Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json)
Hash identifier: DitDbHaH98IBLn4vCj0EBXMOkt5NG4oFF5jsykgTbPY=
Subject key identifier: 25:60:FA:86:C0:AA:3C:7A:8D:3D:32:AC:29:DA:FF:A5:51:3C:B0:D3
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial: 1CE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
Manifest number: 1CCF
Signing time: Fri 31 Jan 2025 16:10:38 +0000
Manifest this update: Fri 31 Jan 2025 16:10:38 +0000
Manifest next update: Fri 07 Feb 2025 16:10:38 +0000
Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: 5BZuhX+yjw065XprKRgheDNLjF9OrzXOUJU8L57wWl8=)
2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: kc6Qio1nm2R7Nmekjn2RQdz6FiLOSkIgyD8v0SWSLok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7395 (0x1ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Validity
Not Before: Jan 31 16:10:38 2025 GMT
Not After : Feb 7 16:10:38 2025 GMT
Subject: CN=679cf5fe-6ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:57:8d:2c:ee:60:62:2b:bb:2c:2b:cc:6d:
59:ff:4a:c9:8f:28:a8:7e:05:2a:b8:1e:6e:d1:46:
63:58:46:39:ab:32:8c:c3:55:bd:cf:82:6a:e3:de:
a1:bb:56:b3:75:c6:2d:c5:0a:7a:c2:1e:85:3b:da:
a1:5a:04:c4:f5:d0:04:17:92:b9:9f:7b:1d:85:ea:
79:69:77:0f:f5:fa:cf:de:5a:be:0e:eb:3b:a2:7b:
fd:9a:52:8c:5c:62:36:aa:d8:81:a5:1b:21:1a:1c:
f2:35:e0:92:18:89:24:14:c8:81:f1:12:44:57:3a:
1a:05:df:d4:b8:52:a0:43:94:5e:e1:05:2e:04:45:
3d:11:56:70:1e:c9:df:66:6c:88:bf:d0:b1:0d:da:
18:74:1a:c9:72:f3:c5:fd:ac:94:e8:dd:a0:01:53:
41:ed:e7:31:c0:07:ab:5a:f5:f4:42:48:3a:f4:df:
7a:ed:1a:cf:9c:63:11:a7:04:51:0a:f2:86:28:2b:
66:3e:bf:f0:2d:92:19:ce:7d:77:dd:13:01:8b:eb:
cd:bb:60:19:48:91:81:bf:00:0e:6b:3e:01:ef:ba:
ec:f3:b4:34:85:54:82:ea:da:6f:1c:93:7b:40:fd:
e4:2d:71:30:40:cd:03:c8:be:c2:fb:c8:0e:6d:d0:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:60:FA:86:C0:AA:3C:7A:8D:3D:32:AC:29:DA:FF:A5:51:3C:B0:D3
X509v3 Authority Key Identifier:
keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:17:52:d7:e9:d3:1b:bd:c3:47:a3:e5:9b:56:dd:19:cb:52:
be:f0:45:97:d1:27:cb:3a:56:47:a1:19:e2:50:cc:8b:bd:57:
cd:b5:46:5b:ef:d5:f7:01:bc:a8:9b:3b:9e:04:97:8d:d1:83:
62:a2:c3:ad:5a:4d:f8:a4:fa:e5:e0:7b:c2:ea:e7:55:14:40:
15:1c:47:4c:ca:56:6c:8b:4a:c6:26:87:ac:57:c8:43:1e:68:
80:eb:27:f1:88:d8:d4:a6:c4:7f:dd:b4:b2:aa:cc:e6:91:89:
4b:3d:54:86:80:05:ea:64:02:13:b9:a1:8a:f6:39:6a:fd:d5:
80:bc:1e:51:ec:4d:7f:15:27:25:d0:d0:35:28:55:8f:5b:a8:
e6:00:88:02:bb:68:5d:38:b2:51:4c:c7:1e:08:42:30:37:50:
1d:03:04:59:59:a3:dd:cc:52:b6:49:25:fa:aa:19:37:ec:da:
6c:69:92:c3:70:1f:a6:8b:0b:55:d8:c5:4c:22:4e:57:c9:3b:
9a:d1:30:3f:77:00:b9:6f:a5:26:9f:d6:85:9e:f5:8e:8a:ab:
6a:d6:00:3c:5f:91:2a:74:f8:09:3d:21:c1:f3:e8:57:46:cb:
7c:56:98:7c:db:96:5d:a2:0a:2e:8e:ea:21:56:97:16:2d:70:
cb:53:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:33 2025 by rpki-client