Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier: /StxlNsneJfpgPX6zgECrwNPyY8kpKjl504TCFUHUUY=
Subject key identifier: 62:F0:34:48:D6:98:4B:73:3B:FC:52:E2:B3:53:C4:42:EB:F1:7B:E5
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 04F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number: 04E2
Signing time: Thu 30 Jan 2025 23:51:38 +0000
Manifest this update: Thu 30 Jan 2025 23:51:38 +0000
Manifest next update: Thu 06 Feb 2025 23:51:38 +0000
Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: 6kUo4f6IPc1ralJz6WVUbSjENhHq75fEn8+XWqQP6Xw=)
2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=)
3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Jan 30 23:51:38 2025 GMT
Not After : Feb 6 23:51:38 2025 GMT
Subject: CN=679c108a-bec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:81:22:6d:2a:65:e1:52:af:e8:8f:a0:90:
5a:cf:3e:86:64:61:ff:6e:cf:18:88:63:31:13:d1:
be:b4:fb:03:24:b3:c0:87:b9:e8:e2:c2:27:d1:e6:
c4:53:5e:6d:fe:6b:23:6a:f9:bc:42:04:0d:d7:75:
f4:da:f1:62:98:c2:58:39:96:2d:5b:fa:14:5a:e4:
cb:23:c1:0f:cf:9f:57:7e:56:f8:f0:db:a7:3a:77:
1b:cc:1d:85:3a:6a:41:19:d5:ac:86:03:43:15:c7:
65:17:c2:fd:f3:f9:9a:7f:48:6f:6c:62:9e:0f:7a:
2b:8d:50:8c:17:87:95:73:a4:b6:c8:92:1b:46:c9:
ae:1b:68:7a:47:c2:10:c5:25:be:48:18:c0:13:c4:
53:0f:28:0b:06:57:3c:08:2e:90:4e:da:90:4b:6d:
ff:33:db:61:97:75:ab:4c:60:d8:95:1c:5f:6b:9f:
56:f8:00:72:7d:f5:51:b3:c5:86:fd:a4:a7:9e:1f:
20:63:1c:c9:09:73:df:82:61:43:0c:d7:1c:79:ae:
8b:66:83:2e:03:c5:cc:b1:e5:99:d5:91:39:a3:be:
bb:95:50:7c:ac:ea:ed:26:f7:6d:88:b2:f6:38:52:
5d:33:8f:49:ec:b2:ef:cf:d4:ee:6d:c5:02:88:28:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:34:48:D6:98:4B:73:3B:FC:52:E2:B3:53:C4:42:EB:F1:7B:E5
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:74:a7:75:d0:39:e5:78:b3:2f:9f:56:81:8f:82:41:2a:e1:
44:c2:6e:cd:28:1c:e7:a1:12:e6:16:a9:e9:11:19:f1:78:07:
ed:60:e7:a3:84:13:2a:64:e1:2b:24:f1:84:1a:1b:a9:82:7a:
54:15:d7:8e:33:8d:0e:fe:a7:ec:f1:1c:00:d9:01:22:06:b1:
cf:62:d1:57:b8:1c:1e:21:4f:2c:b5:15:df:fa:b5:f8:ed:51:
53:47:46:bc:bd:df:03:db:29:a8:5e:2a:1b:da:f5:53:a0:12:
dd:85:0d:f6:a7:ad:9e:57:0b:6e:e2:5d:c4:80:ee:bc:6d:83:
2a:f8:24:4d:18:bb:ce:9b:0d:1e:e2:f0:07:f2:5f:ee:f4:c1:
00:1d:36:82:df:12:a4:b1:9a:cf:80:0c:f0:63:8f:b8:89:3b:
2e:0a:89:a9:3a:0f:4c:22:37:3a:a0:e1:a4:bf:cb:db:14:73:
8e:2e:c6:6a:c6:d9:61:73:02:a6:42:c9:64:65:98:1a:74:62:
05:82:94:0c:16:fb:57:c6:67:b4:76:42:09:7a:a1:a0:dc:fc:
3f:15:7c:72:26:83:7a:5b:80:31:65:a9:37:30:75:a2:6c:7e:
d0:88:19:1e:0c:bd:fb:5b:94:4c:67:05:9d:56:99:d5:47:84:
6b:ea:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:36 2025 by rpki-client