Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: G+lodBdu5F9TfpgE3enBHI05EiIO5nW1O60yhNPIyzA=
Subject key identifier: DD:29:5B:28:7B:BD:27:C4:B8:84:EF:6A:AD:C4:E8:17:AB:0F:9F:72
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 18CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 18C3
Signing time: Fri 31 Jan 2025 16:28:20 +0000
Manifest this update: Fri 31 Jan 2025 16:28:20 +0000
Manifest next update: Fri 07 Feb 2025 16:28:20 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: 2gwzrT7h1uFewEujLvtTHftfOzSx4C5VGz4XJWz8lQ4=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: ee6x0IQnWxU26dMdjthmXNqeRQ+45nsz1rLe7eGNses=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6349 (0x18cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Jan 31 16:28:20 2025 GMT
Not After : Feb 7 16:28:20 2025 GMT
Subject: CN=679cfa24-d629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:b3:a4:79:4e:fd:69:cd:96:28:c3:fe:da:
fe:35:f4:06:8a:9a:0b:96:2a:95:3d:cf:c8:ae:73:
78:27:9f:34:da:27:f2:87:12:71:52:b8:0a:b7:88:
f8:f1:00:f2:f5:bc:83:01:b5:d8:2e:14:d1:59:a0:
cb:ad:f9:db:43:af:2c:09:4d:ab:98:d9:99:a7:42:
4b:7c:ce:1c:93:2d:05:ef:e8:95:af:8d:72:f1:70:
d4:41:74:de:f9:c4:f3:42:86:40:ed:45:fa:05:ee:
10:d2:83:47:c2:85:34:92:8b:9c:74:7e:33:31:da:
58:c9:8d:46:6c:5a:2c:6a:78:9b:7b:c7:00:e0:c2:
8c:4f:84:46:57:3c:41:e5:22:f0:5d:ec:6c:27:a9:
80:e6:35:1b:71:07:7f:84:07:94:c3:5d:69:44:2a:
43:ec:43:15:24:74:fa:6e:b1:09:54:39:74:51:96:
92:ac:b7:6d:e6:cc:e7:de:d2:0c:91:ab:67:fb:2d:
a4:bc:77:e9:1e:49:aa:8d:d3:cf:54:70:04:e0:02:
96:22:cc:97:ff:e4:1b:08:30:65:7b:b1:bc:5f:c8:
57:af:eb:40:b7:e0:06:a0:63:1d:50:b3:19:be:98:
03:3f:21:92:6d:3e:78:fb:c4:95:4d:dc:8a:99:ef:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:5B:28:7B:BD:27:C4:B8:84:EF:6A:AD:C4:E8:17:AB:0F:9F:72
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:2e:a2:b0:55:a5:e7:cb:98:fc:10:69:f1:1a:e4:5c:75:
16:0b:54:78:8b:51:55:e1:0c:93:74:ef:b7:07:9d:a5:55:28:
2b:f0:b4:ca:fd:86:b8:1f:67:6e:19:18:43:fc:aa:52:ad:f3:
10:9a:a4:b6:62:d0:d8:6e:d5:54:70:90:a8:25:d5:93:b6:e1:
98:07:87:9b:98:1b:32:73:29:0c:04:54:c8:87:01:34:89:5f:
bc:cf:5e:ff:6b:ef:ba:83:b4:e4:59:a5:fe:f1:82:2b:2c:d0:
e2:ea:2a:2f:86:52:84:e1:f2:1f:81:ba:ab:e4:c0:4e:8c:6b:
5b:4d:15:c5:43:f8:ac:5f:fa:c9:9c:b3:7e:12:33:4c:fc:2c:
dd:37:7e:39:6e:42:33:ca:23:66:df:7b:da:0e:85:2e:16:63:
16:b8:f4:f1:d3:a3:a6:75:35:9c:24:c4:68:20:83:7e:4d:bb:
ca:7b:5a:9a:06:40:c3:e2:a7:25:e7:a5:f9:1e:60:41:b2:58:
a0:29:31:eb:32:ee:8b:73:07:61:fa:36:f6:d3:05:24:86:c6:
13:33:8e:93:59:4c:c7:57:e8:18:16:df:37:d4:49:60:24:b6:
13:ba:75:59:b8:03:08:18:0d:f8:8c:53:ba:ef:5c:fa:fb:22:
5b:95:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:28 2025 by rpki-client