Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File: nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier: t5CzGbD2lTESXxbWfTAEEUo5npk+tre92GTJjXhAxFc=
Subject key identifier: FE:22:3D:C1:A0:6F:6A:F0:DE:D9:7A:40:BC:19:1D:C7:73:B0:A0:D1
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer: /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial: 0710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number: 0709
Signing time: Thu 30 Jan 2025 21:50:21 +0000
Manifest this update: Thu 30 Jan 2025 21:50:21 +0000
Manifest next update: Thu 06 Feb 2025 21:50:21 +0000
Files and hashes: 1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: 3Iu8xZ6mgJN+bJD+eTG3pEpoPyYiaRG6EqouO3U/OQ0=)
2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: jIN2PY6GWYE7IvHCsXUW4P6OWa+fFCSoJx89CCKLLFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Validity
Not Before: Jan 30 21:50:21 2025 GMT
Not After : Feb 6 21:50:21 2025 GMT
Subject: CN=679bf41d-7fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:75:a7:36:71:a6:cb:99:e3:bc:1d:3b:cf:
a6:90:86:bf:33:73:26:09:b4:1e:bc:9e:c7:60:05:
7c:02:3d:b9:13:d3:18:21:c9:fa:13:d5:a4:23:cf:
90:80:89:9b:a4:0c:59:d4:b0:f3:05:88:f0:b4:de:
17:e1:d4:00:c5:3a:e3:6a:33:8e:18:eb:30:82:23:
08:5e:2e:4d:5f:05:fc:7d:0b:6f:70:00:f8:cb:31:
c6:ce:f7:2e:24:ef:43:04:60:31:db:6d:f2:a3:2a:
b8:c9:f8:46:2a:82:73:54:d0:79:23:e6:52:c1:2b:
3c:b3:6a:1c:9e:f4:13:90:e3:de:f0:3d:ff:4a:a0:
a8:75:c0:c6:46:bd:38:0d:3f:9e:f8:7e:0f:d9:18:
37:ed:07:ff:65:e1:c9:06:ce:d9:c9:d2:77:83:e5:
74:37:20:fa:7b:d3:cb:68:e6:a9:21:9a:4b:97:f8:
e8:67:1b:d8:7e:dd:09:e0:83:43:08:29:dc:58:88:
e9:8c:be:ba:28:c6:5b:f4:23:6e:d5:d8:b6:61:be:
e9:14:e3:39:28:b9:ca:34:37:4e:f6:50:4f:67:92:
b5:9a:29:0e:76:d5:3a:88:f0:59:0a:6f:cf:52:c1:
32:08:b9:b6:bd:45:e2:a5:47:a1:bc:f3:7b:77:8d:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:3D:C1:A0:6F:6A:F0:DE:D9:7A:40:BC:19:1D:C7:73:B0:A0:D1
X509v3 Authority Key Identifier:
keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ec:f7:49:85:ab:89:67:8a:fd:94:c5:c3:05:4a:97:02:a4:
5a:56:6c:00:44:3f:dc:15:e2:72:b4:a9:0e:02:9b:22:9d:71:
43:f2:47:fd:45:fc:e6:4d:88:74:e1:c6:b6:45:89:36:df:75:
4c:b7:9d:87:24:b1:f3:a1:4d:4d:41:67:cb:69:ce:35:b5:e0:
4b:94:2d:71:1d:14:a7:8d:bc:47:52:a9:86:5d:ce:8b:8b:f0:
69:6d:88:66:bc:02:b4:ad:7c:43:4d:b0:c7:e1:fa:0d:f1:93:
a9:49:b3:0e:d3:6b:34:7c:d0:bb:92:52:00:21:98:40:ed:36:
ea:93:38:c2:e0:e3:c5:71:25:1e:64:f5:54:40:06:33:33:36:
9f:e1:98:ff:f4:92:f2:5e:7e:05:3e:ca:e8:ab:9e:c1:cf:ea:
8a:db:c2:10:5e:5f:88:c3:3a:9d:e6:0a:4a:39:db:84:d5:2d:
e4:bf:3c:c5:08:3b:8b:85:29:3a:c9:c2:4a:e1:60:0f:bf:0e:
04:8d:df:45:62:d4:20:ba:ad:c9:bb:17:52:a8:97:46:09:4f:
da:a1:fe:08:49:17:9a:b0:0b:9a:9b:d3:4e:7f:8b:b0:ba:b5:
61:8f:5c:3c:63:39:46:23:15:3e:3f:7c:78:60:3f:2d:8d:e5:
18:da:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:41 2025 by rpki-client