Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json)
Hash identifier: KlSszt4bCcCxJ/7O7IIzCFmgX84wSsKLTcJc5OlgUH8=
Subject key identifier: 20:31:65:AF:07:82:5E:F5:5F:01:43:3C:78:D3:1D:7A:0C:66:61:2D
Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Certificate serial: 0435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
Manifest number: 042E
Signing time: Fri 31 Jan 2025 00:22:52 +0000
Manifest this update: Fri 31 Jan 2025 00:22:52 +0000
Manifest next update: Fri 07 Feb 2025 00:22:52 +0000
Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: u8wjdmW9/UxZ4MvGpGwiQ1f4fS1l7Xngj++rdYq/fH4=)
2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=)
3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Validity
Not Before: Jan 31 00:22:52 2025 GMT
Not After : Feb 7 00:22:52 2025 GMT
Subject: CN=679c17dc-9244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:05:5f:7b:b6:9c:ab:8d:b5:35:57:e8:4b:
0c:9c:13:0b:ef:18:75:6e:94:56:85:a7:db:85:e2:
e2:4a:04:c5:ef:0f:64:fc:1b:e9:10:08:09:3d:bc:
8b:05:06:c3:a5:63:fc:b1:9d:95:21:4a:3e:ec:95:
af:8c:d6:cd:db:52:b4:46:39:e8:cf:a8:44:fa:59:
80:b8:f2:8e:9e:bc:19:32:bd:bb:1b:0f:1a:b2:da:
67:5f:bb:5f:dc:15:05:f1:71:26:99:a0:d6:6a:05:
f2:5e:31:82:52:97:ea:8c:15:5f:50:09:d7:3c:41:
01:10:70:ba:1e:5c:e4:ec:73:fc:3f:f3:3c:75:df:
86:e8:0f:70:7b:45:76:d5:7b:2f:19:83:e6:6e:c5:
37:c4:d4:b2:3c:a3:82:53:3a:6d:ec:bf:59:df:77:
24:25:a5:8f:98:6d:ab:36:32:2c:3f:4d:19:81:50:
61:85:bb:ba:3d:c7:bc:df:97:ad:5b:39:41:84:52:
f2:8f:c2:63:8d:ea:80:49:82:a2:a9:d6:10:70:24:
6f:68:18:92:97:12:a0:8f:9e:e8:4d:6c:2b:20:2f:
ce:70:18:c6:57:29:40:bc:13:2d:ad:cb:62:fb:9e:
53:87:8a:96:ab:72:9b:4c:5c:1f:85:37:5d:06:fb:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:65:AF:07:82:5E:F5:5F:01:43:3C:78:D3:1D:7A:0C:66:61:2D
X509v3 Authority Key Identifier:
keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:27:94:42:35:6b:9a:da:cd:2e:b5:96:42:52:cf:0f:29:33:
54:66:ef:a6:a8:d8:c0:4f:95:79:a5:3f:c0:4f:1a:f6:38:13:
b2:5b:bb:72:fc:f6:52:c7:c5:2f:fa:9e:77:21:62:62:88:ef:
a9:6e:08:e1:f7:73:c5:6d:18:30:64:1b:92:72:ed:0f:3c:c7:
63:7e:38:4d:d5:0d:52:01:2e:d1:dd:ec:85:fb:ad:15:4e:7b:
5c:90:71:c5:a1:50:13:7a:48:95:6d:2d:26:42:f1:b8:9b:ed:
1c:df:6c:12:a8:97:b6:14:1d:ce:ef:98:d3:3f:83:a4:00:4a:
57:1b:d1:03:3f:58:1e:7a:73:2b:59:24:a0:6f:75:7a:04:7e:
73:50:d9:d8:93:b4:72:30:47:be:56:74:31:9d:ee:dc:f9:34:
eb:7e:f6:bb:ac:8b:12:ca:28:05:f2:5d:ac:a2:fa:73:a5:45:
18:08:1e:8d:0f:d2:39:00:00:58:9a:64:b8:a7:d3:b3:16:4d:
d6:41:78:63:7e:3f:f9:6f:84:9c:81:fd:e8:e7:28:83:61:d7:
3a:7b:5e:9c:bf:aa:a9:e4:2d:7c:a1:df:49:36:2c:e7:09:69:
90:8a:31:6d:92:e7:e9:f6:82:7c:03:58:c9:22:18:9b:86:7b:
28:fa:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:23 2025 by rpki-client