Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json)
Hash identifier: kMJz4kGPfdyS30R2/YALwBM4HcCtwj8Nuw06E2QkvW4=
Subject key identifier: EC:EF:2D:0D:D6:FF:95:6E:A2:D7:0C:0B:B7:E8:E6:E6:59:3E:34:9A
Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 03:52:01 +0000
Manifest this update: Fri 31 Jan 2025 03:52:01 +0000
Manifest next update: Fri 07 Feb 2025 03:52:00 +0000
Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: 9yV8Nqcieb5hbBNXHKrOICZ9pUvadWRmn+vbE+2jW1Y=)
2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Validity
Not Before: Jan 31 03:52:01 2025 GMT
Not After : Feb 7 03:52:00 2025 GMT
Subject: CN=679c48e1-74eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:aa:d0:f1:84:1a:0b:21:ab:57:ec:7e:f1:
2c:af:8a:cc:9a:63:af:b0:c3:17:96:12:74:9e:93:
b7:67:96:2f:60:ea:a9:1d:bf:cb:c3:99:53:42:4b:
63:a5:33:5e:d8:e3:2d:a3:a7:47:d2:fc:10:2a:26:
8d:72:35:5f:f1:4e:f3:b1:03:d5:52:27:e0:68:fd:
be:a2:e3:ef:8d:a4:54:6c:78:19:1e:94:4d:bd:4b:
ab:96:6f:73:b6:70:25:45:a7:8f:95:b6:d3:70:9e:
48:35:00:d8:e4:07:72:fe:6e:9e:f2:d2:9e:5e:e9:
f9:10:65:d3:df:d6:ad:02:54:c5:2b:05:5e:1e:0b:
40:4c:32:1e:8a:11:09:0c:23:c4:85:09:34:05:ad:
c7:a2:16:9f:3b:85:87:b9:6e:b6:9c:ad:60:01:99:
19:15:97:32:15:14:6b:ea:14:d8:a2:e0:86:2c:2a:
ae:25:f7:70:9a:c8:7f:e6:af:a5:92:a6:fa:de:46:
46:91:e2:4c:00:35:c1:25:4a:f7:e6:86:da:c7:15:
3a:d5:1b:90:72:48:54:30:15:f6:19:e1:6e:b3:3b:
3f:ca:2b:13:4b:60:40:37:f7:a1:c3:ef:e3:91:e9:
d9:5e:aa:1a:fe:ee:88:28:f0:43:cb:f5:46:b7:8a:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:2D:0D:D6:FF:95:6E:A2:D7:0C:0B:B7:E8:E6:E6:59:3E:34:9A
X509v3 Authority Key Identifier:
keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:ba:3a:0c:32:ad:92:90:4b:4c:45:c5:40:b4:45:50:b0:
ca:d8:06:ae:4a:2e:63:c6:4c:84:6a:6b:73:06:48:c1:4d:1c:
4c:7d:3b:a2:7a:7c:8a:33:8a:33:2f:4d:c4:9f:0b:7e:bd:44:
34:00:1f:ce:41:0b:4b:1e:6c:f9:32:f7:91:cd:54:6b:51:81:
2e:6c:0c:d9:eb:81:72:07:5e:32:ba:f0:cb:60:3d:b9:f5:af:
6f:39:66:a1:f2:1f:f8:0b:7f:c9:c2:38:26:d5:8e:9f:47:26:
e9:71:16:da:b9:2e:08:9e:ea:83:2a:eb:24:16:9a:38:02:77:
83:4f:cd:2c:23:74:16:96:d9:07:b5:94:4e:58:a4:97:a0:1c:
2c:7e:5a:fe:bf:36:2e:fd:bf:66:c6:09:c4:fd:a0:12:d4:1b:
05:96:27:13:38:37:cb:27:8b:e2:8f:88:c5:c8:bd:2b:0f:90:
d0:b2:40:30:f6:9d:e8:54:50:79:06:10:b9:7a:67:bc:26:2f:
15:85:1a:a8:11:59:31:ac:4e:55:04:73:82:11:46:6f:1a:bc:
53:5a:c8:b1:48:f7:92:55:74:4f:27:1f:11:dd:3b:11:23:e5:
a3:ad:52:14:7e:7a:5e:81:4c:63:43:ab:9d:36:b5:6d:7f:7b:
6c:53:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:00 2025 by rpki-client