Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json)
Hash identifier: esvLM0ok+oCKmp3/mmOTkPKMQD0tLQ4K0fMSeb3830U=
Subject key identifier: D9:20:BE:C4:2D:EE:13:B8:10:D3:83:DE:81:0B:68:19:3D:29:5F:2E
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial: 0B07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
Manifest number: 0B00
Signing time: Thu 30 Jan 2025 19:19:22 +0000
Manifest this update: Thu 30 Jan 2025 19:19:22 +0000
Manifest next update: Thu 06 Feb 2025 19:19:22 +0000
Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: BZUD3qc3YuT41cifZ09nnf7UrkJ2YU0IiM2JlHavkKQ=)
2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: paapjxPleKLebHDMRnmQwPcu9J7d7Sr7UlJFEzedjKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2823 (0xb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Validity
Not Before: Jan 30 19:19:22 2025 GMT
Not After : Feb 6 19:19:22 2025 GMT
Subject: CN=679bd0ba-ac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:c5:2d:ff:2e:6b:e8:c9:3a:ba:a4:79:5a:
cc:65:c5:b8:6a:60:49:ff:7a:eb:3f:41:2e:7a:1d:
66:df:c2:0e:f2:4a:1b:ff:09:e6:f2:38:98:e8:58:
e5:5c:5c:eb:d2:e8:5c:db:49:4d:cf:b5:7a:57:cf:
3a:70:c1:5e:ef:1d:97:28:c3:9c:01:00:26:5e:90:
b5:3d:13:35:d4:a6:c9:75:3a:3b:2a:6e:2a:38:79:
f6:20:b2:93:d2:fe:1d:ae:aa:5e:b6:00:d6:3e:2f:
b4:40:18:0d:85:7e:3e:18:0e:10:44:3a:52:a1:1a:
99:83:d0:b5:bc:c1:e0:d4:0f:b4:29:ec:38:52:aa:
86:71:38:22:85:5d:43:2d:92:52:e1:2d:5a:ed:45:
a8:4b:37:2b:83:db:cd:3d:56:fd:ee:a5:e0:a4:f8:
e7:0b:63:c1:b1:ad:e2:b1:50:3d:57:db:78:7c:cf:
42:72:6f:b1:3f:08:fd:41:5e:ee:3c:4b:3a:58:27:
0e:bc:c4:3d:a0:42:18:99:5b:40:e2:da:b4:39:92:
21:45:c5:4e:11:ab:29:d9:73:d6:a4:1f:db:32:1c:
c8:d4:c3:c5:c2:7f:f3:df:69:c9:b4:9f:ef:af:33:
49:e7:8b:20:89:7a:40:1e:83:8a:cb:56:7f:7d:76:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:BE:C4:2D:EE:13:B8:10:D3:83:DE:81:0B:68:19:3D:29:5F:2E
X509v3 Authority Key Identifier:
keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:2d:16:09:cd:be:2b:89:ba:f3:0a:7a:54:c7:cb:95:ce:0b:
1f:98:b3:5d:6a:40:d8:ec:6f:43:57:bb:7a:ff:d0:95:33:a7:
10:6e:7a:6d:e6:97:1b:68:f2:5c:f1:27:85:69:c1:53:a0:b7:
48:4a:38:6a:8d:25:e1:02:59:ce:53:fc:36:23:8a:7f:7c:93:
73:07:fa:3c:6f:30:18:16:9e:d5:20:61:62:4d:7d:16:de:b8:
69:36:4f:be:cf:f9:92:44:e2:81:d6:53:0c:a7:5d:8f:ca:88:
09:22:b5:2e:d9:e8:6b:1a:da:aa:95:1c:3d:02:1e:a9:83:7c:
25:da:f8:40:95:7f:22:ef:f6:91:8d:cd:91:92:54:00:c4:a9:
48:58:3c:e9:3d:6f:ae:e8:45:69:d4:a9:29:bf:be:ed:af:05:
ec:b2:24:c8:b1:a7:10:af:27:35:3a:69:a9:7c:65:12:a8:aa:
e6:23:4e:94:2b:fe:47:30:06:5c:90:d3:e9:18:a8:7f:a5:6c:
72:2f:ff:59:ee:28:9f:64:4e:59:27:11:73:19:ff:78:91:c3:
20:66:d0:b9:b2:a9:fb:82:7f:7c:45:b7:e2:69:87:93:c4:72:
15:97:ba:05:be:8b:3e:27:3e:23:0b:77:28:8e:7b:9e:25:f7:
76:47:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:01 2025 by rpki-client