Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier: g6VQdMkhxFc77hGF1M3S2BRJTpqNFBzchrkiLI1p2DQ=
Subject key identifier: 50:F5:D0:1D:94:05:1F:0C:53:9E:CD:67:A9:FA:2F:69:25:DA:44:79
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 07:01:08 +0000
Manifest this update: Fri 31 Jan 2025 07:01:08 +0000
Manifest next update: Fri 07 Feb 2025 07:01:08 +0000
Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: kIPAjFR0HMjyQOTIOMY2oF257UYkrm7Py6gIxiU3ssY=)
2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Validity
Not Before: Jan 31 07:01:08 2025 GMT
Not After : Feb 7 07:01:08 2025 GMT
Subject: CN=679c7534-b4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:71:45:d9:c4:f5:54:46:b2:0f:d0:1e:c9:
bd:1e:76:60:a6:47:55:6b:7d:83:ff:79:56:05:3f:
78:11:e6:45:a2:d2:98:d3:d3:be:7e:cd:75:21:8c:
cf:93:a5:db:da:1e:c3:64:39:95:f6:2a:58:34:f1:
ee:1a:a8:6f:67:49:a4:6e:a3:54:32:a0:4a:4f:5c:
19:ac:3e:94:31:70:f8:31:c9:d2:0c:59:12:8d:78:
00:23:5e:c1:3c:36:21:5a:0b:b0:59:00:f3:29:16:
4b:0d:52:17:22:c1:ff:36:12:fc:86:01:66:73:4d:
b5:8c:83:b6:b6:fc:48:b2:aa:7d:17:c2:d4:7a:cc:
10:1f:5e:ad:d1:4a:13:db:81:88:9a:1b:fd:7c:63:
9e:09:8e:1f:81:bb:20:c3:69:68:01:99:23:80:bb:
7e:7b:d6:2c:b0:32:5f:37:f3:e6:1e:36:47:5a:3e:
65:8b:81:d1:ac:69:8e:02:ee:11:60:0a:1d:70:3f:
e0:3b:80:ea:18:72:b6:b0:22:b0:42:17:4e:80:c2:
e3:fb:f2:d8:b1:3d:ef:62:64:46:27:bc:5b:26:c6:
5b:ae:9d:e7:da:33:3d:74:b1:cc:e2:f6:dc:a9:dd:
fd:60:1b:52:d4:ea:78:3d:8f:cd:c7:79:09:c1:52:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:D0:1D:94:05:1F:0C:53:9E:CD:67:A9:FA:2F:69:25:DA:44:79
X509v3 Authority Key Identifier:
keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:cb:31:29:9a:0d:b8:ba:ba:de:c5:4d:b6:cc:e5:7a:26:
7f:36:1e:01:75:b4:76:62:72:de:53:79:6c:b9:9b:d3:c2:24:
7b:b3:2e:53:6b:e3:ae:5c:15:14:ec:aa:3d:5e:27:d4:58:70:
f0:0f:2f:24:45:c9:fe:8d:1b:11:44:ef:9b:61:27:31:bf:66:
f3:24:e7:63:94:a6:5f:2e:de:fc:77:aa:c9:48:dd:0a:bd:f1:
99:43:27:66:c2:e5:2e:f7:9a:fd:45:ff:ae:aa:db:3f:06:5e:
ae:d7:a6:c9:bc:db:00:10:55:28:f4:fd:56:bd:01:74:4f:2a:
c4:2f:f9:e9:2c:c0:3f:2e:a4:93:41:a2:2a:47:f1:f6:19:11:
fd:77:51:00:ad:91:a6:db:8c:3a:ea:8f:5c:ac:6a:aa:ff:5c:
e1:ea:8a:cf:8e:37:96:ab:47:cf:b2:6c:8a:9b:93:af:17:89:
2e:17:0d:e2:8c:d6:c9:48:b3:e1:3a:f9:2e:c1:6e:91:82:bb:
05:b7:dd:6e:20:77:47:60:51:c5:c2:14:d3:f6:36:3d:52:08:
20:cb:c6:7c:1b:a1:0b:ae:13:e2:fc:17:62:6c:d3:05:d8:9f:
65:a6:d0:32:24:29:45:39:6a:4f:1d:6e:1f:18:49:13:21:82:
54:06:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:42 2025 by rpki-client