Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier: 3wow99VrBeWnYt/IrPZ7UaM2rU03RCwmDqhggUM6+FM=
Subject key identifier: 17:93:9D:E3:3D:6E:89:D1:EC:62:E9:7F:FC:82:7B:F4:AB:7A:C8:1C
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer: /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number: 0225
Signing time: Fri 31 Jan 2025 02:16:34 +0000
Manifest this update: Fri 31 Jan 2025 02:16:33 +0000
Manifest next update: Fri 07 Feb 2025 02:16:33 +0000
Files and hashes: 1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: RAeVogV8nvRy9REa0XqqLAzdUx1tGo2jgSrXqEcjFnI=)
2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Validity
Not Before: Jan 31 02:16:33 2025 GMT
Not After : Feb 7 02:16:33 2025 GMT
Subject: CN=679c3281-d915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:2f:9d:b2:ba:7a:36:2e:b6:ae:ce:00:00:
ff:5f:1a:b7:1b:2c:41:99:a8:a4:25:f9:04:cc:5e:
51:cb:d4:85:d1:e9:68:92:f1:ab:e3:d6:a1:e9:86:
b3:f5:38:45:97:19:73:d1:a2:5a:0b:8b:c7:66:b1:
a5:36:00:8b:37:f7:7b:69:68:53:aa:c2:9b:d3:24:
1d:15:19:d9:29:bb:ed:58:ea:88:11:c3:9d:bc:fb:
08:6a:a3:c5:6c:74:6b:80:e2:e4:9a:1b:a6:fa:51:
92:e6:07:0d:37:c7:4e:85:a4:70:d4:d7:2d:57:4f:
fe:54:3f:9b:8d:18:00:94:0f:51:1a:82:0a:16:1a:
35:76:b5:ed:67:25:f4:4c:dd:7e:f4:12:bf:9e:6a:
e2:0b:3d:14:14:d4:bf:55:bf:b3:e2:b0:e0:b5:d7:
c1:b6:ed:2c:74:32:59:8c:43:29:a6:95:42:e4:e7:
eb:cc:7b:a5:31:7d:4d:91:1c:1a:99:9f:0a:5a:18:
60:ac:f7:c1:c4:13:fd:96:99:cc:6f:12:ce:35:90:
dc:b4:e0:e0:25:c6:c0:47:ae:ff:08:56:c4:ae:1a:
12:e8:53:76:d4:d6:3f:c4:82:1c:f2:cb:93:0e:4e:
64:50:98:11:51:07:10:fd:f3:e9:a8:10:04:56:cd:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:9D:E3:3D:6E:89:D1:EC:62:E9:7F:FC:82:7B:F4:AB:7A:C8:1C
X509v3 Authority Key Identifier:
keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:02:4d:79:13:54:90:95:8f:be:7d:41:97:9d:13:2a:7d:
11:f6:f7:1b:d7:3a:47:32:f0:9d:9d:97:a4:b3:9a:e4:af:ed:
a0:c8:d3:77:d7:1f:c0:95:4e:7e:f5:c4:70:d1:44:be:32:f8:
30:3c:c6:ee:38:71:ca:18:59:02:05:d5:f8:a0:aa:9b:2d:3d:
09:85:31:d3:b5:03:f3:39:d5:88:0a:dd:8c:55:f7:32:fd:15:
1d:8f:53:bf:b7:e8:49:20:bc:31:17:61:22:f0:6a:a5:95:35:
bc:38:9a:b7:cb:84:0d:47:6e:67:37:11:af:6d:17:05:aa:39:
ad:80:b8:0e:c6:e7:a3:3f:d1:52:21:59:a8:8d:f2:c4:d8:15:
2b:91:45:b2:ca:7f:00:25:6e:ca:a6:de:85:1b:33:37:5f:28:
8a:6d:a1:e4:27:41:02:d9:55:22:e6:08:1a:a4:33:63:25:d5:
41:df:e9:8e:95:7a:20:f8:88:89:74:cf:4e:6c:f1:e3:58:87:
cb:3b:6f:43:63:a1:45:cd:04:43:5e:a2:b9:6d:9c:95:7e:c6:
91:b7:e9:ed:a5:f9:70:2f:1f:7a:40:50:57:4d:0f:61:a6:16:
0e:c1:e3:34:c2:a6:cc:07:14:3f:70:1a:a6:34:ea:c3:a6:3c:
36:c5:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:07 2025 by rpki-client