
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json)
Hash identifier: D9yup/lIXM/ojmHg4OgW6jnW77QYsuJoq3oFQXOQf1o=
Subject key identifier: 28:E0:20:03:BE:62:A4:6E:39:75:CB:F5:69:ED:55:63:51:E0:79:E8
Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Certificate serial: 0C11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
Manifest number: 0C08
Signing time: Fri 31 Jan 2025 18:27:40 +0000
Manifest this update: Fri 31 Jan 2025 18:27:40 +0000
Manifest next update: Fri 07 Feb 2025 18:27:40 +0000
Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: JNuRZB6NNiGCzHKQxUu8PgngWilh5/7ok5WjHxJPDO4=)
2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: NcBWc+R/l9a4ARiTsfueJzkOzm3hZiUOoPUxgy8X2fA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49
Validity
Not Before: Jan 31 18:27:40 2025 GMT
Not After : Feb 7 18:27:40 2025 GMT
Subject: CN=679d161c-e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:ab:39:10:e3:b6:8d:9f:f4:87:43:92:24:
b1:71:47:64:e3:01:13:b2:c1:0b:7a:89:ee:60:f5:
10:69:f2:6c:2e:45:38:94:ab:09:fb:24:3b:5d:f9:
cb:ee:6d:51:9b:53:ad:74:6d:8f:e1:2e:3a:1b:37:
51:61:99:5d:f9:1c:b6:86:73:67:d0:91:99:ab:bf:
7a:8e:04:80:a1:e1:74:48:1a:d7:15:33:e8:f8:d8:
f7:56:86:85:1b:26:6d:cf:3c:92:41:31:6b:db:f1:
5f:7a:b5:19:a8:e1:7b:63:6c:c2:61:1b:f6:1a:84:
63:58:f4:86:fd:c6:de:66:ae:37:fb:d6:7d:ea:e9:
27:d3:2e:6a:14:72:06:37:c9:cd:cc:6c:c7:d5:99:
ec:d3:0b:57:aa:39:b9:90:66:ef:bd:f6:d8:ce:a6:
64:22:06:aa:a2:63:3b:c0:15:97:d4:f7:a4:86:1a:
e6:95:b1:f5:bc:2a:73:04:6a:a4:3a:30:0c:b8:6b:
84:06:5a:89:e8:2a:53:c9:95:78:9e:09:90:bf:29:
0c:d8:7c:92:7d:c3:5f:51:65:45:e7:59:15:fe:d1:
d8:47:86:a2:56:e4:b2:e3:27:81:d6:7b:54:7f:88:
68:d6:3d:e1:cf:45:e0:89:18:68:ad:91:93:6c:ac:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:20:03:BE:62:A4:6E:39:75:CB:F5:69:ED:55:63:51:E0:79:E8
X509v3 Authority Key Identifier:
keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:c2:e4:d2:57:70:f1:25:87:4b:45:36:f7:f0:89:7f:d7:
d5:3f:e9:1e:0c:c5:bb:f0:d5:8d:c6:c9:3a:19:42:03:db:ac:
44:63:d2:d8:7b:a9:70:40:01:0e:88:c8:2f:fa:24:30:92:3d:
c7:ba:25:90:4a:74:8b:fe:12:3c:68:0f:00:02:47:6d:53:19:
0b:bc:0b:8b:73:39:03:fd:e8:bf:bd:af:e5:ab:41:5f:ad:f8:
65:a6:df:7a:f7:d4:8d:09:c1:af:d5:4d:24:26:f8:f8:d3:94:
42:7a:37:6c:0a:b5:a0:3d:00:e4:0b:66:e5:4e:54:de:74:8f:
72:df:a9:79:9b:e8:2a:5b:3f:82:35:91:4c:1a:15:e1:24:69:
5c:50:20:f9:e9:3d:11:ab:f6:da:ec:a1:8c:c8:c1:03:1e:ab:
c0:85:60:39:83:36:35:1f:4c:5a:8d:c8:bf:20:af:dc:0d:da:
d9:e8:3b:d4:84:e9:eb:45:7e:6f:92:82:95:39:a2:a7:3e:79:
84:ab:fa:e9:fb:c0:54:94:ca:f2:a1:0d:66:eb:2f:3d:af:5a:
24:0e:ee:ae:6f:75:41:d0:01:aa:96:5a:39:b3:50:91:97:9a:
8d:4c:30:2b:0d:be:09:cc:80:50:6e:8d:ef:e8:dc:e1:a9:a2:
76:c0:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:11:06 2025 by rpki-client