Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier: JWWc5oXH08UeuObw0ZIngz6nYAF5z6feAPKslVdvlNY=
Subject key identifier: D1:DB:6F:1D:BF:EB:6F:52:AC:86:3F:9D:32:08:93:1B:BA:14:A4:50
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial: 0DB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number: 0D95
Signing time: Fri 31 Jan 2025 17:55:34 +0000
Manifest this update: Fri 31 Jan 2025 17:55:34 +0000
Manifest next update: Fri 07 Feb 2025 17:55:34 +0000
Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: J12+b6b1IVjIvierLRH3/H8zzcXphFvk4Ai2w6eL4cA=)
2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=)
3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=)
4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=)
5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Validity
Not Before: Jan 31 17:55:34 2025 GMT
Not After : Feb 7 17:55:34 2025 GMT
Subject: CN=679d0e96-f23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:12:cc:5f:87:58:90:e2:60:7c:2b:b9:a4:
05:88:e7:9a:61:a9:3e:44:44:99:6b:5e:78:be:9e:
aa:58:94:1b:a2:cc:38:4d:f1:c6:38:97:55:32:03:
28:90:96:fb:04:36:a1:99:ae:52:69:eb:03:84:74:
22:0d:48:a4:b4:12:cf:42:f8:fe:3b:56:d8:8e:54:
98:c5:b9:ac:f7:a0:e0:d6:cf:d5:16:0b:fe:c2:c6:
e4:93:f1:31:fd:a3:ac:a4:31:be:c9:3f:cb:a3:48:
56:3b:7f:36:4b:75:b7:28:89:2c:cb:39:c2:08:b3:
5a:3f:43:05:43:86:c8:2f:61:6d:a2:22:db:f8:b2:
c2:b6:0b:4b:a5:2c:ed:ad:c1:93:a4:f3:2f:84:6b:
c8:1b:c5:9f:14:b4:a4:79:b5:61:2d:6e:c0:f6:e4:
46:54:8f:68:65:5e:b6:0f:5a:eb:cb:5f:ff:3e:45:
0f:17:4d:3c:ea:98:24:24:be:56:a3:b4:2b:13:e0:
9a:11:8a:e2:a1:cd:27:97:2f:2b:88:e3:e1:a9:5f:
cf:93:80:53:8f:28:dd:ee:a0:0b:85:8e:91:ed:3b:
9f:52:7b:0d:a1:0a:ef:4b:99:3e:a3:cf:ed:8f:b0:
7b:c4:36:ce:db:37:3e:18:8f:4b:0e:df:b6:73:bd:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:6F:1D:BF:EB:6F:52:AC:86:3F:9D:32:08:93:1B:BA:14:A4:50
X509v3 Authority Key Identifier:
keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:a9:e7:0a:ac:86:8d:27:e2:9f:4d:d5:9e:15:5d:5a:db:
90:a2:82:53:e7:11:ff:df:92:c9:f5:49:4e:9a:d4:ff:da:6d:
69:5f:e1:d2:bb:06:49:2b:31:31:d6:e8:87:f2:21:aa:38:26:
9c:48:d1:f9:fe:bd:55:5d:f3:a4:e9:27:1c:31:76:90:89:40:
2c:fc:ae:e5:af:d3:3e:7c:2e:4d:b3:03:c2:f8:c7:b1:a9:ad:
e6:52:8c:08:09:49:2b:f4:34:12:a9:ce:18:07:52:24:53:91:
53:46:8f:17:2d:60:92:6a:10:86:b5:43:ba:19:9d:e5:03:ab:
78:fe:06:78:14:ca:89:cd:b4:09:45:47:6a:21:00:9b:b1:95:
c2:f0:dd:03:32:04:e0:7d:90:d3:af:c7:5c:e7:6f:c5:ff:27:
46:d6:28:8b:5a:08:62:2e:57:09:f3:3d:dc:e9:a4:e3:00:86:
be:11:d7:4e:62:ba:5e:48:d1:c9:dc:09:e6:8b:41:0e:1b:c2:
06:19:cc:9d:9b:c9:fd:a3:4f:20:7a:49:bb:7e:4d:95:f4:4b:
bd:f0:aa:da:b1:4f:bc:82:4a:10:b8:34:0c:3f:fa:16:04:a0:
ad:b9:af:ed:99:b4:37:a4:53:f1:ca:7c:1a:69:4a:64:2c:78:
18:db:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:38 2025 by rpki-client