Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: aQFTfoe+hp7K8AIdw2Z3MoJw8zwItzMcQhtCyXv/s1A=
Subject key identifier: 76:C1:43:93:00:FD:A6:7E:01:98:E2:D5:DE:68:69:A0:38:A3:66:FB
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 040E
Signing time: Fri 31 Jan 2025 00:29:15 +0000
Manifest this update: Fri 31 Jan 2025 00:29:14 +0000
Manifest next update: Fri 07 Feb 2025 00:29:14 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: W5AbOSIV0ZpouISXKysqb2KsPHHcYiwYp3jv5+tgIbk=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: VvXC5qsmdR6YGob44Y/Iy57cV4LdW3QDFZsUSIeluVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: Jan 31 00:29:14 2025 GMT
Not After : Feb 7 00:29:14 2025 GMT
Subject: CN=679c195b-1368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:73:d3:41:41:21:9f:57:5f:26:82:40:d5:
c9:91:82:71:f3:67:ab:66:42:91:11:19:15:97:37:
ea:a6:8a:67:29:de:74:7b:cd:10:b9:9e:d9:80:a0:
9d:83:4c:24:e6:a0:f8:9c:d8:e5:17:0e:a5:c4:d0:
74:2c:cd:de:94:d2:13:1b:59:c0:64:0f:b2:75:53:
fc:75:00:2f:6e:a3:92:64:81:3d:2f:16:9d:d1:e8:
f8:58:51:63:6c:9c:32:1f:94:f2:dd:c7:2e:76:6a:
91:f1:44:85:de:4b:1b:c6:6a:76:db:ac:f5:ad:ce:
ac:50:70:4e:0f:d7:ff:99:61:c5:df:26:25:c8:03:
73:41:fc:72:16:ee:da:fb:34:f8:7b:bb:72:ce:47:
80:ef:ce:d4:4c:d2:45:b9:b3:95:54:35:d0:2b:8f:
ac:88:b9:b4:fa:f3:35:50:f9:f3:54:5d:f5:9a:76:
ae:39:ba:59:12:e2:6f:85:ad:fd:5f:fe:57:b2:d8:
b7:18:86:40:f4:93:ec:e3:50:1e:4a:0e:74:64:25:
f1:4c:55:7d:78:8b:40:5b:d6:97:5c:65:72:c7:29:
2c:57:17:b6:db:61:11:f2:ea:5a:b8:f9:73:8c:95:
34:ae:36:6d:b9:af:67:26:df:31:b8:5f:b6:13:8b:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C1:43:93:00:FD:A6:7E:01:98:E2:D5:DE:68:69:A0:38:A3:66:FB
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:8a:ab:4d:b0:92:a5:f6:ca:f9:f5:8c:08:77:6c:f8:80:63:
d8:8e:4d:07:a1:f9:b2:78:d3:6e:49:aa:5f:e0:f0:6f:51:f8:
8e:85:f2:fb:00:46:2b:61:77:15:ef:d0:5f:77:16:03:d1:32:
94:76:6e:1b:9c:88:2e:6b:33:d2:ed:fa:80:ba:22:5d:6d:be:
89:47:c1:bb:f6:15:10:68:5b:4a:c4:cb:82:39:9a:c1:7b:d6:
68:0e:72:bc:a6:a1:88:4f:f4:e3:74:96:0c:d2:c6:75:b5:93:
ee:47:65:4d:6f:2d:ee:10:04:46:ec:0a:d6:97:d6:2e:e3:59:
2b:d7:b3:85:3c:16:b1:65:9a:09:07:e9:ba:13:cc:5e:8c:c1:
93:9e:df:ac:bf:3d:d2:54:ad:16:18:d6:1f:fd:23:c5:85:28:
e0:55:3a:65:e4:41:19:ff:4a:87:d1:8e:da:10:cc:a4:5e:d2:
a2:c1:4d:52:ef:f9:b1:31:bd:43:1b:e3:17:43:95:ff:84:62:
63:90:03:77:c8:30:eb:86:27:de:54:4f:d3:36:af:5e:6a:5d:
52:d1:6f:f7:6d:bb:d9:ed:ef:6c:85:fb:e0:7a:1e:c1:7f:14:
b0:77:93:10:c2:6e:bd:0a:30:ba:24:55:a3:a0:cd:6d:ce:b2:
b4:a4:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:27 2025 by rpki-client