Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier: 1aDJMXNWw8FjwLGZfNdRd9gbsGsqETcVFDSIHbCEQ20=
Subject key identifier: A7:3D:E3:A7:B4:7A:3D:F7:53:30:87:0D:0E:73:A8:3A:8D:3F:D1:35
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial: 07C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number: 07C0
Signing time: Thu 30 Jan 2025 21:10:33 +0000
Manifest this update: Thu 30 Jan 2025 21:10:32 +0000
Manifest next update: Thu 06 Feb 2025 21:10:32 +0000
Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: wHfq7s97Bay0itXg0GVK7cgNtmcpx2nsEqkuYTmMDDs=)
2: D5E920EC194A11EC83D2C21FC4F9AE02.roa (hash: qTNhlmidtNTWxWClrVjxELlxJEx35Z2N8ou5dScYOao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Validity
Not Before: Jan 30 21:10:32 2025 GMT
Not After : Feb 6 21:10:32 2025 GMT
Subject: CN=679beac8-b7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:40:9b:a8:61:cf:fb:84:2d:c9:85:a6:77:dd:
12:a8:5e:de:2e:2a:a8:bd:a6:45:4d:25:68:ec:7f:
56:51:9f:11:a3:c6:a6:de:25:a0:34:23:1a:3b:81:
9f:a7:7f:84:80:bd:bd:85:4e:31:ca:2a:12:ba:97:
55:b4:a8:93:cd:d1:59:52:2f:e1:d0:9a:ff:1a:9e:
09:f7:b2:e0:69:2f:aa:96:cb:58:39:a5:c0:e7:db:
8e:d7:3b:4a:29:62:7d:cd:55:5d:37:4f:5a:e4:20:
c9:81:65:52:90:72:31:89:22:3f:56:b3:02:e2:f5:
cc:99:7e:9d:5b:c6:12:5a:f5:cb:57:ce:06:83:88:
f7:ed:e2:ea:2f:f5:13:1f:6e:39:44:43:f5:94:f0:
12:3f:80:26:95:84:0d:8b:51:8b:79:f7:59:c7:42:
3d:cb:3a:d7:b6:24:b4:e9:a1:03:09:d8:61:c0:70:
51:b6:36:a5:59:53:58:af:4c:ff:c3:10:61:f3:e4:
fa:30:a8:94:5b:63:55:05:37:f7:5f:1c:09:53:cb:
bd:8f:e6:2e:f1:6c:de:73:6e:d6:2f:ff:c3:4e:55:
8b:cf:00:17:8d:f7:d7:a5:c4:71:3c:42:3c:a1:4a:
43:17:f0:c0:c4:f8:59:af:54:71:bf:50:4a:ee:0c:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:E3:A7:B4:7A:3D:F7:53:30:87:0D:0E:73:A8:3A:8D:3F:D1:35
X509v3 Authority Key Identifier:
keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:48:f7:15:e0:82:5f:f9:de:8e:50:5a:98:a0:f0:7c:cb:36:
f5:20:4c:ce:90:76:56:77:2c:9c:78:03:de:4e:3b:47:3c:55:
34:27:8d:1b:6e:11:22:70:b9:50:6f:87:33:14:98:b4:ef:38:
7e:c1:d4:50:24:a3:68:0e:4b:f7:c3:3b:bb:c6:5e:d0:88:e6:
92:cf:7b:fc:3b:b0:a8:08:3c:76:ac:90:d3:01:b0:ec:6a:07:
74:69:e8:ab:02:51:dd:16:b8:33:70:ad:42:e4:9b:cc:ae:a5:
a4:93:d4:e9:f8:6c:21:06:9b:0d:2a:b7:ea:e2:84:7e:9c:9c:
9b:88:c8:8e:9f:1e:75:d3:31:10:38:c7:7c:b5:87:83:24:43:
cb:c7:f7:c0:f3:e4:3d:37:f1:bc:50:8d:ae:d1:f0:c4:66:e6:
38:15:e1:58:36:4b:64:45:54:7d:87:73:82:77:5f:f6:80:3a:
fb:86:3b:35:4d:79:ed:cc:86:5c:8d:1f:3b:ce:08:92:69:e7:
e6:e4:cb:85:c0:df:12:16:c3:c0:d5:39:28:a7:43:5e:55:80:
af:e4:8d:4b:56:be:98:72:30:cf:ed:ab:a3:6f:9d:52:cd:b0:
75:49:c7:57:e3:ce:89:de:2c:df:69:8e:c4:07:ae:52:78:96:
94:8e:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:40 2025 by rpki-client