Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json)
Hash identifier: lNgpgI5NKD+0PfkhR1U0QjbiryocHiLmjGEBu6PlQGI=
Subject key identifier: 4D:B5:F8:AA:4A:5A:8A:E7:30:AE:31:F3:57:A4:6D:B5:35:BF:BB:59
Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87
Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
Certificate serial: 102B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
Manifest number: 1024
Signing time: Fri 31 Jan 2025 17:23:36 +0000
Manifest this update: Fri 31 Jan 2025 17:23:35 +0000
Manifest next update: Fri 07 Feb 2025 17:23:35 +0000
Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: 7x0l7mxql4PR1CVFr9UEffUpMacM9EISZz/teDAHWp0=)
2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4139 (0x102b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
Validity
Not Before: Jan 31 17:23:35 2025 GMT
Not After : Feb 7 17:23:35 2025 GMT
Subject: CN=679d0718-a8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:85:1f:4b:b3:b0:16:53:bd:c9:9a:26:f3:
98:25:6e:08:0a:0d:40:55:75:d7:18:a4:72:da:3b:
b6:57:07:c2:32:83:3b:11:b2:27:b0:96:1b:b6:f7:
bd:e9:b2:0e:e9:8d:c7:8c:11:77:b7:8c:ab:31:c9:
30:17:32:6e:36:6b:82:ec:63:9a:b7:46:18:4b:32:
63:ad:b8:18:a7:87:9d:c2:47:9f:cb:22:e6:b2:8b:
1c:85:85:c3:55:ee:5e:d0:68:19:88:5e:bd:66:47:
88:e4:ed:5c:4f:7e:ef:db:68:a8:aa:65:98:a0:5b:
b6:2f:bc:fa:8b:87:9c:4f:9a:ce:08:31:3d:0e:e2:
3c:1a:95:a1:35:b4:e4:f3:e9:23:49:e8:cc:09:6f:
1f:a5:a1:69:1e:04:3a:b4:66:60:e4:40:0f:b4:98:
22:de:4d:ab:9d:c5:90:c8:e9:5b:e6:a3:9f:2c:db:
83:7b:16:40:3d:39:88:e2:12:87:e6:0d:8a:5b:d9:
88:0a:b6:a7:2e:64:ac:93:ef:76:9a:74:19:bc:03:
77:8e:ca:f0:17:9b:37:25:dc:ba:6a:9e:5e:f7:c5:
00:b2:02:0e:c3:22:54:5b:11:38:be:d3:0d:e6:fe:
32:83:08:df:44:31:a6:32:56:69:ad:9e:e5:bc:03:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B5:F8:AA:4A:5A:8A:E7:30:AE:31:F3:57:A4:6D:B5:35:BF:BB:59
X509v3 Authority Key Identifier:
keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:15:80:16:72:fc:3e:e4:24:2b:89:15:fe:92:01:30:4b:69:
10:44:4f:28:d7:d0:19:73:48:bd:e8:35:88:02:67:32:cc:71:
4d:12:87:b0:d4:b0:62:b0:98:38:59:3a:4d:ac:91:03:a1:8f:
3e:e2:06:c8:6e:18:c3:89:7f:26:b2:eb:03:64:d5:e4:24:58:
88:83:5d:8c:95:80:46:42:a6:ff:7a:05:7a:af:ef:5f:5d:63:
7a:fc:60:69:90:53:6b:1c:18:74:94:8d:e9:96:f7:92:5b:cf:
73:9a:71:7f:d4:27:26:1f:35:43:35:52:97:62:4e:4b:5b:3c:
a7:5b:28:4c:ec:96:13:75:96:6f:5e:07:0e:2c:6e:8e:39:8b:
aa:f4:f0:5d:2c:70:f5:60:a3:ab:5b:cc:10:73:f6:01:c7:c8:
0f:c5:8a:35:2a:b2:1a:08:d2:77:08:c8:15:c7:e3:fe:59:9b:
64:cd:0b:ff:3f:f8:dc:28:38:82:d3:ef:fa:af:19:86:d9:af:
c8:7b:06:25:da:da:87:f7:9c:40:51:b4:a3:dd:b0:ce:55:3c:
12:d4:69:74:9a:5c:f0:12:54:f1:89:9a:6b:15:8f:0a:fd:25:
0d:0a:3b:21:b8:26:0e:95:41:1e:59:5a:3b:cf:51:0a:ca:34:
8d:cd:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:08 2025 by rpki-client