Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier: sq7aS9Tmo6zcqIndMYvpF5g7ALQyUmHE8LeUzcbz58c=
Subject key identifier: 20:DE:C3:91:22:8E:E3:34:0F:E7:B8:6B:C2:2F:F7:34:A0:F9:32:A2
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number: A5
Signing time: Fri 31 Jan 2025 05:20:48 +0000
Manifest this update: Fri 31 Jan 2025 05:20:47 +0000
Manifest next update: Fri 07 Feb 2025 05:20:47 +0000
Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: A8Mro6vE7D+anCQaV8vbn5cvWBQlzELWXYPH8hivvT4=)
2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: h90BBjk+wVdlnYl+Atga4udJJhr99T+PLr3O9ucXhDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Validity
Not Before: Jan 31 05:20:47 2025 GMT
Not After : Feb 7 05:20:47 2025 GMT
Subject: CN=679c5daf-f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:20:d8:88:f4:90:e9:c7:85:89:cc:a1:40:
bb:aa:39:04:bc:ed:c9:5f:72:44:57:dd:75:76:5f:
78:2b:05:d0:9d:10:8d:c0:e5:c0:35:0f:f6:fe:a0:
2a:99:eb:9e:bb:0b:91:6a:7b:22:02:b6:f0:1e:3e:
16:9d:24:c2:0f:12:55:2d:79:14:4a:6b:6c:f7:5f:
9e:83:56:22:6f:6f:28:27:53:fc:ff:ba:18:84:f3:
ea:af:44:0d:5d:5c:cb:ee:84:11:fd:26:b7:ff:8a:
5e:e0:7f:0d:29:26:b4:ea:83:78:af:e4:9e:3a:cd:
e6:c7:de:8e:ec:f8:53:37:07:2d:da:8e:35:54:b7:
44:73:17:6c:7a:e0:68:21:34:ef:66:62:5e:d3:11:
99:c3:3d:06:ce:74:13:82:b8:be:c6:03:f5:b2:d5:
5d:ba:40:f8:e1:d7:39:4e:48:c8:4e:0d:cc:2d:07:
72:fe:f6:c7:58:e8:d4:cb:2c:f6:20:64:b6:89:3c:
41:9f:a4:07:b7:0f:d3:86:dc:b0:76:d3:77:28:94:
16:fa:db:f0:de:20:9a:d4:e0:53:b0:86:23:e4:a6:
4b:36:ec:83:51:c4:72:fb:ea:21:46:f0:c0:a2:53:
4b:0c:ff:d5:0b:23:39:8a:68:7d:90:de:d2:4e:3d:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:C3:91:22:8E:E3:34:0F:E7:B8:6B:C2:2F:F7:34:A0:F9:32:A2
X509v3 Authority Key Identifier:
keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:72:88:3a:dc:ce:21:4c:98:84:aa:1d:67:13:97:22:93:
de:52:d8:a5:13:df:94:53:62:3a:ea:34:50:1d:f6:0e:28:38:
9c:45:0e:58:23:7c:26:ba:a6:0f:3a:18:98:be:50:3f:0e:d9:
bf:09:b0:3c:d4:79:7e:98:53:dc:1c:d0:ab:84:3c:41:9c:da:
3c:33:15:da:9d:d0:70:3e:03:aa:7e:da:7a:2b:00:83:f2:58:
be:67:31:a6:62:b8:ee:69:b9:7c:27:91:1d:8b:7e:4e:a4:31:
21:48:b2:15:8a:c6:03:6a:95:54:8b:54:be:37:af:b6:ab:db:
dd:f1:a1:dc:f9:c7:ae:6e:69:9e:8b:b8:41:70:01:ed:e9:b9:
ad:b6:0a:a0:65:38:8a:ad:a3:ab:3f:80:7f:65:9a:09:1b:ce:
62:86:26:f0:c2:2a:8c:d8:fe:68:d0:ed:f0:84:5f:6a:e7:29:
50:c7:94:80:6b:22:64:80:b1:c8:03:c1:6c:f9:ab:8a:29:1b:
a9:c4:31:3e:d6:00:b3:5b:32:6b:d5:9b:24:45:0b:70:ea:8c:
28:bd:44:ce:57:4c:1d:6e:68:8e:64:4e:21:31:bf:a7:97:30:
b6:74:ed:46:64:6e:55:30:52:47:76:81:25:e4:a0:e5:0f:90:
00:b5:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:30 2025 by rpki-client