Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json)
Hash identifier: wNJZW4d6xfjsFKV71ooY5Zeq/I4P6VDHJ58lcYxHWXc=
Subject key identifier: 2F:98:63:37:39:42:68:DC:50:BB:13:CE:A6:CC:FE:B1:B7:E4:09:E7
Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Certificate serial: 0DAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
Manifest number: 0DA3
Signing time: Fri 31 Jan 2025 17:54:28 +0000
Manifest this update: Fri 31 Jan 2025 17:54:28 +0000
Manifest next update: Fri 07 Feb 2025 17:54:28 +0000
Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: MqVnWNgT8ZXvDmfn8MK9MfkXWoN/FbFGrsXezzFaJ3c=)
2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: +BalFw2CiL7uapLNj20tx3YBjmyA4tVc26LM7UMELNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3498 (0xdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Validity
Not Before: Jan 31 17:54:28 2025 GMT
Not After : Feb 7 17:54:28 2025 GMT
Subject: CN=679d0e54-7142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b3:05:52:68:4a:b7:15:03:b8:45:08:be:90:
66:05:c6:a5:a3:f5:ec:e1:79:77:19:e6:45:55:49:
c0:6e:9f:26:ee:14:6d:59:7b:ce:16:6d:5b:1a:7c:
1a:fb:9e:64:0f:cd:0e:a0:6a:6c:52:42:14:59:03:
c2:0b:2e:fb:ab:91:fc:1b:a9:cf:f1:23:b7:17:05:
43:dc:62:b5:b2:f7:a1:cf:c5:ae:a0:7b:5e:04:dc:
c2:7d:87:c9:e2:0f:98:29:0d:ec:86:31:90:51:f8:
67:d2:dd:e9:26:d5:80:f6:f6:a0:de:ed:10:3a:62:
db:35:aa:24:6f:7b:32:e2:cc:82:9e:5a:48:06:b2:
d7:b9:91:db:18:5e:3b:37:73:d1:ed:51:06:c4:43:
51:6d:5a:cb:7e:9e:20:fe:96:1f:9e:02:a6:0b:09:
42:30:2b:ad:6a:b5:9f:27:60:55:e3:09:e5:87:97:
fc:e8:b5:7d:1d:47:3f:28:d3:90:88:9d:9a:03:77:
c7:14:8c:4c:ed:8b:92:94:69:a2:d0:8f:ff:b6:0e:
3e:bd:33:c4:83:49:f2:62:75:00:36:b5:ec:f0:16:
21:ae:9f:8f:33:21:12:80:33:a6:0a:fb:57:21:70:
14:30:05:31:65:82:ab:49:5e:99:e2:9c:63:82:f9:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:98:63:37:39:42:68:DC:50:BB:13:CE:A6:CC:FE:B1:B7:E4:09:E7
X509v3 Authority Key Identifier:
keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:40:99:29:84:0e:8b:c8:ab:34:dc:a6:86:f0:04:1b:28:b8:
45:24:3f:ee:09:99:dd:b2:c5:2f:5c:69:85:ea:a9:f1:f5:cb:
8a:62:f2:92:8e:6c:e4:06:72:19:e6:89:9d:cf:f8:43:85:23:
67:69:00:1f:83:5f:77:3b:4c:1c:dc:ba:77:d3:e5:3c:cf:66:
10:62:c8:fd:b1:04:bb:eb:f4:ef:70:97:da:94:0c:42:cc:89:
ad:82:ef:c4:7f:21:ba:67:6d:b7:2c:9c:45:f9:ed:ac:95:fe:
2f:ba:6d:71:6f:41:72:bd:f5:9d:10:e3:0e:05:b3:ac:c4:04:
3d:bd:d9:e1:1f:cf:6a:3a:80:49:c4:d8:74:b2:16:f6:4c:f5:
39:a5:e2:b1:88:90:81:47:cf:db:ce:38:21:2b:3b:6c:68:b0:
cb:83:84:1f:13:cf:2e:fb:07:75:16:62:3d:17:5c:58:14:e1:
3d:6d:c0:da:fe:27:55:01:00:f9:fd:ee:07:9f:bc:68:e4:5f:
bc:b3:5d:17:2e:54:d4:db:e0:13:be:e1:49:4b:6e:f1:92:02:
ad:c2:bf:58:d8:ef:dc:64:68:ab:cf:61:21:b6:3b:cb:d9:5e:
54:81:0f:f1:b5:00:9c:66:94:c7:cd:7b:a1:db:ed:c1:2d:8c:
6b:60:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:14 2025 by rpki-client