Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json)
Hash identifier: MILmxwIKpiIzwNJ3SimQgokT47cVzwTAeBFgx8Q4zdw=
Subject key identifier: 6E:00:D4:36:CA:1D:B8:34:CB:21:4D:87:CF:B5:77:A5:F2:EB:BE:AE
Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
Manifest number: 88
Signing time: Fri 31 Jan 2025 05:37:54 +0000
Manifest this update: Fri 31 Jan 2025 05:37:54 +0000
Manifest next update: Fri 07 Feb 2025 05:37:54 +0000
Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: cDxYsChEZ5mUDoXCHRjtNngVVUF7C/h9DniJdz1WY8w=)
2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=)
3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Validity
Not Before: Jan 31 05:37:54 2025 GMT
Not After : Feb 7 05:37:54 2025 GMT
Subject: CN=679c61b2-ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:43:a8:a8:fb:c7:59:6f:b5:03:23:bf:81:
19:7c:0a:50:9c:39:fd:fc:96:1a:12:09:e6:8a:9b:
67:c6:ea:f5:ca:f5:1c:8b:bc:3e:4d:c6:f4:24:fa:
12:3d:0b:f8:9b:38:4b:cf:32:44:b3:15:a2:b0:79:
c7:7a:35:98:74:84:cb:e9:32:56:ba:9b:f2:53:06:
40:0f:62:b6:8b:62:a9:78:9e:f3:e0:41:b2:5f:56:
49:40:56:60:26:c1:16:14:f2:a4:23:30:74:b1:f2:
fb:79:6a:59:eb:fb:f4:50:45:1f:cc:30:e6:f5:be:
5f:0b:83:65:8e:84:e3:a8:f7:b6:38:ac:21:7e:ad:
a7:37:2c:b6:90:ff:d2:0e:88:78:8f:51:00:29:e0:
dd:b1:07:18:c9:3a:d7:61:32:c2:e5:72:0a:4f:cd:
54:4a:ed:9e:fd:b9:e3:cd:c0:38:fc:14:16:f6:67:
50:86:d5:49:37:12:e3:de:53:86:04:44:12:84:2e:
eb:bf:05:a6:fa:98:7b:39:ee:0f:2e:64:95:7a:a4:
8a:ba:d3:b9:32:bb:66:fd:d8:85:ee:8e:d0:c1:6f:
16:04:e2:e0:66:f2:d0:b1:a2:78:76:f7:e6:21:ae:
26:8b:c4:b5:d0:8c:9a:0e:43:21:70:28:26:7b:9e:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:D4:36:CA:1D:B8:34:CB:21:4D:87:CF:B5:77:A5:F2:EB:BE:AE
X509v3 Authority Key Identifier:
keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:09:4d:24:33:9f:3a:80:5d:4b:1e:b5:6f:02:67:c6:f2:
dd:f4:93:cf:c0:96:63:c0:67:5d:58:e8:11:0d:fa:53:62:4d:
40:8e:e4:1d:98:68:92:df:c4:7f:8d:86:cc:d7:27:77:84:49:
0a:5e:c3:c5:12:a1:e6:36:19:75:09:ad:1f:b7:c3:6b:f4:e9:
14:d0:0a:86:f5:55:55:2a:74:5a:42:ec:84:1a:c4:fd:fd:f3:
ca:a4:eb:70:af:31:70:71:73:9b:24:af:04:cd:c5:ae:76:e8:
8a:6a:af:cd:c5:62:d4:43:62:ca:80:2b:7b:cf:6f:e4:b0:56:
62:84:77:6b:8a:bd:04:f5:76:a2:ba:10:3e:a3:a4:48:69:d4:
3d:05:8a:85:4d:0c:55:9e:14:26:89:e6:8e:c2:4a:08:87:90:
73:7c:28:d1:79:49:6d:a2:fd:0f:5c:77:3a:94:eb:d3:7c:c3:
e8:26:6e:8e:d9:06:41:07:84:1e:9f:f5:7c:e1:80:bb:17:e3:
a4:23:72:9a:76:55:9d:f5:f9:e4:1c:6f:c9:4a:b8:40:5b:28:
83:ac:c8:eb:63:74:90:70:e5:e9:d6:35:66:49:d5:d4:5a:9c:
c9:69:e5:59:ae:9f:b8:9c:a2:9a:6e:18:ec:e9:34:1e:f2:10:
31:a0:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:28 2025 by rpki-client