
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier: q0MN5Z2u540PXZvFCTRLENiFxdC9SoGnBcrS9Uwl50E=
Subject key identifier: CF:F5:94:34:30:39:FC:89:EA:89:06:AA:35:DE:AE:C4:17:96:D4:CF
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number: 48
Signing time: Fri 31 Jan 2025 06:24:26 +0000
Manifest this update: Fri 31 Jan 2025 06:24:26 +0000
Manifest next update: Fri 07 Feb 2025 06:24:26 +0000
Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: lxS3pfU+IiJLmYGoazM+v0J3ltq/vCEaJJsxF/doqv4=)
2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: RMUDFetuMqLLtNk8QIeQRLs2fwAMqvw/hlrVesjOyK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Validity
Not Before: Jan 31 06:24:26 2025 GMT
Not After : Feb 7 06:24:26 2025 GMT
Subject: CN=679c6c9a-1f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:fb:07:1d:9a:6c:40:47:db:28:de:79:04:
d9:03:d0:73:ab:46:b4:71:d4:bc:a2:52:98:13:41:
95:1c:0f:c3:47:1a:18:ed:23:4d:70:30:da:ca:e4:
e8:de:bb:96:75:6c:65:79:91:86:82:b0:42:95:2e:
b9:e0:f5:70:dd:0b:10:fc:da:1b:5a:36:5d:85:4e:
5e:5e:94:6b:09:bd:d0:57:99:32:92:60:4c:86:40:
04:f5:ee:fa:d7:07:f8:93:ed:70:ae:40:e4:2c:85:
36:29:94:cf:5c:c7:7f:8b:2d:18:0c:ad:6b:75:98:
53:02:14:27:17:39:21:f0:bc:56:77:1c:29:3a:29:
92:7e:b6:1b:24:83:48:71:78:fa:1a:d3:63:ce:93:
a8:b3:1e:7b:e7:4d:a9:80:81:0d:f4:96:a0:09:61:
c1:a7:6e:d4:fc:53:b6:7f:e9:eb:ca:b1:db:65:f4:
d0:c3:a6:a4:e8:57:e4:57:ae:89:83:f7:53:99:16:
90:28:7f:f4:7f:62:bc:2e:9b:78:fd:92:78:d2:29:
07:ac:46:84:8b:ff:4e:45:96:86:6e:12:6a:a1:e8:
e7:a8:72:09:17:04:8e:b4:a9:35:ba:96:14:e7:f1:
42:d5:e7:fc:06:05:b8:78:86:8a:38:c6:45:9c:6e:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:94:34:30:39:FC:89:EA:89:06:AA:35:DE:AE:C4:17:96:D4:CF
X509v3 Authority Key Identifier:
keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:36:61:91:2c:05:ac:f1:64:eb:45:bd:ea:0e:f6:75:1a:
17:b4:64:4e:12:aa:a6:a1:8f:6f:85:6d:5c:41:f8:bb:6e:d4:
23:ce:8a:fd:49:46:5b:20:f3:f6:3b:69:eb:88:13:be:f0:a1:
4d:4d:4f:2e:25:24:2b:a4:5a:52:34:e0:ea:01:f7:82:0f:4d:
62:5e:81:8f:86:c2:d0:14:ed:11:6e:a7:2d:29:b3:86:2f:58:
5f:1d:23:7d:d3:84:49:db:11:e2:ba:a0:f7:dc:e7:cd:09:17:
e6:f4:42:22:d0:d9:e0:4a:50:55:b4:d2:92:3f:f8:1b:0c:59:
90:8b:b3:bf:cd:e8:b1:56:99:21:1b:78:b9:61:48:58:f9:95:
44:2a:f2:d7:5a:e6:95:35:cd:02:ac:8d:ab:b4:c7:ed:fd:f8:
e2:04:8c:95:5a:fa:ba:2a:d5:95:3a:92:d9:45:ff:74:8b:27:
6e:67:3a:2e:80:72:05:31:d5:ca:9a:db:a0:d4:0d:10:22:ab:
c6:b3:79:73:80:04:04:0a:13:9a:91:e9:66:ea:3f:62:46:fc:
62:a6:7b:cb:7d:b6:51:ea:c0:f2:3e:a5:ee:ff:0a:88:54:04:
9b:ce:fa:64:ae:a3:15:d4:23:dd:a8:39:08:24:09:17:71:83:
1b:0a:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:01 2025 by rpki-client