Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier: hmhW0+ql2ibRoeYk/lAg8cIJ9Nm/Gh42RxanXexChHU=
Subject key identifier: B9:28:39:7D:83:99:6D:66:E3:F7:13:AC:47:74:53:75:F2:E0:CD:79
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 02:32:25 +0000
Manifest this update: Fri 31 Jan 2025 02:32:24 +0000
Manifest next update: Fri 07 Feb 2025 02:32:24 +0000
Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: fDsPG2gZOIsVY5W1aozttxQ2FW766pMtDyO6NsZqSXw=)
2: F7D11060619811ED9437B344C4F9AE02.roa (hash: tQVarPDsnubq8g+aCXyJraP6hX3o+kW42rbkeVgdzkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Validity
Not Before: Jan 31 02:32:24 2025 GMT
Not After : Feb 7 02:32:24 2025 GMT
Subject: CN=679c3639-9a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:73:c7:6c:71:a5:7f:74:1d:dc:e8:76:c4:
b7:e7:c5:55:fb:7f:04:dd:79:a7:c3:01:aa:8d:bd:
3a:82:76:61:08:80:1f:e1:f8:6c:0b:7e:9c:e7:b2:
d0:c1:8c:3b:83:3f:bc:4c:6c:b5:f5:aa:d8:d4:d4:
71:18:95:0d:1c:64:93:61:ed:bc:73:b7:48:9e:c0:
47:7c:fc:61:f6:b4:72:75:d5:3c:3e:9e:ed:68:6e:
bf:e5:ab:b9:35:2d:3a:5b:7d:78:c4:d3:dc:4c:0e:
4e:7a:f5:34:47:f5:b9:75:70:cb:10:97:2c:41:fa:
08:51:8d:09:ad:30:4f:ec:8a:70:cd:05:00:bc:cd:
df:42:db:22:cc:89:0b:02:8f:77:a7:90:60:d1:44:
43:4f:6b:66:06:c6:df:ae:f8:1c:cc:8a:72:e1:e4:
fc:05:f2:e5:94:3e:d9:be:33:49:91:f3:de:2c:58:
bf:f2:b9:92:ae:ff:59:2c:b0:25:d6:d4:d0:78:ab:
60:0b:b9:66:48:30:21:2e:1f:2a:cd:0a:6b:37:88:
5c:cf:50:8b:ed:97:89:45:b7:e3:8d:e4:7a:03:6d:
d3:fd:58:cc:59:3b:44:33:e6:48:50:23:14:c8:d1:
08:e4:38:17:84:9f:07:ee:85:ee:ae:3f:2a:72:0b:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:39:7D:83:99:6D:66:E3:F7:13:AC:47:74:53:75:F2:E0:CD:79
X509v3 Authority Key Identifier:
keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:10:11:83:0d:ea:9c:52:f5:55:a7:8c:ea:0e:71:9d:c9:35:
95:dd:7e:43:f2:cb:6d:0d:84:ef:67:10:f9:db:e1:e6:30:44:
c5:73:8a:b2:0a:e7:17:8c:12:8c:16:8b:86:95:d1:97:22:25:
41:bb:0f:78:ed:30:d1:b8:ec:af:23:2a:2c:aa:4a:40:a0:ef:
4b:75:b1:26:2d:d7:e2:f4:75:ba:79:ea:64:f3:e4:a6:e6:db:
9e:74:b7:6d:99:81:fe:63:64:a3:50:5e:ee:86:0e:53:f1:9a:
0f:cf:1a:47:0b:59:bf:70:f7:76:b7:09:5a:e7:1c:9f:03:50:
70:5a:57:97:9b:6e:05:8e:f3:3f:db:df:d6:df:ea:25:93:a6:
ad:c9:02:b6:5d:47:64:bd:e1:8b:ad:10:68:dd:5b:db:d0:f3:
39:81:4c:c6:de:c5:7c:cc:30:a8:4c:1d:8d:c5:2a:0c:10:53:
bf:e7:65:83:64:b5:69:2c:2a:6e:ab:4b:6a:55:e5:fe:58:af:
84:db:3c:3e:a2:d9:01:37:93:f8:72:e6:6e:2e:04:90:9e:ec:
cd:bc:aa:9d:ea:e3:3e:15:be:1e:52:c0:ce:fc:93:e5:b8:b2:
7a:1a:88:f9:3a:c3:c1:28:3b:70:f9:c6:12:49:49:e6:29:91:
d3:27:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:18 2025 by rpki-client