Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json)
Hash identifier: OzlXR0FdbhfSPYYQP9u1xu6UqY1N9I18Gju6Gr7gBrs=
Subject key identifier: 43:F9:73:B4:50:35:09:7A:BD:D4:FC:37:E1:F9:9E:4F:EA:79:52:0F
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 04:02:52 +0000
Manifest this update: Fri 31 Jan 2025 04:02:52 +0000
Manifest next update: Fri 07 Feb 2025 04:02:52 +0000
Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: 0n2dJne4oeJ7JgnmsZ9KTRIAGQpWop4lX2//4HY+CQc=)
2: 9B1DE7226D8F11EE9BD22B40C4F9AE02.roa (hash: H5pK79+DkVT9bgtQkuk9t/grxvSc0nRDSs3JR8icAh8=)
3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: /RysZ9FFrvGFWhnZrMrChDiZQuIFgZEdesdb5vE5fVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: Jan 31 04:02:52 2025 GMT
Not After : Feb 7 04:02:52 2025 GMT
Subject: CN=679c4b6c-baf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:a9:d2:84:76:df:a5:8b:2e:e2:c8:af:8b:
d2:a9:11:e4:bf:91:4c:8f:7e:b9:6c:a1:65:e9:43:
00:d3:08:0d:86:94:c1:b0:19:ab:c1:20:11:de:ea:
7d:c5:67:56:09:31:d4:09:9b:0b:ca:09:5e:02:9f:
4b:b5:a8:43:2d:80:27:a0:f0:45:da:14:73:3f:fa:
1e:01:26:59:b8:3b:14:73:37:3b:04:0d:88:9a:7e:
92:49:f7:ff:97:a3:63:73:a4:67:a1:9f:a2:51:fe:
ef:2c:a0:42:9d:b4:f9:54:b9:4a:5c:ec:24:d2:3b:
d3:42:da:22:c2:6a:c4:d4:fb:3d:50:83:0c:20:07:
99:51:fa:2b:16:d9:8b:25:a5:b5:80:96:fa:a5:85:
a0:2e:1e:af:87:51:ca:c4:fd:a7:82:68:16:69:d0:
2a:04:b4:9f:75:fc:10:da:6c:1b:a3:1a:d3:03:57:
64:18:67:f7:12:ee:19:aa:5e:fe:b7:83:41:a7:12:
d4:4f:e3:53:3f:4f:0f:25:bf:22:0a:fc:fa:82:68:
08:d8:77:43:13:64:f8:af:f6:cf:ea:46:25:25:14:
c6:b9:e6:df:e7:d5:53:78:ae:04:33:0f:88:47:e4:
54:3c:c6:db:4a:52:4b:37:5f:47:11:d7:26:58:91:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:73:B4:50:35:09:7A:BD:D4:FC:37:E1:F9:9E:4F:EA:79:52:0F
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:08:31:9e:0b:6f:55:f7:13:4f:ac:50:b1:37:54:c2:5b:4c:
7d:ef:ab:81:e9:8e:cb:f6:5d:c9:e3:f1:22:25:ba:04:24:22:
6b:72:ad:18:dc:3c:46:a5:80:e4:fa:ce:00:1d:8d:cb:45:1d:
8f:1d:7b:d5:87:20:8f:e6:85:97:fd:6d:a6:76:e9:63:e1:0a:
a7:17:a9:20:69:25:a7:d4:0b:10:1a:1e:17:ec:b9:de:d7:6c:
6b:d0:88:13:d7:32:c9:ae:c9:60:a1:06:bf:6a:41:8b:a7:4d:
e7:3c:3c:9c:e2:01:0e:d5:83:df:f3:a9:c6:a3:de:cb:5f:1a:
b0:6f:cb:7c:7b:1a:c1:af:0b:ed:6e:93:7d:0b:db:2d:62:2f:
09:8a:4c:cd:fa:0f:cb:14:05:89:e7:e5:da:71:39:ad:bf:01:
ec:cc:90:4a:4a:d5:82:33:54:e1:93:39:1e:e3:b7:df:31:a9:
35:63:32:08:fc:46:04:2b:ac:71:be:69:8c:0f:3f:61:36:d0:
97:db:de:e5:22:05:3f:e4:18:9b:f3:3c:fd:bb:15:0e:6c:6f:
60:b6:69:4f:ab:51:99:cd:18:59:cd:05:8a:3d:2f:80:5e:25:
b0:dd:51:55:2c:e7:bf:03:02:34:66:ec:2a:64:8f:17:8c:9e:
da:89:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:58 2025 by rpki-client