Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier: 2pXaNXGdDzNW9osTsQrI5NHPpkjYWOQ8oginmNU5Y+o=
Subject key identifier: F6:A5:5B:10:0C:D9:2A:FA:B4:2E:D5:DB:CF:75:28:C4:74:90:79:4B
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number: 9A
Signing time: Fri 31 Jan 2025 05:33:14 +0000
Manifest this update: Fri 31 Jan 2025 05:33:13 +0000
Manifest next update: Fri 07 Feb 2025 05:33:13 +0000
Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: ndwsrl3+xfus5Of0eBa8VdJnPo+9Iqm/cpt9GPuYtLY=)
2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: VFGpYkVQUYPgthphq1FI7HtfcdckVL6PZeOiO03NNQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Validity
Not Before: Jan 31 05:33:13 2025 GMT
Not After : Feb 7 05:33:13 2025 GMT
Subject: CN=679c609a-2917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:2e:d5:e5:b3:e3:5e:cc:54:ce:34:fd:5a:
e6:9b:d4:a6:cf:e3:e9:ee:6f:05:d7:0f:07:09:7b:
9e:ac:94:47:42:c6:38:8b:b7:51:42:f3:92:4e:bc:
92:d1:fa:da:ee:62:57:95:ae:82:99:58:db:5c:2d:
67:65:29:cc:47:58:82:da:e0:2d:ed:81:47:8d:dd:
74:b9:05:ba:82:f1:d2:25:67:4f:4a:93:6e:2f:a2:
6b:71:9e:54:a5:08:cf:13:58:41:2d:27:19:57:54:
0c:bd:ad:ca:d7:3f:15:f8:7f:ff:c2:af:87:e7:06:
9a:e9:b9:c1:6b:cd:e9:7e:2e:64:39:99:1a:ec:70:
45:df:29:bc:90:3b:5e:23:b6:4d:14:51:23:f9:6c:
ba:eb:db:ed:67:7a:de:02:17:bf:43:77:dd:1f:51:
5c:81:52:37:99:c7:92:e4:d6:29:1f:bc:cc:d2:5d:
2a:0f:06:28:95:ec:8f:69:85:eb:b3:74:ec:27:5e:
8b:e9:6f:c9:1e:43:7a:34:8c:f6:75:92:ef:63:61:
6a:bc:d7:62:88:82:40:70:a3:2e:19:74:80:7f:4b:
92:ff:7c:4e:d9:ac:3f:17:43:de:87:65:46:59:fc:
0e:b7:dc:c3:3a:35:c5:d1:42:da:3d:68:e2:34:d9:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:5B:10:0C:D9:2A:FA:B4:2E:D5:DB:CF:75:28:C4:74:90:79:4B
X509v3 Authority Key Identifier:
keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:de:d4:39:39:58:58:f2:37:c3:6f:ba:08:39:fb:4a:16:56:
8c:fa:ee:ac:d1:fb:f7:55:fe:b2:c4:29:67:a1:e0:a6:fe:5d:
d0:a8:c2:83:b4:13:94:b6:ea:8e:6b:b5:e1:63:f7:3c:9e:8d:
8b:20:5d:cb:61:38:f0:53:11:73:bb:cf:52:58:e4:14:bd:a1:
89:0a:8b:35:74:a2:4a:9e:3c:97:54:f4:a7:70:4b:40:78:9d:
92:7d:be:a3:75:a0:cf:32:18:a3:f3:f5:cf:4a:21:9c:03:98:
4e:86:71:0b:c5:ae:4f:57:e6:5f:b1:2e:3c:8a:4c:5b:bb:9d:
c6:8e:ec:46:f1:dd:6c:5d:69:7d:ff:ea:1c:28:19:1f:5a:49:
c5:21:b4:12:11:ce:cc:9d:d3:e6:2c:17:4f:97:cc:b3:88:af:
e7:5b:a9:6d:39:ca:86:dc:1b:ed:c4:8f:56:27:99:54:a5:93:
4e:39:e6:08:6a:c8:7e:b0:2e:21:49:3c:84:9c:1d:96:36:7e:
df:58:a2:81:c1:89:51:06:23:e9:64:0f:6c:bb:33:24:c9:37:
09:af:4a:b0:0f:df:43:82:45:30:6e:d4:ab:6e:a1:d7:3d:a9:
3c:8b:66:48:70:ab:7f:de:dd:cc:c9:cc:f3:a7:21:1f:c8:67:
8a:46:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:53 2025 by rpki-client