Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json)
Hash identifier: 1KBy3aQhRHoRxbNwLYINCRN4TqwK9GhV4PgFm95mUMI=
Subject key identifier: 01:7D:42:02:A8:68:06:27:10:52:7A:32:CC:00:9D:87:89:B5:1F:03
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial: 0464
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
Manifest number: 045D
Signing time: Fri 31 Jan 2025 17:25:55 +0000
Manifest this update: Fri 31 Jan 2025 17:25:55 +0000
Manifest next update: Fri 07 Feb 2025 17:25:55 +0000
Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: E5F/zMQhaLXw7tw52NRoKWjh7xelFlOAJtqRBF/lt4k=)
2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Validity
Not Before: Jan 31 17:25:55 2025 GMT
Not After : Feb 7 17:25:55 2025 GMT
Subject: CN=679d07a3-9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:94:3d:71:1c:08:7e:b0:78:35:ba:bb:b8:
92:44:90:3e:47:e3:de:53:d6:ea:f1:9d:17:33:8a:
e1:a9:72:6b:55:b5:dd:fe:b3:38:ec:a1:b7:49:0d:
8c:44:60:a8:71:55:fb:52:29:ee:81:61:ae:d8:ad:
21:8c:b2:fe:3f:6e:a2:3c:b3:25:2d:37:83:ad:8e:
55:b0:27:d9:ef:46:46:63:ef:d1:0e:8c:02:4f:a7:
8a:95:f5:ba:40:af:09:85:6d:9e:40:b5:aa:1b:0a:
68:35:c0:59:26:99:80:95:c4:bc:37:ba:a3:9f:9f:
4d:5e:85:25:62:ba:b6:0b:81:87:54:25:d2:b4:e6:
e8:84:32:ea:67:f8:50:35:9e:73:92:14:4f:23:b7:
67:57:2e:5e:fe:69:a6:8c:f6:c3:02:49:be:7c:1f:
f1:bb:57:6a:59:a8:44:1f:ec:e6:c4:ad:8f:7e:9f:
43:b0:89:08:a7:be:20:2b:87:2d:a4:11:f3:3c:16:
8d:1d:bf:98:76:39:5c:6c:69:07:fb:80:82:9c:97:
e0:19:74:51:ec:05:13:57:0c:a4:6e:b6:b3:36:a4:
d5:3e:64:0d:a4:ad:a8:13:8a:f8:84:a4:9f:08:c2:
e3:9c:12:c2:ef:d6:57:93:c9:05:b4:5c:c9:95:fe:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:42:02:A8:68:06:27:10:52:7A:32:CC:00:9D:87:89:B5:1F:03
X509v3 Authority Key Identifier:
keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:43:4b:1e:dd:f4:a0:ea:cc:86:38:2e:7f:fd:35:ac:bb:c3:
16:11:45:82:96:fd:62:d8:16:ae:16:76:d9:5f:06:f3:0d:8a:
1a:26:9b:e0:07:dc:8e:d4:4b:81:89:ac:95:0c:d9:dc:53:63:
78:6d:27:7e:b5:8b:cb:40:bd:0a:53:cb:1b:65:52:80:5c:12:
36:53:d9:b5:67:1a:b0:5d:9e:5e:b6:01:f9:2c:ab:81:a8:6f:
23:8b:b4:c7:3a:71:6c:1d:d5:82:29:60:70:f0:c8:24:1d:d5:
20:17:b6:4b:b3:e0:78:33:e0:e1:1b:d4:77:8f:bc:c4:b3:8e:
ef:f4:95:f7:b4:77:b4:4e:9b:93:52:5f:5f:d0:9c:7e:f7:3d:
9f:2f:0d:4f:f6:16:e5:e7:b4:3b:be:ec:23:31:0d:f3:eb:28:
18:29:4b:4b:44:05:60:ac:b6:69:b6:27:38:79:e7:45:45:67:
34:92:b0:6e:79:3e:e1:23:88:a2:ce:b1:67:7f:a9:14:a2:e1:
63:60:0e:b4:1a:71:a9:9b:25:95:ff:9c:98:0e:b2:15:6c:41:
86:60:67:85:3c:ea:47:20:aa:f4:2d:39:3e:73:7d:59:e0:11:
43:45:9a:89:69:ad:aa:58:3c:ec:a0:98:9e:37:2a:ae:3c:48:
62:8f:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:44 2025 by rpki-client