Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json)
Hash identifier: 3Kn+fZFozBC7CZdallVxu6y3DEEQDGfVPMAU4EuJDek=
Subject key identifier: 76:6D:8D:53:74:28:D6:BC:F2:64:84:F9:67:43:0A:44:95:EA:1E:27
Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Certificate serial: 08E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
Manifest number: 08E4
Signing time: Thu 30 Jan 2025 20:28:26 +0000
Manifest this update: Thu 30 Jan 2025 20:28:25 +0000
Manifest next update: Thu 06 Feb 2025 20:28:25 +0000
Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: 9zOMvrhFbqgBKJa8Dj7++HPLEGMAitkO4cIzE69/N30=)
2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: awdMDI45WMoyA7Hv0k/0lwP8aK2FFS10Os+VOyBIq0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F
Validity
Not Before: Jan 30 20:28:25 2025 GMT
Not After : Feb 6 20:28:25 2025 GMT
Subject: CN=679be0e9-8aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e4:90:d2:9c:69:e3:60:35:de:d6:86:cb:c5:
35:dc:29:d8:c7:c6:c8:b0:ef:14:f3:4e:3a:e9:c9:
8c:ea:fe:b4:84:31:87:05:ab:b8:e6:fe:a1:d7:31:
79:ca:f5:02:c2:d4:52:ec:a7:8d:45:fb:69:09:07:
54:df:29:d4:8f:8d:b5:b8:57:ab:cb:ce:64:da:57:
6d:80:9e:62:bd:89:1f:a4:0f:88:d5:89:84:34:24:
be:49:35:97:fe:66:fd:d4:1f:5b:f7:1e:26:e4:0f:
94:f3:bc:96:8a:3a:a7:31:88:7b:0f:22:7c:94:b7:
a9:e0:93:ef:c3:b6:81:e8:ee:68:69:ce:53:08:78:
ae:40:b9:82:06:ed:9d:d3:05:eb:11:63:55:a1:99:
eb:ab:c3:01:d7:93:26:ce:89:f9:71:56:bb:c5:7e:
8f:6d:66:dc:25:33:85:29:81:f7:5e:40:5a:9e:1c:
7b:eb:8e:02:44:e7:50:32:bc:00:ca:2f:a9:d0:51:
fe:40:4d:18:0f:e1:ce:b9:de:8a:2b:90:7c:19:97:
67:d5:f2:22:55:40:c1:80:5c:48:8e:ab:9e:a7:bc:
a5:b4:6c:bb:00:58:ac:e1:76:68:1a:b9:ab:e5:1b:
9a:d7:c0:4e:d9:c0:27:42:63:f0:a7:1d:61:17:2b:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:8D:53:74:28:D6:BC:F2:64:84:F9:67:43:0A:44:95:EA:1E:27
X509v3 Authority Key Identifier:
keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:17:34:92:67:75:37:1d:d8:b9:38:fe:af:db:53:c3:95:55:
37:ca:b0:3b:bf:3f:c8:0e:51:d3:b2:b5:61:6d:ba:9c:d0:59:
57:84:58:70:b7:3a:ef:3b:97:03:21:d5:79:ab:7d:91:a5:0f:
fd:88:da:c5:54:2a:23:82:72:70:4e:b5:34:1b:17:72:a8:b9:
35:7e:58:f3:f0:ec:e4:db:e8:ba:39:7c:8f:61:bb:db:ef:e0:
af:7c:ec:c0:87:33:af:e1:1b:51:f9:6b:d5:3f:a1:12:96:39:
27:14:86:0f:02:19:ee:be:5f:4c:f7:5e:23:be:70:c8:c4:dc:
07:be:6f:1c:aa:f8:9a:c5:94:c5:52:72:7f:8c:48:9e:76:e0:
60:43:c4:ea:19:f4:07:ab:3a:f6:8f:18:91:ca:a5:44:e0:5e:
83:b5:16:73:b9:c1:fb:16:a0:42:a5:28:00:b5:02:bc:d4:dc:
8c:25:c8:ca:d8:a2:4f:53:13:46:d3:bd:ed:17:0e:33:a7:55:
8c:4e:68:24:d6:37:7b:7e:f9:07:e6:79:06:ce:39:a6:98:55:
b3:54:0c:f8:0c:a2:3f:b2:1c:19:9a:03:0e:af:89:1a:23:d1:
b9:1f:f9:55:35:26:92:03:ae:a9:1b:76:85:56:39:06:94:c2:
72:fa:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:41 2025 by rpki-client