Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json)
Hash identifier: mbIaWYjVzy45YCloesNPaSed9EPnml/s8LCJaD9n0YY=
Subject key identifier: 2D:9E:0A:D7:D9:B0:73:D4:4A:95:3B:B0:E9:B3:09:56:70:17:F5:CD
Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78
Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978
Certificate serial: 2620
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
Manifest number: 260E
Signing time: Fri 31 Jan 2025 15:43:06 +0000
Manifest this update: Fri 31 Jan 2025 15:43:06 +0000
Manifest next update: Fri 07 Feb 2025 15:43:06 +0000
Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: UXMko/4rJfIDGs4Hk5NC8hP2jmEmVAr+Qd1rVn0fu1g=)
2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9/RiaD7uB0sOA1UktuQmdvYmR8W/ohMuly3N0jCGO/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9760 (0x2620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978
Validity
Not Before: Jan 31 15:43:06 2025 GMT
Not After : Feb 7 15:43:06 2025 GMT
Subject: CN=679cef8a-2c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:ed:7d:a8:37:d1:fc:be:0a:ca:76:cc:75:
7a:67:22:77:74:a3:2d:bc:a2:53:07:f2:35:b6:54:
0c:88:87:ec:0b:84:e9:12:1b:9f:c9:74:4c:13:94:
e1:15:4c:f0:80:ea:f2:3f:cf:66:ac:f9:d3:25:67:
51:5c:87:d5:f4:e3:a2:cd:04:71:71:88:f9:f2:d7:
49:78:a6:45:bd:b8:d4:62:24:1c:0e:81:85:56:f2:
d3:ed:27:89:14:6f:8c:89:0f:82:57:f6:66:7b:15:
05:d9:42:8e:e5:2d:13:d4:26:11:a0:ea:47:94:42:
f5:e0:bf:96:5e:e7:51:fb:99:04:21:a1:81:c8:19:
90:68:d7:e0:11:aa:dd:11:f4:e7:05:f7:f2:92:f3:
65:42:12:fa:e9:bf:a5:3a:aa:66:d4:df:54:d1:15:
65:28:4b:28:a8:e7:dd:4c:08:d0:7b:46:70:a8:16:
23:d3:18:ac:25:be:ee:73:b6:ec:cd:0c:a9:d3:a5:
cf:a5:bb:cc:07:4e:2b:1f:6a:fc:31:eb:fc:a0:e8:
4f:85:49:42:90:35:99:aa:17:c6:64:6a:06:65:43:
90:6a:d2:fb:a3:f9:21:99:20:a3:a4:5f:ad:60:73:
03:a7:ab:13:13:30:7e:26:ec:92:7e:ba:3a:1e:83:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9E:0A:D7:D9:B0:73:D4:4A:95:3B:B0:E9:B3:09:56:70:17:F5:CD
X509v3 Authority Key Identifier:
keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f4:51:57:00:dd:d0:9e:89:14:b4:29:e3:db:6b:f5:e1:c4:
3d:79:62:55:fc:f1:e9:76:a1:6f:ab:f8:a9:c8:4e:6f:10:03:
54:49:44:84:ce:b0:4d:f6:13:e8:6e:e7:61:ad:dd:69:9f:f9:
17:9b:a6:88:e7:a7:46:5a:29:4f:d7:84:de:68:3d:2a:80:fb:
4f:f2:59:93:fc:2a:22:21:b7:24:95:9a:f0:b1:ae:cf:67:bd:
fa:5e:34:17:d5:20:b0:44:05:ef:2d:37:de:2e:09:70:c6:03:
95:d8:2c:71:cd:d4:85:8c:c9:52:17:8e:a8:79:3a:60:f6:3d:
87:e0:5b:26:f2:4b:8a:66:8b:ae:62:91:ee:fa:28:c2:87:af:
45:b0:5c:2f:a9:9a:c9:2c:d2:41:3a:49:da:8b:9f:26:dc:62:
94:01:d1:96:4c:89:db:ba:59:68:45:d0:e1:ab:02:79:f5:94:
93:72:0c:08:74:4f:24:85:b6:b9:12:14:66:0d:b6:5c:e0:f6:
ce:44:f3:3e:0d:63:78:38:33:4f:c4:51:e4:7f:f3:fc:c3:5b:
63:8b:60:b1:3d:d8:92:db:6b:fc:c6:dc:c8:89:0e:67:3d:73:
da:6b:18:3c:9a:25:df:46:f2:48:4a:77:41:fb:1d:49:fa:c1:
a4:0b:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:30 2025 by rpki-client