16:a3:
8c:7c:ff:59:50:8f:72:14:8c:5a:db:00:3f:e5:81:
84:82:42:14:b0:57:4a:d3:24:a6:39:4c:a7:39:f4:
9f:de:44:b3:66:3b:33:54:dd:76:ab:4a:ca:d3:b1:
e7:5d:32:9c:d2:11:79:fc:e4:8d:6f:79:9a:67:00:
97:e0:42:76:16:8a:4e:59:67:d5:c4:ab:5c:4b:ce:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:BC:74:04:2E:4B:00:B5:F1:B5:4D:DF:C9:67:EC:F8:BB:E7:79
X509v3 Authority Key Identifier:
keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:00:de:9a:b1:a9:af:25:68:03:d7:05:ee:f7:8b:f6:6d:e9:
9d:52:fb:ad:c6:ef:a4:82:94:ae:38:b9:93:ac:91:ee:6c:46:
28:9e:cd:d2:eb:6d:21:b0:fa:a4:f0:70:29:0d:cf:59:15:55:
9f:2c:eb:b9:8a:d5:c9:a7:f1:1d:d8:2a:ba:37:4b:91:a4:df:
33:53:19:ea:36:39:b0:a9:6b:a1:bf:cc:a8:b8:ed:ab:d6:cb:
a8:25:3c:90:da:f1:fc:86:61:a5:2f:e1:1a:a2:cf:ff:64:3c:
c5:46:7b:5b:39:b0:35:30:87:3c:b7:d0:35:3c:45:08:cb:5c:
a4:a3:fb:f5:9d:87:d0:c3:d8:3e:27:1c:1f:d9:d5:2e:8c:9a:
02:1b:8a:cd:a8:4f:da:db:73:65:e5:dc:97:e6:81:80:64:62:
6c:a0:ee:c8:3f:b5:2f:b5:ca:33:5e:3b:64:52:2e:89:40:a7:
a5:2a:5d:1c:aa:04:1f:10:86:25:7d:fb:38:10:5e:c2:4f:e1:
4c:a5:1e:58:78:23:54:ff:eb:60:d8:3f:d6:c9:b3:cc:b4:80:
4c:c2:40:c0:80:77:97:d6:41:52:f9:45:3b:a5:9b:2e:2c:12:
3c:e2:f1:19:c3:3d:cb:cb:f9:5d:b1:88:5c:9a:fe:49:d5:d5:
ac:18:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:20 2025 by rpki-client