Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier: j96M6nQ6yH9xhnkpbVVHYp0KnpD84ePr2k5nmBRWnes=
Subject key identifier: C5:AC:5B:AF:44:E0:71:50:04:61:98:2F:AB:D1:B8:68:BD:D7:3E:7E
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial: 0438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number: 0430
Signing time: Fri 31 Jan 2025 00:22:46 +0000
Manifest this update: Fri 31 Jan 2025 00:22:45 +0000
Manifest next update: Fri 07 Feb 2025 00:22:45 +0000
Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: VZQJU7UFBoS3vbxWD8AvcGVdFrFLfbhPJEjmrksaoP4=)
2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Validity
Not Before: Jan 31 00:22:45 2025 GMT
Not After : Feb 7 00:22:45 2025 GMT
Subject: CN=679c17d5-9b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:b1:53:7b:66:a7:4e:49:08:91:22:be:46:
3c:e0:f9:a8:bf:30:2f:4d:03:ac:c3:62:9d:fa:d1:
1f:f6:86:6b:45:e6:55:83:22:ea:11:4e:ab:89:72:
6d:2f:bc:04:1f:5c:12:8a:15:a2:88:33:91:68:16:
87:4a:1c:7a:bf:9b:e5:03:73:84:f6:ed:d4:0e:57:
ca:58:90:3e:bd:82:be:d9:b9:c9:20:66:2d:f3:f5:
ed:96:22:a6:70:89:fd:17:31:03:98:68:35:78:ac:
d1:d6:32:6a:05:10:e6:9e:e4:fe:f2:c9:47:6e:52:
d4:d2:43:70:9a:f3:8e:48:2f:2b:0c:e3:05:70:92:
98:e1:49:61:64:c5:73:80:28:9e:76:1c:ad:95:e8:
54:fc:15:5f:2f:59:f4:09:57:f0:02:c3:87:a7:f7:
9c:16:ce:af:47:d5:45:3a:c7:07:52:a7:4f:83:a0:
75:3f:4c:3e:e9:7f:53:e7:df:3e:ad:a4:c8:a8:f5:
8e:fc:df:39:0a:be:62:89:ca:0e:9e:5c:15:ed:d3:
9d:21:0f:c6:35:5e:c1:bc:63:ce:67:ff:72:53:5b:
6d:5b:2c:59:2a:e7:cc:23:e1:6f:15:3e:9f:4f:05:
33:8a:c5:05:a3:54:52:36:40:3b:b3:8a:a7:13:2c:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:5B:AF:44:E0:71:50:04:61:98:2F:AB:D1:B8:68:BD:D7:3E:7E
X509v3 Authority Key Identifier:
keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:95:a6:96:f0:f1:6d:99:ef:8b:52:17:3e:30:8f:94:d6:
e9:11:9f:e0:f7:90:80:fe:3b:34:38:d9:81:88:11:4c:bf:14:
36:59:ce:c5:e8:f0:12:7c:5d:64:92:96:2f:31:38:68:a6:8b:
82:b5:02:98:9e:aa:cd:48:ad:34:bf:a0:12:7d:9a:d1:0f:60:
2d:66:ed:b9:e7:f9:4b:f7:57:aa:d3:3b:e3:0f:00:e2:3e:16:
36:a3:23:77:d9:1e:b5:ab:a0:49:e0:66:4b:ea:61:5e:bb:a6:
e5:07:51:71:80:ab:a4:f9:b0:7b:f2:0a:69:b0:8f:d1:f5:55:
0e:dc:f4:54:79:eb:37:37:c8:1e:17:62:eb:4c:08:08:ac:4a:
10:c5:9e:34:9a:49:86:2f:3d:71:b0:23:5f:d4:0c:5f:51:e8:
2f:b5:37:b3:7b:a6:df:39:42:63:a4:81:d9:6a:40:b1:3f:39:
4b:dc:3c:5e:b3:f4:be:58:1e:cf:db:f6:ef:82:ac:98:5f:d5:
68:a9:bd:59:14:a6:0a:ef:05:5a:87:40:f5:af:2d:dd:88:02:
4d:fb:91:59:80:ad:ce:19:6b:be:8c:ca:9b:15:be:9c:2f:a5:
2b:27:ab:26:1b:8d:39:4c:72:eb:d7:c0:70:f5:3a:ca:de:95:
99:2f:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:42 2025 by rpki-client