Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json)
Hash identifier: ug+vaeKKtJ5Jr+rNWg6AwDaHkt5kqQIzDybdrHlRc1Y=
Subject key identifier: EC:0F:7B:5A:18:0C:89:6D:FF:C0:D1:8C:06:71:A7:0A:54:FC:AF:23
Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Certificate serial: 0738
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
Manifest number: 0732
Signing time: Thu 30 Jan 2025 21:40:20 +0000
Manifest this update: Thu 30 Jan 2025 21:40:19 +0000
Manifest next update: Thu 06 Feb 2025 21:40:19 +0000
Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: jK3IHJH27p7XEMoNAPIccMVZkhWBNFFdpJOx+ujLrrM=)
2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: NR1SVCvj30A6pQwNp2dHbCZu3umNoMEReinsxF/kIrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848 (0x738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Validity
Not Before: Jan 30 21:40:19 2025 GMT
Not After : Feb 6 21:40:19 2025 GMT
Subject: CN=679bf1c3-df1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:85:6c:87:f7:e9:ea:35:43:96:15:8e:e3:
6a:d5:f5:25:b3:fd:fb:63:f6:0b:55:a5:40:29:bd:
65:12:0e:40:c3:dd:b8:fa:25:cc:bf:ea:8f:56:a1:
e4:5f:22:79:b8:40:76:e5:a5:ec:ea:34:f7:5d:fb:
ee:40:55:7b:97:26:68:e6:e4:74:a3:a4:cb:00:89:
80:87:90:4d:ad:48:a0:d5:2d:14:ec:81:8d:00:0c:
d0:f4:7c:ab:77:13:37:a7:d7:9c:66:22:8a:dd:00:
17:ef:3a:92:3e:5c:5f:b4:1e:03:80:5b:d9:34:0e:
34:13:e7:b9:9a:19:6e:b1:37:2e:fa:8f:be:7b:d1:
51:33:b6:43:7e:00:46:30:e3:3e:7c:7b:19:57:dc:
14:4d:73:3a:96:ff:d1:58:10:de:f1:b4:86:8d:af:
f4:a9:f5:de:73:3a:74:c9:ad:cd:ad:f0:1e:ef:30:
0e:fc:ca:b4:48:c6:72:d2:5b:14:d5:f7:89:43:09:
03:44:66:b7:f4:9a:db:d8:d4:17:72:a5:56:15:c9:
55:4d:61:ed:4e:ab:3f:98:e0:96:ec:bc:0e:29:28:
cf:60:2f:bb:31:4e:91:45:d8:67:d5:db:94:0b:91:
51:e1:11:ce:61:4f:ee:96:f0:d7:2e:16:e7:7d:b0:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:7B:5A:18:0C:89:6D:FF:C0:D1:8C:06:71:A7:0A:54:FC:AF:23
X509v3 Authority Key Identifier:
keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:be:7b:8a:5b:56:93:54:00:4f:4f:c3:6d:8d:2e:a9:82:f1:
d1:78:be:cb:38:c1:8e:a9:15:c8:2a:6d:05:aa:ee:bb:ae:1b:
91:c0:b9:c2:4d:97:92:23:13:8f:5a:6d:32:dc:a2:7a:6f:cc:
a7:ab:e4:d5:9c:d0:f0:e0:91:6a:80:6d:76:21:f0:d7:9f:8a:
62:2a:53:c6:77:69:f3:d8:17:5f:51:a1:38:4a:81:89:05:7f:
d0:d2:44:c2:00:e8:d4:b6:45:69:49:09:55:6b:97:d2:90:77:
2f:9c:f5:61:04:1d:98:29:97:e6:d1:75:19:ec:29:60:7a:a4:
ee:bf:99:f7:cb:fa:91:d9:4d:b8:da:71:9c:96:a3:f2:0b:66:
49:d8:49:73:8e:15:be:62:e7:18:6a:67:47:b6:28:86:26:ee:
2e:97:9a:9e:d0:ef:a5:5e:c5:e1:94:00:ce:ba:61:4f:47:cd:
44:0c:43:94:7d:7b:04:68:54:b9:08:72:75:04:c2:4f:1f:1d:
8c:0a:07:ce:1b:13:d1:ba:59:55:3f:ce:a8:a5:42:02:d9:2a:
54:9d:9d:82:4d:3e:3b:ff:70:11:27:44:f5:2e:39:42:84:50:
8b:62:e7:bf:08:88:6b:76:e3:4f:b3:16:31:10:11:19:14:d8:
b6:b4:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:17:39 2025 by rpki-client