Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json)
Hash identifier: GOFWfDbh/5NpMXgcoIbfywUomH3ofcRm3ik7MgGavm4=
Subject key identifier: EE:27:13:8F:4D:11:B8:62:D9:2D:08:08:68:F4:9B:2B:71:8D:B3:A4
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
Manifest number: 0223
Signing time: Fri 31 Jan 2025 02:04:01 +0000
Manifest this update: Fri 31 Jan 2025 02:04:01 +0000
Manifest next update: Fri 07 Feb 2025 02:04:01 +0000
Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: oGyelJmATPsuE7JdrS2rG+vLRPqAOR8RZoevucBBUQM=)
2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: +eopR6Ey6rjil4YrK0oUqjN/Z120/0ESYezEgJdM8WM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Validity
Not Before: Jan 31 02:04:01 2025 GMT
Not After : Feb 7 02:04:01 2025 GMT
Subject: CN=679c2f91-8e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:80:02:2a:d9:a8:ac:4d:21:e8:b7:4e:5f:
9f:99:27:6d:99:eb:63:eb:6e:e8:df:84:b4:e6:27:
fc:a5:25:6a:ff:15:47:83:1c:aa:ac:0a:72:b0:41:
25:38:65:89:bf:91:83:dd:bd:61:de:17:b8:62:c5:
17:e4:1f:98:1b:bc:47:c2:9f:a4:6c:cd:cd:d3:c3:
ab:9b:92:74:0d:c2:57:cd:ca:36:fc:24:8e:04:b4:
c8:3d:60:91:1b:7b:28:36:90:82:35:6a:aa:f8:bd:
d1:e8:96:11:e2:f6:da:90:b9:5e:66:4d:d4:2e:b8:
04:a8:7e:9c:4e:13:bf:cd:5c:64:22:a3:be:01:08:
40:78:de:1f:88:41:5a:84:64:78:f9:91:72:55:58:
7c:6b:70:f2:70:c6:99:69:2a:76:c2:88:82:79:ed:
74:37:92:49:c9:97:fe:c7:0a:62:4e:43:dc:87:91:
af:36:48:9f:3a:d5:1a:e6:92:01:33:85:b1:c4:05:
db:1b:a3:91:9e:66:00:2f:df:8f:db:4b:9a:6b:75:
13:8e:e8:93:f6:cf:b8:07:93:bb:f2:3b:a6:80:22:
5f:37:f0:90:8e:a3:2f:8c:32:e4:8a:51:89:47:b1:
81:d8:2c:59:9c:d4:2e:15:b4:03:ea:69:ff:47:8f:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:13:8F:4D:11:B8:62:D9:2D:08:08:68:F4:9B:2B:71:8D:B3:A4
X509v3 Authority Key Identifier:
keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0d:0d:da:66:e9:49:33:db:b1:b4:4b:10:67:99:c7:46:ca:
f4:05:ce:89:1f:67:1c:24:40:ba:39:e9:03:61:fa:db:45:97:
76:03:0f:1c:55:c1:df:0e:2b:e4:86:c9:2b:3b:24:77:78:de:
51:d4:1c:24:1f:ed:39:49:56:70:11:41:80:ed:1a:af:a5:ad:
bf:04:94:28:c7:50:c2:f0:fb:d4:d7:ed:0e:bc:8a:7e:98:2f:
d0:3c:37:40:db:7e:6a:07:0c:2f:64:29:93:67:f3:f8:99:37:
16:84:4b:23:f6:62:d1:bf:84:cb:58:75:db:bb:fb:d7:fd:78:
cf:e6:eb:98:73:58:ec:f7:7c:d3:8e:59:f6:1c:d0:78:b1:df:
89:7e:fa:14:16:0f:6a:e7:83:7e:ee:57:95:a8:76:14:05:f0:
32:b5:33:e9:8c:91:09:ec:63:8f:ea:d9:40:a5:0a:c0:7a:28:
e6:7a:d1:0f:65:ac:7f:74:29:34:85:dc:41:a4:ae:09:51:03:
ae:7c:92:e2:da:a3:f1:41:58:37:98:e4:be:3e:bb:27:8b:69:
23:f0:17:d5:d2:31:51:02:ed:f6:e9:61:82:dd:a6:cb:6e:90:
b7:46:71:e6:8a:48:a2:79:c1:c6:98:a8:47:8a:8d:67:76:74:
4b:eb:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:00 2025 by rpki-client