Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json)
Hash identifier: zDXXhHxJ23X+fO1Rz0QIZXRnYVZmOzMwNmvCcrG68Mw=
Subject key identifier: 89:75:5E:07:07:C7:B5:46:B7:71:D8:F9:FA:60:55:6D:13:8C:15:59
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
Manifest number: 019C
Signing time: Fri 31 Jan 2025 02:39:30 +0000
Manifest this update: Fri 31 Jan 2025 02:39:30 +0000
Manifest next update: Fri 07 Feb 2025 02:39:30 +0000
Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: 4oGr/5n5x5ZEf5bX011Vw91nrwiVHjaWqGgNJdBeJQ4=)
2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Validity
Not Before: Jan 31 02:39:30 2025 GMT
Not After : Feb 7 02:39:30 2025 GMT
Subject: CN=679c37e2-fa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:73:90:50:2e:5c:06:7e:74:cb:60:dd:93:
04:0e:44:ec:b1:31:7d:d1:74:37:40:07:7d:f3:c6:
a7:da:59:dc:3a:d4:c5:8c:13:9f:0e:0b:3a:9b:f8:
85:04:fd:49:ab:c2:7c:38:37:3f:fa:18:52:2f:4d:
23:4a:5d:06:f9:1f:51:68:af:30:c5:21:fb:85:d9:
0f:7e:79:d1:82:96:16:43:de:92:60:f3:1a:c8:a6:
5a:b9:0e:a6:2a:12:a8:31:c2:44:f2:c2:a1:e8:25:
c1:7f:ae:3d:3c:57:4e:bb:df:52:28:57:d9:23:fb:
3b:05:05:1a:70:73:1e:40:f2:60:32:13:02:2c:20:
51:aa:be:42:a7:ba:9d:de:12:75:03:65:a2:fe:d0:
40:8d:ef:cd:17:81:41:d9:a0:f9:0f:6d:58:bb:68:
3a:31:3b:66:ba:12:0c:fe:d4:39:d6:88:a2:12:87:
9c:83:74:59:b5:3b:7c:ab:56:79:e3:23:71:37:6f:
3d:84:45:84:80:2e:d1:87:44:c7:65:5a:cd:b9:6a:
b6:70:4f:8a:2e:66:86:b1:40:30:5f:c0:8a:e4:a5:
fd:1f:cd:1d:17:b9:31:6d:d5:90:0f:f2:ed:b5:9e:
c1:f1:ca:e1:16:4a:df:d2:f3:a5:f3:a6:35:c4:68:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:75:5E:07:07:C7:B5:46:B7:71:D8:F9:FA:60:55:6D:13:8C:15:59
X509v3 Authority Key Identifier:
keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:f0:95:c8:f6:ca:1d:5c:0c:0c:c8:72:66:9c:c6:e7:bd:
dd:5b:7d:6a:65:50:dc:d3:89:c1:2f:2a:ea:32:8f:83:30:d4:
4c:ba:ac:1f:c7:86:42:e3:95:1f:10:70:c3:25:7d:dc:84:2b:
f0:23:7a:af:2e:10:7e:fd:19:01:28:5d:e2:6c:1a:52:fb:e5:
1a:82:7a:59:8c:b4:e5:5e:24:ca:f4:08:de:d8:d5:64:c8:cc:
7e:cb:7a:95:44:68:39:82:85:54:be:10:eb:87:31:86:b9:2b:
05:39:0b:14:d0:a0:b6:aa:72:9e:06:90:93:f9:55:69:be:96:
6b:14:95:39:5d:1e:9b:ac:9d:05:d6:58:1e:45:17:a1:0c:8c:
69:ac:6c:a9:e6:55:45:5f:4d:0a:75:03:2c:a3:3a:79:ba:db:
d9:bc:14:5d:95:4f:86:26:38:71:6d:e8:68:30:d6:04:27:da:
29:e4:d2:ac:d7:87:e6:e7:d9:b5:1c:b3:9d:ce:78:fe:6a:67:
bd:26:2b:d5:b0:96:d4:54:5f:6f:6c:95:72:5f:a1:eb:e1:66:
23:68:f5:30:78:e6:fc:24:fa:97:79:d4:1f:c0:c4:10:3c:85:
1b:a0:c7:fc:77:34:68:c8:45:3b:d1:a1:7c:11:a9:4b:fd:89:
18:28:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:25 2025 by rpki-client