Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File: 05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier: VH8RKsx0dCQFfX1xAqBRjFDS5S42BsY38Y1hjLgcRDA=
Subject key identifier: 8C:9C:16:57:E3:1E:0F:12:8E:B6:A9:D0:AB:6D:84:19:23:06:DC:C3
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number: 0105
Signing time: Fri 31 Jan 2025 04:08:56 +0000
Manifest this update: Fri 31 Jan 2025 04:08:55 +0000
Manifest next update: Fri 07 Feb 2025 04:08:55 +0000
Files and hashes: 1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: RKp6X3aj45R5pCIiOdzalo/gqhrHkiQXLOzYg21opNA=)
2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: qeJWAX6cW8g+xhKRaW5Fw41h91VMY7XDGYvJyjy3HwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Validity
Not Before: Jan 31 04:08:55 2025 GMT
Not After : Feb 7 04:08:55 2025 GMT
Subject: CN=679c4cd7-bd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:10:91:7d:7f:52:c8:df:de:68:a4:41:72:
5d:73:3f:79:d8:4d:6d:a4:a5:48:d4:21:8b:0c:4b:
17:75:59:f9:a4:80:2e:36:52:72:8c:81:f6:d1:8a:
34:63:84:09:94:8c:11:d6:fa:51:de:c0:fb:db:01:
c7:93:b4:a9:b3:16:78:3d:7f:9f:23:57:9b:52:0d:
50:c5:02:be:a0:da:d9:92:b4:83:33:e9:c5:ed:62:
ee:35:80:50:25:8e:1d:45:d9:45:fb:ad:4e:09:e3:
7d:69:8a:b1:f6:64:33:3c:0c:b4:9f:47:44:3d:73:
c9:1b:aa:62:a1:63:0d:af:b6:b2:f2:c4:ab:04:a7:
9a:be:7a:2a:52:ca:73:07:64:2d:37:e0:99:d3:1c:
75:20:47:fa:93:b0:ea:2c:1d:19:e1:62:be:95:63:
ba:5c:3a:e5:b8:6b:68:9c:7a:85:da:41:3c:e4:67:
46:6a:67:a0:5d:56:4e:79:2c:ce:7e:a2:c6:56:f4:
b1:b1:db:60:ed:84:0a:97:e2:f8:3b:44:2a:ec:bd:
e4:91:f7:f2:dd:bf:a6:c4:c9:19:c6:bc:8d:12:f8:
46:c3:e5:a6:34:e6:15:78:09:cb:86:6a:37:cc:45:
45:b7:18:ab:88:bd:16:95:4f:08:53:44:e8:6b:50:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:16:57:E3:1E:0F:12:8E:B6:A9:D0:AB:6D:84:19:23:06:DC:C3
X509v3 Authority Key Identifier:
keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:12:fa:01:8b:39:30:1c:f2:b0:13:05:f2:b2:b9:f1:af:07:
af:10:0b:9c:73:75:bb:f1:79:40:a3:58:5a:8f:3d:ec:f7:92:
f4:45:51:2e:b5:77:5f:41:61:1e:8e:ed:d5:81:a2:b9:70:24:
4b:41:ba:06:70:0b:9c:ff:b6:f5:de:f8:b3:83:14:78:fd:65:
44:26:19:51:2d:2b:73:8e:49:75:69:37:1b:de:37:57:d7:fa:
4f:59:cf:ec:2f:98:ff:4c:c0:c3:a3:f5:b4:c5:52:d1:ba:24:
e2:68:d8:55:1c:e8:54:cf:8b:42:12:49:16:af:ff:56:a4:66:
89:7e:fd:7f:77:a9:0d:7d:98:7a:fd:ea:60:e8:65:16:21:dc:
91:e3:11:2b:47:d4:12:fd:99:6f:11:1b:ba:9a:dc:8f:01:75:
ca:8a:e0:71:e5:79:ed:fd:62:0a:3c:dc:57:2f:af:6b:24:3d:
1c:9e:c7:f7:c8:2f:2c:09:9a:96:e0:b4:24:f9:f0:79:fc:30:
a8:f9:4a:ae:66:d0:81:cd:de:5e:b6:85:f2:96:a0:61:1f:2d:
8f:72:93:ae:69:09:83:df:7e:c5:8b:f0:b5:2c:60:db:65:9f:
8d:29:4a:5f:b0:87:0c:a3:0f:c5:7e:5f:f9:be:77:d7:b0:40:
ca:ec:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:51 2025 by rpki-client