Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json)
Hash identifier: XgunyLxdAbdaUmrscKeyHyDlzz69SmdF2dVI9iDyITU=
Subject key identifier: 04:54:A4:E3:FC:93:56:50:E0:F7:A1:90:F2:13:B3:C5:43:A4:DD:F1
Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
Certificate serial: 246F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
Manifest number: 2445
Signing time: Fri 31 Jan 2025 15:06:14 +0000
Manifest this update: Fri 31 Jan 2025 15:06:13 +0000
Manifest next update: Fri 07 Feb 2025 15:06:13 +0000
Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: OgQsl9IbSruZ3+RzqLy6CLorJOcCs4nOLVKbSTagdeI=)
2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: 3kDcxjoJt+uLwNPAJETs74uGi0S+qOhaB4Kap466oyI=)
3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: TvzuvljGMYe65nUWCoyGwWoTpT0hk8WJPlKCbHuFU80=)
4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: nb4ekLYfMcmcZ6P490LxZTkaHaEPmz90vPJhXehdrTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9327 (0x246f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
Validity
Not Before: Jan 31 15:06:13 2025 GMT
Not After : Feb 7 15:06:13 2025 GMT
Subject: CN=679ce6e5-c6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:64:a7:fa:54:d4:94:58:42:56:cc:60:21:
93:cb:56:bd:b4:5a:c3:d4:45:c5:3f:b9:55:cc:da:
ad:73:be:11:c5:13:e2:32:d1:9f:c0:cd:d5:1c:59:
18:5a:65:74:f7:cd:6e:7d:a9:f3:de:9a:af:0e:c7:
b9:38:c2:bc:bf:53:f0:02:0a:56:06:cf:91:01:4d:
dd:01:56:37:8f:42:25:a9:98:71:5a:a2:44:b2:1e:
47:76:28:c7:be:58:37:fe:40:dd:c2:5d:c3:6c:66:
3a:e5:4f:64:11:a3:f5:af:57:ab:e8:e7:e2:00:39:
35:37:bb:1b:9f:f3:ff:4e:98:6d:e2:8a:b8:ff:f2:
02:3b:a6:2d:9f:80:2d:1d:60:a0:dd:28:32:fe:75:
75:13:bd:c2:e6:19:d2:21:4e:34:d4:b9:5f:cf:60:
27:1b:e6:46:9c:62:28:e7:a2:3a:50:05:92:d5:cc:
d3:15:f3:65:d0:43:46:0f:7c:4d:1d:a3:49:de:ad:
6a:f2:0b:b3:5d:4a:b3:08:62:6e:fb:1f:29:7e:a0:
15:88:93:44:21:e6:00:33:c5:19:88:9e:bd:56:31:
2c:da:ec:58:38:58:d7:e2:39:f6:c4:78:f1:ec:bf:
5e:02:b6:6e:8e:93:ed:21:d2:c0:e0:28:48:9c:94:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:A4:E3:FC:93:56:50:E0:F7:A1:90:F2:13:B3:C5:43:A4:DD:F1
X509v3 Authority Key Identifier:
keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:96:ef:85:e1:f9:77:14:c5:d4:ca:6a:3f:30:00:45:8c:
5d:11:75:d7:b8:2b:12:0a:c5:94:45:bf:54:01:d3:51:a4:71:
97:25:cc:35:67:cd:73:b4:f8:67:00:e5:fb:a8:a4:eb:dd:3c:
81:fd:c2:1e:10:6e:35:a6:7e:23:1b:6f:f5:e8:a1:e9:9a:43:
ba:32:b4:68:cd:92:1b:7a:f9:36:70:40:22:52:8a:1a:6d:36:
5f:a5:3e:fe:13:e6:21:53:cc:89:93:f3:57:cc:d0:8d:62:92:
ed:94:fd:fd:22:3f:a9:25:cb:63:7a:19:6c:af:d3:a7:cc:db:
5d:73:18:fc:3d:d4:6d:9d:83:df:c0:0a:e2:8c:72:13:ae:28:
6c:61:08:63:ae:6a:56:93:dd:bb:81:54:04:c9:c9:1a:5e:67:
89:bb:5f:f3:56:61:41:a2:aa:7c:2c:c8:44:c5:f6:b7:82:7d:
9f:73:7c:a6:46:2c:61:c6:11:fb:39:0c:11:00:47:90:ab:31:
cb:f0:e3:df:7f:ca:a2:41:b3:55:e9:48:3a:08:72:8b:9a:79:
88:38:97:f7:65:fb:c5:00:57:f0:bc:90:a6:2b:7a:4b:06:2d:
80:fd:1e:87:0d:fd:f3:98:ad:71:05:0c:ca:a7:f0:e6:b8:2d:
72:34:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:18 2025 by rpki-client