Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json)
Hash identifier: NV3B4hvmmsnI/8cackHcrffUbQVNY7rntLkWwAu/0LA=
Subject key identifier: C7:CB:7D:F4:CF:6E:CA:67:46:29:03:A4:9B:64:01:5F:17:DE:4D:1B
Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
Manifest number: F6
Signing time: Fri 31 Jan 2025 04:22:23 +0000
Manifest this update: Fri 31 Jan 2025 04:22:23 +0000
Manifest next update: Fri 07 Feb 2025 04:22:23 +0000
Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: XvX5OvehS4hd+j3ZjKRG5XfT2mBTh60rS4NEWz3xaFE=)
2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Validity
Not Before: Jan 31 04:22:23 2025 GMT
Not After : Feb 7 04:22:23 2025 GMT
Subject: CN=679c4fff-41e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:af:69:af:d0:14:46:98:8b:c2:f8:ec:b3:
08:33:68:f5:f4:3e:e7:4e:83:05:8b:70:94:96:27:
a0:5c:59:b5:ac:0c:c3:d9:e8:9d:23:a2:4c:f5:1c:
68:93:43:f6:d5:b5:4f:8b:fb:47:39:83:53:c9:fc:
97:07:b3:f0:8f:96:a9:fa:8d:e7:21:1f:45:2e:65:
3f:bb:e0:f1:60:47:96:30:f2:c4:67:d0:8b:e4:f1:
dd:e6:b1:f2:cb:61:9d:ef:10:6b:20:5f:32:f1:1e:
a3:d1:2b:61:bb:3b:c3:06:ed:d7:de:4b:ba:54:0b:
3d:83:73:2a:f7:50:80:a0:b8:df:12:38:5b:d6:e1:
81:85:41:23:e7:39:77:0c:e9:8d:6a:6e:e7:ea:7c:
35:38:1f:5e:6f:0b:d5:d5:6a:11:5c:de:e4:e6:0e:
da:c4:b5:f9:97:bd:aa:c2:b7:19:0c:04:73:7b:45:
57:51:0e:0d:cb:47:69:4e:42:e6:a3:c6:cc:2f:ac:
f0:74:c2:33:02:49:e2:d6:6d:0a:0a:f2:3a:ff:d8:
a6:b0:39:00:b6:f1:6e:38:ed:00:75:e6:f7:e0:2d:
b9:29:51:85:29:6d:8f:de:7c:36:07:a1:e3:02:c3:
54:52:fc:8d:92:7d:1f:77:df:92:9b:e4:12:7c:66:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CB:7D:F4:CF:6E:CA:67:46:29:03:A4:9B:64:01:5F:17:DE:4D:1B
X509v3 Authority Key Identifier:
keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:13:c9:ee:1b:7c:6a:32:97:20:02:82:38:01:b8:54:50:
31:8e:ec:dd:27:06:3e:57:ec:23:aa:17:85:70:f8:45:48:b0:
fb:71:b9:b3:c8:0c:83:f0:bd:86:f1:94:77:4e:9e:a9:23:ee:
c0:63:f6:40:cd:49:cd:ba:81:a0:6b:74:01:a1:3d:e7:21:e7:
11:5b:20:d7:f7:67:8e:c1:5b:95:66:cf:81:58:ab:2a:83:7e:
12:ac:b7:96:83:55:b7:de:d1:cf:c3:12:83:21:13:e2:66:59:
7f:62:23:4c:27:77:f9:ea:b4:58:e0:bb:fb:44:f3:01:56:8f:
81:fc:bf:3b:c8:bc:41:73:58:5e:82:b6:c3:5f:f3:fc:d2:21:
ff:1b:56:71:4e:86:63:cc:c2:71:07:16:f4:35:c0:81:b4:d4:
2b:a9:d0:ba:9a:8f:18:37:19:8a:de:b3:9d:29:50:dd:91:66:
8d:eb:7a:d7:ab:74:b7:c2:62:c9:19:f8:4b:df:59:d5:4a:53:
2b:9e:3e:06:d9:0e:1d:98:c3:28:bc:b0:35:7b:dd:4e:2c:ac:
ae:9e:2d:07:5b:c6:d8:bd:ac:ee:34:82:88:6c:36:06:ce:ba:
59:58:51:ce:43:64:a8:25:07:8e:33:de:ff:d4:4b:67:67:c7:
56:23:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:18 2025 by rpki-client