Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier: o9aU51xQj/PgU7nNgF9adS7tDsgi+27HbEFNli03rHg=
Subject key identifier: 2F:DC:3D:ED:BF:5B:82:6E:20:67:E9:9A:E4:D4:55:5B:B2:EE:8C:85
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number: 012A
Signing time: Fri 31 Jan 2025 03:49:35 +0000
Manifest this update: Fri 31 Jan 2025 03:49:35 +0000
Manifest next update: Fri 07 Feb 2025 03:49:35 +0000
Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: aiJ3wlbqi17ikRd2gm9h+Ktjn8figTQEIuIWn5CBq2w=)
2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: nZO3fD/UXNr3uqqv02fIgSVaBw0L8cPP2uBqZUuZXQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Validity
Not Before: Jan 31 03:49:35 2025 GMT
Not After : Feb 7 03:49:35 2025 GMT
Subject: CN=679c484f-b360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:39:f2:48:5c:b2:ba:fe:7b:51:ae:1b:75:
9f:0f:cb:57:4b:e3:28:f5:a6:32:8d:27:c4:eb:1e:
41:31:eb:58:c4:4f:43:4f:1f:d9:c0:ed:7d:a5:75:
e7:96:26:19:37:68:c6:07:0d:ec:49:de:5b:66:ec:
b8:07:e6:b8:92:0a:8e:59:52:f2:39:9a:7d:e2:20:
9b:ef:97:b5:4d:a7:ed:6d:25:73:76:cd:0a:89:52:
e2:87:26:ec:87:5f:01:d5:7b:d9:97:64:1e:f0:58:
3e:d9:04:f6:bc:e9:8d:89:25:af:20:4b:6c:d2:ea:
df:ac:b7:6a:a0:e5:97:8f:15:f2:83:1c:d6:62:ba:
c7:2f:ad:f5:31:b5:c1:e5:1f:cc:2d:7b:85:9f:bd:
d9:58:e9:5e:38:ae:22:55:6f:cd:a3:52:ca:51:b0:
81:f8:66:71:3e:f1:7d:cb:d8:d0:1b:6e:10:3e:e6:
a9:4c:64:37:cb:c3:47:13:b6:d0:4c:77:88:6d:fe:
fa:24:33:3e:5e:ea:e5:d5:6d:fb:7a:b2:ae:7a:cd:
82:6e:a4:32:b5:ac:b8:ae:f3:3f:09:f3:1d:02:e6:
2e:d5:5a:6e:69:d8:29:60:27:7d:16:42:7b:46:04:
4f:9e:56:3f:e5:76:e7:c2:7f:e7:97:6b:15:3a:5e:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:3D:ED:BF:5B:82:6E:20:67:E9:9A:E4:D4:55:5B:B2:EE:8C:85
X509v3 Authority Key Identifier:
keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:09:37:e8:86:6c:94:37:00:71:be:f4:64:c8:1d:cd:fa:72:
fa:c3:26:0a:6c:6a:91:20:ed:6a:f1:1d:34:77:ac:32:d2:22:
8a:db:b7:36:27:8c:02:99:92:26:4f:48:b0:50:98:b8:56:43:
cb:3c:14:83:db:49:3f:20:05:ac:84:69:82:35:82:ec:8a:34:
49:e5:12:08:e3:d4:5a:86:92:8b:9a:95:cc:3a:fe:82:44:5e:
82:89:1e:36:2e:cf:4d:c8:a6:56:54:a5:e3:6e:b0:70:58:d1:
82:fb:27:0c:14:f5:65:69:3d:6c:2e:3d:50:74:bb:67:75:34:
1d:18:35:0a:6f:08:fe:71:06:bb:f5:1f:12:d8:dc:3e:ae:9d:
04:01:f1:cf:b1:5b:11:36:46:9e:87:47:33:21:57:5d:09:42:
61:4e:87:ce:64:73:af:b8:0d:07:bf:40:2a:3f:05:cd:4f:6f:
bd:6e:bc:c6:2b:cb:fe:0e:51:44:2a:ad:d2:cb:4a:cc:c1:15:
f3:e9:c9:ce:27:11:67:be:72:05:65:19:64:fb:0f:2d:04:b3:
d3:41:43:c3:1d:e1:4c:2d:ee:fc:7c:d2:57:cc:0a:89:e6:12:
21:37:fd:b5:83:0d:4f:44:6f:37:64:05:72:96:10:cd:55:06:
96:a7:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:37 2025 by rpki-client