Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: Y+pTSspyR2dbjVeU4b2g/72PvZZEqY4/buJ6nqtyTXI=
Subject key identifier: 7F:8E:51:D1:42:66:D7:0B:24:E2:E0:CE:B0:92:45:B8:04:AA:16:19
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 07C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 07B9
Signing time: Thu 30 Jan 2025 21:05:56 +0000
Manifest this update: Thu 30 Jan 2025 21:05:55 +0000
Manifest next update: Thu 06 Feb 2025 21:05:55 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: JNV0jEv4rcG7NJOhcINOkxyRLt1/ESvWYJAxHirLsCg=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Jan 30 21:05:55 2025 GMT
Not After : Feb 6 21:05:55 2025 GMT
Subject: CN=679be9b3-622c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:fa:81:80:5e:e3:54:1d:30:8e:83:8b:60:
47:4a:ae:ce:d2:08:26:a3:4d:05:55:46:ad:58:ff:
e4:4c:9e:a7:fd:c2:b1:5b:3e:b6:e5:22:77:62:13:
77:6d:09:b0:18:6e:09:c5:ab:d3:72:16:da:1a:b8:
0b:7a:66:86:fb:7a:18:7b:65:10:a7:bd:8c:d5:4a:
94:d8:9e:0a:87:56:be:09:bc:81:34:0e:5f:3e:33:
ad:ed:d3:28:e6:6b:3c:28:b3:45:47:e7:1e:d4:a2:
b4:61:ea:6d:21:e4:2a:a0:a4:db:66:47:4d:99:0c:
89:91:31:92:82:44:70:06:93:6f:bd:df:a8:8a:ed:
c5:08:f9:6a:76:cf:50:f8:01:24:5e:09:f0:03:0c:
3d:08:1e:a6:5d:cf:b1:96:31:bf:b4:d8:19:56:ea:
40:66:4d:0f:69:9f:ce:e8:d5:ee:0b:21:70:ea:4e:
18:a1:8b:c0:4f:83:72:f7:3f:c5:c3:be:a6:5b:92:
09:c6:9a:98:3f:76:56:36:6a:ff:68:30:24:52:61:
bc:cc:ad:8e:68:e5:95:42:3b:4b:21:30:be:58:d0:
96:2a:a4:51:72:59:72:73:36:f5:42:38:6e:fc:53:
86:be:6e:d8:bd:0f:bf:d1:d7:27:bf:95:51:1f:0c:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:51:D1:42:66:D7:0B:24:E2:E0:CE:B0:92:45:B8:04:AA:16:19
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:6b:21:ec:06:b7:27:a2:a2:9c:f8:de:00:cf:29:8f:31:
6b:6b:2c:af:83:c0:02:f7:c9:e7:d9:77:5c:17:16:34:75:c8:
30:50:8c:5f:10:1b:3b:cb:8f:91:c1:83:c5:bc:76:85:1c:32:
05:fc:4a:74:7b:69:27:af:dd:df:bb:e5:24:48:50:06:92:f2:
95:3c:1f:f2:ac:41:9f:63:c7:d7:94:2f:40:4b:83:d9:ca:b3:
1a:03:93:c2:fe:30:59:c4:57:7b:6f:07:d5:2b:da:7f:4c:5d:
0d:21:7d:3a:34:93:42:67:3a:a1:65:13:d6:99:0a:2f:f6:d7:
f4:2d:24:6a:67:96:5e:66:35:31:a1:2c:e2:87:a7:35:56:33:
f8:96:95:1d:d8:9b:42:97:ad:d1:61:9d:f8:0f:a4:1d:1e:9a:
9a:86:88:4f:83:d4:2b:5d:9a:6a:dc:db:ea:08:f2:d8:37:d5:
15:96:3c:0a:99:15:0f:a4:3d:8c:c8:4d:d5:57:40:3d:30:0f:
cd:b0:51:73:c1:bd:20:e4:f4:36:80:62:a4:3d:1b:21:e8:e5:
6f:64:6d:94:c7:ef:21:32:8b:7e:a1:ca:c2:f2:26:4d:75:17:
24:16:40:da:91:f7:07:ae:dd:c7:2d:4f:d6:69:5a:e2:52:80:
be:de:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:29 2025 by rpki-client