Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json)
Hash identifier: zIu3TDuVwXM8HA/YU8S9Kk/Xjz9vE2LpDjpl0r9sdvg=
Subject key identifier: CB:9C:00:0B:AD:16:93:51:06:5C:08:51:0D:16:09:5E:B6:43:11:F0
Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 02:45:34 +0000
Manifest this update: Fri 31 Jan 2025 02:45:33 +0000
Manifest next update: Fri 07 Feb 2025 02:45:33 +0000
Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: EFYGkMdNDgMZilbRovvNlnFPXN7KIYC/BAupnXhYAyE=)
2: CA181F42791211ED9D926781C4F9AE02.roa (hash: zvSljqq8u0aCswP8WadYkts+Ql8DETe3wBjOyVuGUoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Validity
Not Before: Jan 31 02:45:33 2025 GMT
Not After : Feb 7 02:45:33 2025 GMT
Subject: CN=679c394d-9905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:c6:50:a3:0a:05:ba:c3:b1:6c:02:ef:f1:
b1:a5:28:b1:c6:15:d7:c2:57:67:54:67:c6:c7:00:
6b:ec:6c:78:4b:8b:39:08:f2:50:42:d0:cb:cb:48:
18:46:f8:c4:77:aa:c0:61:f2:6d:96:af:f3:f1:6f:
08:14:f8:71:ce:a0:2a:0c:c1:ad:52:c2:9b:89:67:
57:e1:61:61:a7:75:f2:1f:87:2a:37:48:f1:7f:6a:
69:c4:e4:9f:03:42:53:7a:7c:3c:ca:7a:dc:d5:03:
90:12:c6:90:c3:c0:80:b5:82:d4:fd:62:e0:a2:b9:
14:3a:b0:52:09:c2:da:2f:98:c3:cd:a4:03:12:2a:
c9:b6:7e:19:4e:13:18:bd:5e:a8:ff:81:6d:6c:b4:
7f:0f:a4:74:9a:7d:bc:99:8b:04:e1:56:55:1e:a9:
e0:d2:8a:cf:bd:5d:c4:5b:4d:82:3c:86:ad:8e:37:
b8:b3:58:03:41:da:f9:5c:60:aa:39:51:fd:96:2a:
84:7f:09:bc:91:de:8b:a6:01:c9:ab:c2:e9:23:a0:
59:b5:3a:6d:13:41:8b:9f:6d:a2:32:7c:24:41:96:
59:4d:08:d6:7a:13:54:ca:ee:25:c8:fd:5c:a6:8e:
22:cc:c7:ff:2d:aa:9d:07:13:59:2d:41:8f:09:79:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9C:00:0B:AD:16:93:51:06:5C:08:51:0D:16:09:5E:B6:43:11:F0
X509v3 Authority Key Identifier:
keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0d:06:20:27:1c:3a:38:70:a4:5d:ac:3f:f3:13:0c:cb:44:
ec:9d:ad:15:22:51:56:91:f8:65:e3:bb:3a:70:1d:1f:67:4b:
1d:ae:87:79:ed:6d:4b:9f:82:e7:80:b4:3a:cc:95:7d:62:35:
ec:3d:07:60:71:63:9a:03:8e:12:62:bb:31:1e:53:25:e0:60:
f0:bc:4b:01:33:41:f6:73:98:89:de:49:10:92:19:b0:3e:90:
b4:79:69:e7:ed:69:c7:8c:37:6e:25:7d:af:cf:09:7b:a8:c4:
eb:26:22:2b:c1:7c:1e:4f:5b:62:82:83:30:1f:a1:8e:14:64:
ad:98:ad:dd:f7:c3:5b:39:0a:35:b0:5c:a7:1f:fd:c0:9e:bb:
43:42:bd:ad:5d:e6:09:d2:df:b0:f3:f3:25:1f:2c:0d:35:d9:
9e:6a:45:45:7d:e9:7a:6b:df:f1:fa:71:f2:9a:25:98:da:3a:
17:d4:59:ea:41:bd:30:97:1c:1d:fe:92:a8:5a:15:29:71:80:
32:40:bb:bd:11:bf:d7:65:b6:30:e3:d8:67:6d:36:d4:04:43:
69:7a:0a:48:05:5a:f1:05:9a:39:6f:fa:1d:a6:89:43:10:65:
a9:f5:0d:11:5f:e7:d1:ff:90:5c:6b:0a:5a:0a:fc:f5:73:6e:
2f:ea:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:44 2025 by rpki-client