Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json)
Hash identifier: o95YXy+9Y+6/hRjRzPqEZvTotAN/cEbpGtnsCLFgSdw=
Subject key identifier: 2D:DF:0F:A3:E0:35:2A:3E:66:AC:CC:97:FC:AE:B2:AB:CB:3D:2F:64
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial: 0C53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
Manifest number: 0C3F
Signing time: Fri 31 Jan 2025 18:19:52 +0000
Manifest this update: Fri 31 Jan 2025 18:19:51 +0000
Manifest next update: Fri 07 Feb 2025 18:19:51 +0000
Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: EFRI4M3KEs5F+TCUofMAYEKYHf4OW9fD4mD/2EGIoxU=)
2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: KJiTJQnlya7yc1gVeGhk9f8wqpXCXgsDbpb8Ndl9Q5Q=)
3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Validity
Not Before: Jan 31 18:19:51 2025 GMT
Not After : Feb 7 18:19:51 2025 GMT
Subject: CN=679d1447-4e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:44:82:8b:30:07:26:38:9e:83:96:c7:ce:
46:3d:71:05:d8:89:31:ed:41:a4:05:c2:4d:5b:22:
e0:8b:4d:73:01:53:f3:9a:28:93:f7:5e:e9:11:64:
41:15:60:a8:42:7b:86:1a:ef:b9:4b:22:46:b0:d6:
7c:6b:fc:15:3f:b8:2a:0f:a7:24:45:b4:30:47:68:
ae:7c:74:90:17:4c:8f:d3:12:6f:18:32:d1:08:a0:
d4:27:f1:c8:5a:91:0d:74:6e:58:bc:7f:1d:52:28:
e0:ca:66:20:95:34:f5:d9:48:0a:ad:df:bc:57:9b:
ff:1a:66:72:57:8e:09:6e:a2:48:7c:ae:7f:7d:e9:
21:9a:91:85:61:69:6b:e8:3e:65:53:6a:9e:1b:0d:
1e:0a:b1:27:ab:fe:a1:49:d0:71:d4:08:96:6c:bd:
6e:ce:c5:27:4c:fc:e5:4f:68:75:6b:4a:08:42:ee:
bf:e2:5c:c4:f2:dd:79:db:c7:cf:1a:f7:ad:7c:3e:
22:0a:2f:66:cc:15:7e:a8:3b:4e:40:a4:f2:c9:08:
52:15:60:6f:b7:dd:d6:df:72:e4:71:13:15:03:44:
c5:66:27:11:d6:d9:cd:ce:02:00:44:f6:a8:32:04:
f6:6c:17:9f:b0:9c:f6:6f:d9:53:7b:6c:74:12:73:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:0F:A3:E0:35:2A:3E:66:AC:CC:97:FC:AE:B2:AB:CB:3D:2F:64
X509v3 Authority Key Identifier:
keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d0:76:c3:73:10:b2:60:a1:a9:6a:ca:8f:c7:e5:4f:5d:b3:
89:53:40:17:69:00:45:79:bb:0e:84:11:a1:3e:75:23:12:ae:
bb:a2:c0:d4:c8:e3:06:a3:2d:ac:50:e8:e6:32:a1:1f:11:07:
39:42:1c:ef:07:e3:7d:17:ab:c8:1c:f1:6b:5b:8e:73:6d:2f:
83:3d:4d:7f:c4:fb:0d:3a:be:c6:9d:4a:c8:af:88:42:f5:05:
81:f7:6c:bc:88:0c:cb:b0:2f:a6:72:d9:e3:9f:eb:1b:83:49:
d9:ca:16:8d:1d:6f:0c:0d:02:9a:b8:09:ec:7b:72:35:de:c4:
fe:b4:64:e0:7b:33:6f:7e:b3:b7:99:62:a2:db:93:00:e6:d0:
54:dc:10:7b:f0:39:69:7e:e5:5d:1e:0b:96:03:8f:55:46:e0:
80:20:6d:a5:90:c4:e5:55:4c:e7:35:6d:7d:b5:27:62:71:17:
66:2f:0c:79:82:f3:8b:cb:8a:33:55:b3:dc:6c:98:d6:cd:6d:
5a:5b:57:2f:c9:ca:d0:84:e2:2c:7a:bf:79:5d:93:99:20:e7:
d5:ab:7c:12:58:06:f1:97:37:3e:34:9c:12:43:d6:d0:ca:0b:
89:c9:8b:e6:5d:e9:90:15:9a:c6:28:fd:a2:b0:12:72:ec:c9:
49:de:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:50 2025 by rpki-client