Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: 7Jhf+Cblmuckw6Jd7urrIx26wH6CTU6z9AczBKWeMEs=
Subject key identifier: 66:C5:99:12:CB:56:B6:E2:D0:D4:42:6E:0D:7C:C6:72:D7:F1:C8:76
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 0601
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 05FC
Signing time: Thu 30 Jan 2025 22:52:31 +0000
Manifest this update: Thu 30 Jan 2025 22:52:31 +0000
Manifest next update: Thu 06 Feb 2025 22:52:31 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: dIQ+U9gRzrqPMQmQWCsDsieXuJdgpRZbRH7t0GnBN7g=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: XhabguNmfoaoaLydzPCMcINuMUCMOCq7nXAwub1uejA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: Jan 30 22:52:31 2025 GMT
Not After : Feb 6 22:52:31 2025 GMT
Subject: CN=679c02af-ce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:50:b5:24:3a:90:91:18:1c:36:2e:ad:32:
73:19:29:b5:b7:df:71:19:e0:c0:79:96:ff:0d:d6:
0f:bb:5b:6e:47:a8:66:e9:00:ef:0d:a4:a2:a6:01:
44:46:fc:e5:cf:7e:48:5f:10:31:35:da:56:e5:7a:
d8:27:72:32:84:88:d0:f7:e3:c5:01:1c:24:b1:eb:
50:54:4b:37:77:58:59:cf:07:12:4d:c9:80:60:7e:
36:b1:25:40:1b:92:c6:09:f1:b6:74:ed:66:86:f0:
53:e3:01:b3:68:af:b3:f8:b0:14:3e:c6:66:20:06:
24:40:3e:6b:6b:c2:1f:3b:48:6c:35:f7:0a:b3:5a:
09:ed:97:bd:f6:d5:9c:99:f1:93:7e:eb:f5:11:e7:
97:c5:12:1b:cb:d7:ed:7b:9f:10:a2:76:94:d3:08:
73:f3:f5:2c:d8:3e:7d:0e:c6:61:f9:7c:cd:06:a0:
86:89:0d:af:89:3b:59:11:62:9a:e9:e5:5d:d0:78:
57:78:62:d5:a4:7c:2a:3e:14:7e:be:32:16:c0:1a:
85:c5:61:16:07:5d:24:38:9c:03:6d:18:b4:40:14:
9f:ee:42:ea:ca:88:64:f9:cb:8b:da:a1:70:da:18:
4b:26:61:0b:69:c8:22:63:98:97:9d:71:6d:f2:c0:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C5:99:12:CB:56:B6:E2:D0:D4:42:6E:0D:7C:C6:72:D7:F1:C8:76
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:67:01:3b:af:da:6f:23:f3:62:2d:23:16:27:24:a1:aa:
d2:ea:32:00:2a:96:b4:64:0e:bd:f4:a9:9c:6f:d0:1b:7e:75:
be:71:9b:d6:be:e5:4f:0e:fd:bf:3c:8e:a8:92:17:81:46:3c:
9b:7a:21:b0:48:25:c8:a4:71:e2:5e:29:96:21:68:9a:ec:c6:
5c:69:9b:c3:2f:eb:ba:9e:a4:a4:5a:96:5f:a3:3b:9a:9e:02:
e9:1c:c1:a5:2e:fb:63:1b:df:e9:9c:71:6d:fe:22:23:c4:ce:
a2:05:8b:64:be:5a:c8:5f:10:7e:c9:91:4f:e6:4d:51:e6:7b:
1e:64:4b:24:46:62:fd:30:87:e3:d7:bb:34:24:b9:b9:aa:5c:
a4:55:3a:35:9f:14:8f:da:cd:35:5c:79:e6:06:f8:7d:4a:0a:
e4:42:45:86:bf:86:c5:4f:3b:9b:f8:11:19:09:aa:cf:98:24:
1d:4d:61:2e:c6:69:5e:3d:f4:b0:15:3d:d8:de:d3:7a:e5:fd:
61:62:71:ad:de:7d:0c:f9:1c:d1:6d:fc:0e:26:bc:e7:d8:17:
cc:d3:3a:22:ff:3e:a2:74:60:31:59:88:a1:05:c1:b2:d0:2f:
c4:3b:cc:b6:6e:56:1a:90:02:db:da:26:a4:01:45:c4:15:34:
a4:b9:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:31:35 2025 by rpki-client