Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier: y2Igtats7CP1Gmq+dJhh303cxjT7VUamdioecnHZkiM=
Subject key identifier: 0C:6D:0B:3D:D0:58:FF:8D:67:CE:08:A1:6C:59:A3:F6:D6:A0:A2:A6
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial: 0850
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number: 141B
Signing time: Fri 31 Jan 2025 18:39:41 +0000
Manifest this update: Fri 31 Jan 2025 18:39:41 +0000
Manifest next update: Fri 07 Feb 2025 18:39:41 +0000
Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: dEHZpkT0cqGpYpogz6g3sBVip6iObYS5EmazvTxCZX0=)
2: 7BBC1DD2040611EF909F6C3EC4F9AE02.roa (hash: d+L19gUHVaLQL/PMqiWFVUvVqO9gHwxatHS8mTM15PU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Validity
Not Before: Jan 31 18:39:41 2025 GMT
Not After : Feb 7 18:39:41 2025 GMT
Subject: CN=679d18ed-0c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:42:6a:d9:c1:4c:47:a5:ec:ed:a9:31:b8:
ab:e3:43:b9:7f:16:06:5b:5c:17:17:e4:72:b0:c6:
9b:57:5c:39:52:59:d8:f7:1e:d0:26:0c:1f:16:dd:
4b:8d:35:a1:c0:01:a8:bb:96:d5:74:60:51:16:6d:
b0:0a:b7:e2:dc:91:0c:6d:b0:db:a4:d0:ca:d0:7c:
ce:39:4e:8f:8f:25:38:53:0b:ff:01:0a:3e:bc:89:
f7:84:1b:76:7f:af:23:59:62:6e:cc:c0:94:93:70:
84:0d:d1:26:d6:5e:e8:d0:6b:da:43:12:fe:b5:2a:
e1:83:3d:d8:75:49:c4:97:07:41:fa:ac:40:88:62:
5f:78:76:6d:e0:eb:64:df:07:67:75:9a:b1:e9:6c:
51:be:9f:18:2d:b5:2f:68:f7:34:bf:6a:4f:bc:96:
66:e1:e0:22:58:60:13:ce:3c:37:5d:bb:68:b8:13:
b8:9e:75:3a:32:ce:58:38:68:04:fe:f8:40:c1:10:
7f:b8:3d:99:0a:8d:49:b3:01:10:01:98:db:45:aa:
22:c3:16:d8:14:43:35:b7:bb:15:33:b4:35:dc:5a:
72:e1:b3:61:28:38:bb:86:f0:2f:04:a0:f8:1a:df:
a4:77:32:95:2f:9d:2a:7e:43:0d:13:8c:30:5f:30:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:0B:3D:D0:58:FF:8D:67:CE:08:A1:6C:59:A3:F6:D6:A0:A2:A6
X509v3 Authority Key Identifier:
keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b9:0f:d9:28:a2:ad:a7:9c:34:6a:2e:0a:3f:d4:7c:00:21:
9b:a9:39:e7:8e:d4:6e:eb:df:13:25:92:42:84:ee:22:23:f0:
8a:45:04:0d:05:7c:09:38:05:a0:a3:14:20:63:5e:54:93:99:
a8:2d:45:53:2f:58:94:a8:f5:e7:15:04:c7:49:c3:92:90:da:
16:1e:7b:7c:74:7b:32:bb:57:71:98:14:c1:a2:6d:54:f7:f7:
1d:e6:df:01:29:81:0a:1a:8d:0c:bc:f3:bd:89:a1:25:d4:d4:
a6:1f:cf:a0:b4:f9:d7:f1:b6:38:ff:7d:ff:9e:2d:1c:58:ac:
9f:23:c1:3f:7c:20:63:3d:c6:40:87:18:0a:97:69:04:03:19:
62:6f:de:37:dd:1e:69:f2:e6:9d:d6:13:28:f6:26:6b:e4:fe:
27:0a:3d:97:b7:84:5d:17:d1:43:06:6b:a4:c1:b9:4c:ad:5c:
a3:6a:d7:6c:21:c6:69:c4:f0:cd:d9:83:e1:bf:df:fd:5b:d3:
d0:cf:2b:59:cf:d1:b6:5c:b3:ed:f4:c1:1b:64:75:55:53:5c:
e6:9e:63:f6:33:12:d4:f5:8c:cd:f3:d0:f0:68:e2:6f:37:29:
e2:17:09:f2:89:de:7d:a7:c7:02:35:4f:cd:79:a5:c8:fd:94:
5d:e3:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:06 2025 by rpki-client