Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier: nB9G9fAqSUizzonv++fWCTazOfiQH04IvabvwswpJig=
Subject key identifier: 53:8C:ED:A6:29:8C:7A:AA:C7:58:CA:2E:E3:72:76:27:06:91:7A:4A
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number: 0194
Signing time: Fri 31 Jan 2025 02:45:58 +0000
Manifest this update: Fri 31 Jan 2025 02:45:57 +0000
Manifest next update: Fri 07 Feb 2025 02:45:57 +0000
Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: Il0ZN7CUkEMXChOHJw6AiByjT/B3JF50JYRuDRP6Kw4=)
2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=)
3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=)
4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: Jan 31 02:45:57 2025 GMT
Not After : Feb 7 02:45:57 2025 GMT
Subject: CN=679c3965-728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:b2:0d:d8:00:9a:56:20:b1:d8:19:59:12:
fe:a9:79:fe:3a:60:15:83:e8:e9:86:83:dc:57:2e:
a8:c1:5c:2e:78:62:8c:80:c3:9f:c0:bd:5b:33:48:
a5:d7:b5:28:40:20:a6:7a:ee:0d:8f:5e:b6:27:1d:
42:12:26:ea:0c:cf:0b:ae:e9:00:48:5e:38:1a:a2:
0d:98:b6:a0:a7:aa:42:54:e4:2f:1f:13:c2:3a:06:
96:de:ae:d8:ae:02:5e:d8:2c:20:38:71:4c:66:df:
06:1f:69:3a:60:ef:b1:5c:e9:9b:6f:e6:89:f4:f6:
92:f3:a0:38:e1:3a:a9:3a:ae:71:6a:8f:ce:ba:1b:
62:9a:20:2d:7a:4d:8b:a7:c8:aa:ab:56:91:44:4f:
ec:62:d3:aa:6c:a6:30:9c:69:4f:7c:0c:2f:7f:f9:
c2:b6:83:87:fb:37:db:26:08:44:c6:52:7c:fe:57:
93:6c:6c:17:a7:5c:7b:61:31:4a:62:2c:53:a1:ef:
c0:9a:36:23:2a:40:7a:8b:b5:28:8b:55:73:10:2f:
a7:d2:1b:92:09:bb:be:74:bc:ff:aa:d7:f9:b6:35:
e7:81:8d:dc:c4:34:43:68:28:fa:73:67:97:7d:65:
fb:4c:be:d6:29:18:28:d9:96:a2:d7:98:ff:a3:a3:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8C:ED:A6:29:8C:7A:AA:C7:58:CA:2E:E3:72:76:27:06:91:7A:4A
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:35:11:fc:3f:dc:4e:16:b0:13:b7:b4:53:c5:9d:d2:57:10:
5d:83:74:60:d2:73:6b:4b:90:e9:38:b6:ed:e9:12:4d:3e:4b:
ba:3f:e7:52:30:f2:e8:88:a8:2a:4c:d4:e5:e5:fc:d7:dc:9a:
82:2f:45:28:12:3d:bf:78:91:67:07:53:8e:7b:59:b7:2d:e0:
43:06:7b:d7:34:20:18:31:84:25:a8:08:07:44:87:53:7d:f5:
54:15:7b:78:0c:59:41:10:1e:6d:aa:96:f5:c9:42:4f:32:b5:
1a:37:7f:92:3f:b2:04:f8:20:e4:c3:30:02:38:13:f1:cd:87:
45:04:28:e9:02:10:0d:f0:f5:71:07:5e:44:96:72:50:f3:4b:
4b:39:0d:3d:5d:f9:2a:8b:e2:68:64:a1:01:dd:76:6c:50:3e:
e1:cf:51:e6:c5:a5:2c:a3:b6:b6:a0:8e:bb:35:cc:69:ba:00:
37:c4:c3:86:cc:f2:13:f9:7c:a2:d3:d4:d9:ba:02:0b:d6:28:
45:9f:4f:37:1a:db:2b:a3:8e:35:53:f5:90:28:02:a0:07:77:
a0:8f:22:e7:1c:42:bf:fe:e5:bd:b0:46:af:12:9e:15:17:1c:
38:7c:32:36:a9:95:50:fd:75:f3:20:1c:9c:77:91:d0:ef:f0:
8f:c7:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:59 2025 by rpki-client