Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier: ACRlLL7oKnzD//GCp1wmOc1ZlgAqUzZHnvzFU+N91rI=
Subject key identifier: 93:2E:AE:BC:1E:11:B1:5A:3B:19:C2:E3:C4:64:FE:EB:0E:D9:13:31
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial: 0B86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number: 0B7B
Signing time: Thu 30 Jan 2025 19:06:43 +0000
Manifest this update: Thu 30 Jan 2025 19:06:42 +0000
Manifest next update: Thu 06 Feb 2025 19:06:42 +0000
Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: DfYowVa6hY6uoHqiswPDzvCznE1+kUH/epE3ywCEHbw=)
2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2950 (0xb86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Validity
Not Before: Jan 30 19:06:42 2025 GMT
Not After : Feb 6 19:06:42 2025 GMT
Subject: CN=679bcdc3-2bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:79:bc:18:16:11:10:bc:b6:b6:08:2b:91:
4d:17:f2:0e:db:2a:c8:4c:32:50:63:d3:40:3d:5f:
d2:4a:41:20:17:48:3f:ad:24:8d:d6:55:a1:b5:ea:
e3:2e:54:d5:ac:10:6c:76:75:d2:42:44:08:ee:42:
99:01:e9:2e:6f:8b:5c:f4:df:82:d3:a4:d7:5c:ee:
51:42:ac:20:90:4a:9c:6f:5d:e7:a1:a4:f2:c3:24:
0b:91:68:97:92:3b:7a:e5:cd:80:4b:39:df:5f:78:
af:63:1c:82:1e:19:b8:a3:40:87:b9:ad:0c:dc:66:
ad:88:78:2e:e8:4f:2d:18:76:23:7e:aa:a6:4e:fc:
05:f1:ba:f4:29:5f:cb:39:c5:42:75:51:fc:82:ed:
42:65:56:59:9a:9e:3f:5d:72:6d:39:82:74:37:e6:
f5:0b:2f:79:7d:89:65:30:55:c5:b7:5e:c8:50:23:
1e:61:c3:b1:a4:55:a5:07:f6:99:32:ee:d1:2e:e9:
08:7a:13:46:3a:a1:ac:87:1f:d8:c1:32:fd:66:24:
90:25:09:7a:f7:a5:55:7b:c6:14:66:6f:b7:6c:8d:
21:77:3f:c8:64:cc:84:02:b0:4f:15:08:e6:c4:3e:
61:60:43:f2:91:fe:cb:3d:93:1f:5e:1b:3b:53:8c:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:AE:BC:1E:11:B1:5A:3B:19:C2:E3:C4:64:FE:EB:0E:D9:13:31
X509v3 Authority Key Identifier:
keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:92:3d:2c:70:df:19:a0:35:8f:6c:75:40:4a:b4:67:3b:
80:f2:d1:08:32:95:f8:d5:64:91:a3:2d:c6:bc:53:94:0d:b8:
03:2c:61:3a:97:83:d2:51:79:a1:23:8f:fa:83:45:c8:c4:7e:
36:0c:60:b5:7c:8d:8f:29:24:0b:54:d9:6c:10:0f:9d:93:4b:
49:e4:36:74:bf:38:05:d7:04:0e:fc:2a:cf:ae:c1:54:b9:4a:
3a:a3:58:e6:bb:f7:f7:1f:a9:d7:66:52:74:0f:b1:1d:56:f5:
85:96:27:b8:05:75:3c:fd:bb:ba:50:31:86:0d:a0:0e:84:6e:
8e:31:a6:9a:d6:dc:4f:0e:a4:c1:3d:38:bc:57:a0:de:c9:7f:
51:fe:d3:20:cd:33:58:98:f3:f9:90:8f:38:6f:dc:21:af:62:
c0:c6:a9:0d:c0:03:fc:b7:38:5d:03:e5:92:bb:5d:e4:3a:45:
f2:58:0d:c9:01:c3:03:9b:79:90:3a:f5:82:95:77:9f:6b:88:
e3:ea:3d:e3:70:7e:04:cb:fe:6c:53:99:ad:ef:1b:5f:0d:dd:
47:ac:56:db:cf:7b:ce:08:71:5e:6c:3b:e8:cc:d6:cd:d6:03:
0d:7c:08:12:bb:4a:7d:fc:0f:e3:2c:b7:35:81:db:52:5c:a3:
df:aa:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:20 2025 by rpki-client