Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier: PbkwMlWQRVAc5HQLbIZbiVsNCJ2DGf1iCYmhpo3J0eo=
Subject key identifier: 07:6F:3B:DC:EE:A3:77:59:A7:E9:6A:A8:F2:E8:F7:42:9F:1D:9F:ED
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number: E1
Signing time: Fri 31 Jan 2025 04:36:23 +0000
Manifest this update: Fri 31 Jan 2025 04:36:22 +0000
Manifest next update: Fri 07 Feb 2025 04:36:22 +0000
Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: iVM27wkQbh3t8yqPzRPe+kwXzV/bF0ml4bCTGf9hSd8=)
2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: 2pLBfFEzGVtLv2cMeVGOzUnHFe1Jg/DT2E9SEr2vDd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Validity
Not Before: Jan 31 04:36:22 2025 GMT
Not After : Feb 7 04:36:22 2025 GMT
Subject: CN=679c5347-713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:4a:4f:8e:e4:f0:aa:00:a9:3f:5e:49:12:
05:6b:86:d8:50:96:91:ea:22:2e:20:e7:c2:86:50:
c8:9a:73:42:77:9f:7a:bf:15:2e:3d:ce:c9:4a:d0:
e6:dd:17:9f:c1:42:a3:b4:55:b4:f4:4f:40:4f:47:
24:8f:21:2b:50:af:22:e7:a7:fe:5f:69:50:52:fe:
ee:59:71:dd:36:89:d6:52:29:c4:61:f8:f0:15:dd:
9a:4c:e6:ec:e0:6b:5e:d5:51:98:9d:55:8f:e9:7c:
aa:1d:49:d6:72:5f:75:59:1f:89:b6:c9:38:a3:9e:
be:38:85:72:af:c8:68:d9:6c:20:4d:d6:02:d4:d2:
2e:26:f5:a5:34:af:19:10:a9:84:77:24:cd:d3:a9:
5c:b2:cb:fe:c2:59:8e:29:c8:9d:5a:57:ce:18:84:
e9:02:16:3c:f6:c5:c4:cc:68:73:d4:42:f0:aa:66:
06:2e:57:81:5f:f7:15:6e:7e:a6:56:09:71:fa:06:
33:f4:5e:fc:72:0c:3f:0d:0f:81:8d:5d:ef:d9:e7:
44:37:38:81:f7:9b:0e:d4:71:9b:b7:ff:65:ee:4b:
97:c3:27:8e:99:77:38:05:7f:0a:ab:cf:5e:f3:66:
c0:d5:c1:6e:d5:91:0e:12:d8:3b:8b:b2:0b:fa:01:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:3B:DC:EE:A3:77:59:A7:E9:6A:A8:F2:E8:F7:42:9F:1D:9F:ED
X509v3 Authority Key Identifier:
keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:03:c5:49:84:cd:7b:86:8a:6f:d0:b8:39:87:63:72:29:
36:64:13:12:31:89:eb:9a:12:a7:c7:70:93:d9:76:76:ee:c1:
f1:06:d8:03:80:b4:25:e2:7c:81:85:da:48:0e:86:65:5a:fd:
ea:87:d7:0c:9d:4c:e5:91:cd:3e:23:cd:46:b4:a9:19:b0:0f:
2e:aa:ea:c7:da:a7:5f:69:86:0a:e7:96:43:d3:ea:eb:93:d6:
a5:9e:43:be:40:ee:7f:65:86:ff:a7:48:0d:87:5f:4b:84:06:
ca:86:21:4b:e5:c6:25:b1:24:d9:73:41:38:51:28:49:eb:1d:
f7:e3:4f:81:0c:66:9a:2f:08:66:06:24:95:5a:6a:c8:d8:69:
fb:80:1b:5d:c3:72:9c:21:6c:49:8e:1c:4d:55:7f:60:05:86:
2f:c1:ba:e6:cb:28:2f:1b:a6:90:f3:a3:c7:a4:5d:26:1e:6c:
d5:bd:14:62:dc:ab:ae:06:ec:9f:35:32:eb:4c:2d:1d:32:7b:
ca:0f:ab:58:e3:e7:dd:0c:7b:8f:14:b1:dc:92:87:67:46:29:
98:95:53:7e:36:2e:8d:d0:67:3d:24:32:2c:88:9e:c2:4c:71:
14:1a:b5:e8:6a:66:33:56:ae:95:53:6c:1c:81:bf:fc:6f:4a:
39:20:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:41 2025 by rpki-client