Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: 3qAE/0Q2I2OTUhbWrcZKA4YSEF6UYWc/NjpHfgkonGw=
Subject key identifier: 98:9D:A2:E9:8D:7F:94:66:34:94:11:8B:16:E7:DF:04:0E:E7:45:DF
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4599
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 44F1
Signing time: Fri 31 Jan 2025 14:50:10 +0000
Manifest this update: Fri 31 Jan 2025 14:50:09 +0000
Manifest next update: Fri 07 Feb 2025 14:50:09 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: iPgHudFv9PIYv2pMm3NdQ1dwd0oscmi1UjfSkuor+qE=)
2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: dIUmjSrIjTBexv9/ceLPC3WswXZRCQ+E7X3cPIrgsiw=)
3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: N0F8HE1OKVKKKHAEjBQrKcxyApq01oZoxtlct6NIs44=)
4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: nH4HcxvHCks4lwSYOfj8uqEK1Tlggt8L6lAOWOozK/U=)
5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: EBPO+j383ZTZL3W25SBCuUDnWsryeNl/oCk3sCJDyPg=)
6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: lK432uTKMzI/MWDWDCT/5eSJfdDwnCex4YbKV+8mZxI=)
7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: okjzU3E4UBevhxAwJ+/GBUGWv9CrjBdiXIkVX/kNLUw=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: wPpie+ThAR/1TthkCM7hgEd/wJa4M0QWrfReez52vcc=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: yeZNkJNHC+qtIscVm8AAik64XQjEl1j01cQ1Y6MWxhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17817 (0x4599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jan 31 14:50:09 2025 GMT
Not After : Feb 7 14:50:09 2025 GMT
Subject: CN=679ce322-df31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:f2:20:0a:f3:38:fd:dd:fc:36:d3:cb:be:
58:48:4a:97:ae:d0:55:bd:5b:38:fb:ce:96:b7:10:
b0:c0:6b:03:27:6b:e1:9d:7e:9e:73:59:07:41:47:
16:c8:36:76:1e:4c:9a:1f:99:f0:10:5c:e9:6f:fa:
7b:db:e3:c3:1a:92:e4:c5:bc:c1:7d:85:5a:2b:b1:
3b:ae:ed:ec:02:cd:10:0b:46:b2:d0:39:46:ff:45:
43:b0:81:9b:9a:29:5f:05:ab:67:51:4c:3b:da:f0:
a4:c6:66:9d:e3:15:6b:eb:98:0e:ae:34:98:2f:1d:
d3:0f:a8:96:b0:a4:1a:be:46:5a:99:99:40:f7:60:
5b:f0:fc:0e:8d:6d:07:27:63:24:d4:8a:5d:a3:59:
e7:ab:14:49:d6:86:fe:b4:66:39:79:f7:92:74:2c:
07:cc:42:f3:14:b7:55:49:2c:4d:02:8a:ae:bb:18:
2c:30:c6:16:95:c1:00:a3:ce:41:92:f4:d7:05:92:
15:cd:16:62:52:af:89:cb:5f:4e:12:31:a8:5c:19:
92:b6:ac:ad:45:7f:b1:3c:66:56:02:cb:55:da:85:
ef:6e:67:42:85:3e:08:ad:9b:4c:83:36:4f:d6:d3:
25:89:81:66:37:f1:0e:32:45:0b:48:19:dd:17:e7:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:A2:E9:8D:7F:94:66:34:94:11:8B:16:E7:DF:04:0E:E7:45:DF
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:00:37:a8:9e:fb:46:67:d0:2b:04:b1:7c:62:c4:bb:2f:
a4:c8:ca:7c:4e:0e:bd:63:87:3c:c3:26:f0:d4:a5:cc:cb:4c:
e2:30:bb:a5:d9:3c:15:6e:7d:17:a7:27:a9:64:9f:51:4a:ed:
d5:d6:c0:87:07:ce:8a:8e:89:6e:c6:e0:ed:a9:8b:8e:4d:e1:
4e:3f:4f:e0:79:7d:22:a6:5f:c0:dd:f0:a6:77:26:45:83:50:
e9:1b:f1:88:21:05:03:8d:0e:e8:b2:04:6a:1b:b1:54:95:f3:
9d:c0:e9:e2:ad:c4:d4:83:43:a9:d5:2f:5a:37:65:58:90:06:
a9:ec:33:7e:cb:a2:cf:07:39:82:7b:cb:a1:d2:71:5f:fd:c9:
b8:c0:05:50:2d:3c:b0:29:83:ec:97:de:38:22:87:51:cb:27:
0a:49:33:8c:82:03:a3:b5:74:7c:e9:40:01:79:5d:0e:3e:d8:
56:f0:34:8d:27:04:2e:22:05:c5:19:a5:bc:bb:56:1f:61:19:
ed:df:f0:cd:d6:38:e7:54:fe:ea:0e:c7:80:f4:5d:01:7b:9e:
5d:6f:fc:46:02:1d:33:bc:76:79:80:f5:00:59:da:f1:52:c4:
6a:24:83:0c:ae:c6:b6:d8:44:37:44:97:21:74:4b:36:2c:66:
ed:6a:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:34 2025 by rpki-client