Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
File: ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json)
Hash identifier: y3eCYIJdun+pod/ZB43qpGycrzsD/RQ2mI2pv8pwi8I=
Subject key identifier: 54:3B:D1:F1:D8:16:43:BA:BF:3D:B3:1D:A2:BB:D4:F7:32:61:09:C4
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Certificate issuer: /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
Manifest number: 0288
Signing time: Fri 31 Jan 2025 03:11:15 +0000
Manifest this update: Fri 31 Jan 2025 03:11:14 +0000
Manifest next update: Fri 07 Feb 2025 03:11:14 +0000
Files and hashes: 1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: 7kLxZOnhW8a4k+b5xPeDZr8K4i8fKmTcMok0ULplKbo=)
2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: W41UGNX+U3pkh1MUhjtjxt+m5tecoSOo5ggoTHhxJd0=)
3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: nMxWe2kO7DPOaQFUeR91icyhuLOvB3F+0nx9gT0fM2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Validity
Not Before: Jan 31 03:11:14 2025 GMT
Not After : Feb 7 03:11:14 2025 GMT
Subject: CN=679c3f53-6b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:e8:7e:47:1b:2c:0e:3e:8a:ac:3e:f2:4a:
3f:2c:be:2f:57:94:53:9d:60:99:70:76:f4:a6:36:
4f:1e:ee:6e:8b:4f:1b:ef:53:94:1d:6b:61:e3:96:
b8:2c:7c:78:79:cf:18:cb:f1:29:2d:9f:1b:d4:ce:
a3:71:92:4a:c4:0a:aa:70:1b:c9:f3:c3:7d:d3:1f:
a3:7e:1d:c9:fe:85:82:ea:2e:14:2f:ec:0d:8a:0a:
79:72:e1:30:98:ea:14:db:19:25:26:92:a4:b1:12:
bb:07:39:4c:cc:23:71:f1:bf:f4:df:b6:f0:6e:1f:
e2:cd:05:79:df:88:91:a7:c5:2e:4b:b6:60:1b:7f:
9b:d6:6a:88:31:4f:76:85:c3:d0:84:79:be:5f:fc:
9e:5a:d1:c1:fc:8d:ae:be:fa:fd:d6:fb:76:ed:09:
5b:02:38:b4:e6:5f:0c:50:5e:61:0f:63:7f:5e:47:
ac:43:28:1c:86:61:c4:d6:44:f2:e7:0b:97:b4:8e:
73:a4:82:f0:99:d2:bd:a5:d8:91:71:7f:2c:3b:11:
a0:b6:90:02:0c:4b:9c:a5:41:0a:63:6f:a7:71:87:
db:7f:8e:92:14:3a:34:3d:b1:9c:ab:b2:3b:05:90:
48:f0:ac:13:72:c0:ad:b9:6c:ba:f0:d7:2b:07:13:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:D1:F1:D8:16:43:BA:BF:3D:B3:1D:A2:BB:D4:F7:32:61:09:C4
X509v3 Authority Key Identifier:
keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:11:ec:66:56:a6:d0:6a:d9:9f:15:c5:18:1a:d1:f0:26:ff:
b0:79:aa:11:99:1f:50:fc:f2:a8:7f:1f:5b:36:58:fc:6d:31:
b3:6c:17:3f:78:3d:cb:79:94:cb:4f:2e:1f:44:bf:ec:3d:e6:
37:36:db:d1:95:7e:fa:42:07:5d:b6:3e:60:6d:17:e2:53:10:
c7:99:1d:8c:0f:7e:ca:c8:6e:0f:b7:da:70:18:26:2e:fc:e9:
b2:4d:dd:28:63:63:13:75:f9:ed:db:68:79:0b:22:35:d4:21:
e1:ab:05:24:d4:7e:8c:6b:9c:02:a0:39:80:b2:cf:27:1a:a7:
73:7d:42:d3:5c:7b:99:55:00:60:38:32:75:68:10:1d:38:53:
72:05:f0:40:ff:10:0b:2d:24:97:46:2e:c3:ce:af:b1:ff:fd:
69:b6:27:cf:47:c2:b8:85:9a:53:3e:fc:4c:fb:0e:e1:f0:5f:
76:de:9b:0c:09:fa:f9:e4:6a:90:76:24:61:e0:b3:8f:59:02:
da:20:c7:09:b6:ed:d1:b0:a2:2f:7d:80:79:15:81:55:4c:0e:
8e:4a:58:88:49:b6:9a:68:a9:4e:97:70:7e:83:b2:10:ca:d8:
97:41:8b:9e:20:57:ea:cb:73:13:46:39:80:52:64:e9:30:4a:
c9:40:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:41 2025 by rpki-client