Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json)
Hash identifier: nyLXCg+kvPwUY4KrsbDlnAsCMe05OpUBQj7B/l97i44=
Subject key identifier: FC:04:38:9B:58:9B:42:D6:77:64:DE:43:F8:30:4E:20:C1:AF:3E:20
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial: 098C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
Manifest number: 0984
Signing time: Thu 30 Jan 2025 20:11:21 +0000
Manifest this update: Thu 30 Jan 2025 20:11:20 +0000
Manifest next update: Thu 06 Feb 2025 20:11:20 +0000
Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: NQGU2pitgH/jZ0sutBt5NaPCl6qCDB8zsuB5bM/BQKg=)
2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: 8aW0SKFCuzpKiRgqZbEn9MAhCjT3ayoMsYjGk6vj7OA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Validity
Not Before: Jan 30 20:11:20 2025 GMT
Not After : Feb 6 20:11:20 2025 GMT
Subject: CN=679bdce9-0879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:b4:a3:cf:62:2b:b0:7a:ce:ff:16:17:df:
7d:c6:ff:5f:30:00:4b:56:0e:6d:73:dd:f7:fa:9d:
6d:43:ae:8d:4c:2b:61:6b:33:fb:eb:53:d4:7b:ef:
4c:c5:0e:37:65:8d:3e:b5:86:eb:34:51:04:f9:95:
63:c7:8a:8c:a0:e6:ad:ab:ce:d0:7e:57:18:2c:d0:
84:e1:ac:47:19:c3:cb:71:51:01:17:2a:a6:c7:19:
7f:9b:ce:40:34:e7:70:fd:2b:04:bf:65:c9:c1:39:
c6:7f:94:34:f3:3d:61:a7:5a:eb:9b:3d:89:75:9b:
32:c7:20:32:28:78:92:12:3a:60:f8:4e:9d:14:1f:
6f:bc:a1:d8:a2:dd:e8:c9:f7:ba:04:fa:18:6f:b8:
40:49:6f:93:3f:e8:01:a1:25:4b:b0:23:cc:e9:e7:
10:a3:02:6d:b0:12:87:ef:39:d0:c5:8c:76:e0:da:
a7:39:2e:68:b2:33:8b:c7:15:c7:e8:80:f1:36:e6:
a4:79:54:58:1b:f4:1f:92:a8:87:81:cb:c9:05:bb:
b5:dc:06:c0:89:ae:38:82:34:16:19:a5:d5:5e:26:
4f:6f:a4:41:85:5a:d7:a1:6b:0a:9d:b0:ae:c9:8e:
98:f2:8f:75:43:f0:a9:27:3e:f2:8f:65:73:c7:4f:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:38:9B:58:9B:42:D6:77:64:DE:43:F8:30:4E:20:C1:AF:3E:20
X509v3 Authority Key Identifier:
keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8f:08:93:24:0f:36:1c:7f:0e:6c:b3:b3:57:b6:e4:57:d5:
f9:2a:e3:f7:07:0b:6f:94:e3:9d:a0:3b:db:3e:c3:c8:18:06:
70:33:f7:3a:17:dc:a3:e4:07:4c:70:df:4b:ef:d1:3a:43:bc:
e8:48:f6:fd:ba:82:78:d8:46:c0:4c:b2:46:6b:7e:b7:f7:d0:
ce:ba:d1:5d:54:44:9a:34:28:cd:e9:7d:b0:0f:05:b9:8a:35:
f1:76:d0:c4:8a:95:67:91:a0:f5:db:9a:8d:f1:fe:b9:eb:28:
e5:69:aa:fc:a2:da:df:e7:30:ac:c2:79:fe:49:01:bd:b6:0e:
7c:c1:55:ac:e9:75:4e:36:0c:58:1a:51:e0:ac:ca:ec:91:41:
80:c7:6f:76:69:05:bc:9f:39:47:b0:8d:a5:eb:cc:05:c9:b7:
eb:3c:cf:b1:5b:30:cf:27:d8:d6:ec:84:b0:d3:6c:31:0d:5c:
60:01:1f:93:fc:1a:b4:3e:a8:f0:48:a6:ed:af:29:ea:de:23:
d8:26:09:1d:8b:fd:6d:a0:ad:45:13:a3:28:19:4d:77:df:58:
27:39:79:28:9e:b7:ad:95:01:43:c5:c6:fd:a2:9c:e7:66:a3:
f8:a8:cb:8a:08:d7:fa:2e:d2:c2:0b:6d:9e:c5:9c:6f:1e:f8:
24:6e:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:39 2025 by rpki-client