Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier: PCw9VO9nmT6SZos83P4CwOGUvkaSkCfsqXnIPpDDST4=
Subject key identifier: C6:DE:75:44:50:7C:4D:DD:10:FD:D1:C6:1C:2C:ED:85:4A:FC:E1:FE
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial: 1D95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number: 1D88
Signing time: Fri 31 Jan 2025 16:08:07 +0000
Manifest this update: Fri 31 Jan 2025 16:08:07 +0000
Manifest next update: Fri 07 Feb 2025 16:08:07 +0000
Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: AXn/ums3S2CI78YSSYEoMiTUVKjE0WqUmnOWtddcvps=)
2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: oZxIGF3tZxpF5yy16W7DfVBV9Qm+nbX1ntFwqXaNbaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7573 (0x1d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Validity
Not Before: Jan 31 16:08:07 2025 GMT
Not After : Feb 7 16:08:07 2025 GMT
Subject: CN=679cf567-df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:7e:38:de:21:8e:ec:c0:f9:83:1e:07:f2:
01:93:40:56:5f:1d:ec:23:7e:76:ad:22:9a:69:f9:
02:d3:e9:d2:c8:58:82:9b:20:5f:e8:e5:cf:0c:49:
93:9e:0f:f2:db:83:47:bf:f5:bf:6e:48:8e:30:ab:
bd:21:66:3f:50:fc:f0:4e:8c:b1:f1:a9:ff:b9:b0:
a7:aa:93:f4:4d:75:f4:2c:f2:ae:7f:18:3d:0c:bf:
27:95:12:65:14:62:f2:91:33:34:fc:b2:63:d5:4b:
52:36:5f:be:82:ed:90:61:82:93:c5:be:08:a4:79:
d4:b4:b6:26:98:1c:20:e9:f8:89:c2:ca:0f:b8:30:
5f:79:77:13:8e:47:1a:4f:da:10:1e:47:f4:19:e1:
8b:93:9e:9a:04:70:2f:da:5f:bd:d1:31:fe:6c:64:
8b:c0:2d:e6:a4:92:49:88:87:30:27:0d:28:66:9c:
00:d9:a5:76:a8:4e:e4:06:d8:29:e4:6b:e5:f7:1c:
71:81:4f:c5:c4:5c:16:28:06:9a:2e:25:fd:9c:ab:
6c:28:99:f7:4c:c8:2c:25:df:39:f9:c9:de:f7:65:
ce:03:70:84:a3:99:e3:d7:c9:e6:f3:ff:3c:91:5e:
9c:50:75:1d:f1:b1:e7:e4:89:fe:cc:f0:07:f4:8c:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:75:44:50:7C:4D:DD:10:FD:D1:C6:1C:2C:ED:85:4A:FC:E1:FE
X509v3 Authority Key Identifier:
keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6b:8d:6d:97:80:56:85:19:ae:02:92:15:c9:b7:94:81:2f:
38:05:b0:ee:6c:e0:f8:78:cf:31:f0:f7:63:dc:88:09:4a:dc:
87:f2:89:f9:1f:b1:51:c9:9c:2b:43:57:b0:bd:e4:c8:cb:e3:
17:59:df:81:a8:3d:96:07:3b:e7:0c:33:93:6e:46:16:57:ee:
b1:16:e3:5a:9e:c5:1f:f6:d1:ce:3a:bf:15:02:e3:0c:fc:8d:
03:d8:bc:59:98:8e:81:8e:f6:ef:cf:e3:3c:f5:ac:79:24:ce:
fd:6f:2c:34:db:de:b9:77:1f:41:04:b1:ea:df:89:c7:23:36:
39:21:b7:ea:ee:a3:a1:14:47:7a:8c:76:b6:56:c2:4c:91:36:
2a:87:56:93:00:b9:26:95:2d:c2:f5:6d:46:10:dd:e9:5a:c4:
42:69:df:57:7b:03:24:15:63:13:09:eb:59:d5:e8:7c:e4:06:
98:67:8b:5a:c8:65:58:b5:78:c9:e9:9d:52:95:47:78:93:79:
da:f8:5f:19:c6:bb:a2:b2:50:11:86:98:b0:d2:bb:59:ff:00:
c0:7f:1d:60:aa:6e:95:cf:94:52:84:cc:77:e1:e9:ca:84:1a:
38:33:47:43:28:64:de:c9:a0:8d:1c:b6:08:55:88:9a:c9:c3:
59:c6:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:20 2025 by rpki-client