Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: rvNyX+NlrK45ssGVfOwU7Wdw8QA+yY+quP7sNY9n24g=
Subject key identifier: 69:A2:F7:DC:D3:4D:40:3D:5C:85:3F:BA:65:CC:2A:D7:4C:E2:1D:B8
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 04DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 04BA
Signing time: Fri 31 Jan 2025 00:00:34 +0000
Manifest this update: Fri 31 Jan 2025 00:00:33 +0000
Manifest next update: Fri 07 Feb 2025 00:00:33 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: 1TUKpdz18iSUVW4tGdMfwhndVbk9m3DGMhJXPdAClLc=)
2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: /oWh6sDf6JMhXVQFfiBK5T8ylerkJmv9WJJdVtYkSIU=)
3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: hF9MKD/FwgF9cY8hvh9m1ZRU6ZbNvnTiLbcgCIT5wPc=)
4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 9aBOau/kR05/ZlK4Ctxtvv3XFrOvJ/VU5zNEft0SiRE=)
5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: M9HaGHa7pI3ilHdh1OGWp/+WvUY2NRFrgXm0KqnYXRc=)
6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: xYaxgWyzwtexyE7NeRo7CnQ16cP15TpfRCg28S5nmVo=)
7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: ERqr4ZgITrZRkOwS3AN4CJTqd2fIDLE15f/P4/QlBUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Jan 31 00:00:33 2025 GMT
Not After : Feb 7 00:00:33 2025 GMT
Subject: CN=679c12a2-20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:13:c8:06:ef:2f:9e:e4:d6:52:a8:7f:1b:
ef:ad:ab:6e:a2:73:c3:a8:c9:a0:88:17:61:0f:18:
05:40:31:5e:ac:76:4b:22:77:bf:a1:73:0a:15:df:
ca:c0:6d:3f:7d:31:d0:58:8d:46:9a:ce:07:4d:2e:
b8:70:63:dc:2a:9d:b3:e8:40:77:d5:5a:cd:95:fb:
c3:ef:8b:26:f3:da:20:19:c7:5f:39:1c:6d:65:1e:
65:d4:a8:51:4c:72:66:25:f0:35:2c:91:1e:1f:c5:
e8:35:de:07:47:6b:e9:6a:78:6f:62:3f:55:4e:30:
27:b3:81:8c:e7:b5:ab:a6:5e:fa:2e:5f:38:75:67:
70:dd:fb:d8:3f:3f:cc:00:1a:04:78:d7:a9:5f:01:
12:15:5b:ed:2c:01:b1:f7:b9:f7:bf:68:57:da:db:
69:c9:f9:c2:7a:00:f3:d4:14:0b:0d:0a:c5:5b:96:
63:40:7a:cd:36:0c:a2:94:78:4c:d9:3b:47:17:4f:
5b:7a:8b:b1:d2:bd:90:c9:89:49:f6:92:48:41:d9:
b1:78:7a:42:a7:b5:48:63:a2:f1:10:0e:07:6d:01:
a8:98:e4:92:9f:a1:a5:cb:8b:2a:02:e3:67:bc:4d:
5c:aa:c8:f7:ae:ef:66:75:ed:69:c9:78:c0:e0:59:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A2:F7:DC:D3:4D:40:3D:5C:85:3F:BA:65:CC:2A:D7:4C:E2:1D:B8
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:15:e0:db:9a:74:e2:37:39:6b:94:0f:83:70:f1:b0:15:
3f:f4:d8:80:d1:47:23:35:f9:6b:e9:08:d4:e4:f8:d5:a2:8d:
9d:a7:86:12:94:6f:5d:68:4b:02:96:91:53:99:cb:98:94:f5:
d3:26:1b:62:53:a1:15:54:c3:b6:77:39:4e:5e:6a:a3:7e:f7:
64:d8:be:88:3e:8b:6c:9f:32:ec:ea:ad:05:e7:89:85:48:cb:
5e:90:3f:02:33:9a:db:53:a1:b4:f6:2b:7d:e1:d0:88:1a:92:
6a:da:55:43:d4:52:e6:ea:39:78:7a:d8:5c:8d:89:50:ab:c8:
ed:c8:3d:e2:86:65:3f:d0:30:4b:ce:0b:37:2e:0c:4f:97:3c:
49:25:c1:55:ec:e4:96:6a:59:3d:c7:8a:38:1f:cb:8b:cf:5b:
eb:ae:3a:43:a1:d6:bd:42:cc:b8:47:4c:88:6b:60:8f:9b:2b:
19:b1:d1:2b:cd:af:34:57:de:1a:ac:ea:b9:0a:b3:55:6f:3f:
37:c2:dd:89:fa:3e:5b:c8:a3:ff:fe:b3:70:07:e1:56:b2:af:
f3:f5:79:37:15:22:98:d4:05:f7:7e:dd:35:50:0f:ce:5d:5f:
03:09:41:1d:af:ea:02:7d:1a:2a:1f:b9:10:f2:87:f3:d7:00:
31:99:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:05 2025 by rpki-client