Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json)
Hash identifier: iDrX+sCUrWLM9ocWSWDqUS79n5YR+K+i5ILJTRjwWR8=
Subject key identifier: 1A:C7:CA:DC:91:B9:15:58:2C:F2:17:06:B7:5A:CC:A2:E9:CD:71:01
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial: 0911
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
Manifest number: 0909
Signing time: Thu 30 Jan 2025 20:25:52 +0000
Manifest this update: Thu 30 Jan 2025 20:25:51 +0000
Manifest next update: Thu 06 Feb 2025 20:25:51 +0000
Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: snZ1H71iDBW8n7eyDuB1gKXv8T7uKWLayeLt5hG44vk=)
2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: X3WvsIakOYYYh6qQ/CNrPJ4rysF4m1jhkYS0mLUaZBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321 (0x911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Validity
Not Before: Jan 30 20:25:51 2025 GMT
Not After : Feb 6 20:25:51 2025 GMT
Subject: CN=679be050-b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:f7:49:04:a2:11:c2:b7:57:5b:cd:6f:d3:
08:6e:16:1c:f5:dc:9e:41:fd:81:15:4f:f5:41:32:
1d:01:e8:21:7c:57:cc:ae:7c:a6:e3:0f:6b:eb:f9:
4c:bb:6b:79:8e:55:a3:85:43:73:cd:5b:93:d7:28:
e1:24:11:34:74:ce:0c:83:81:1f:e8:b1:30:7c:bf:
b4:85:80:97:fd:5f:7e:7d:2b:c1:b7:8a:70:95:1b:
ad:ef:2e:56:73:00:3b:99:02:83:ca:7a:21:e6:a8:
a7:6d:9b:fc:c9:5c:f7:af:8c:6c:c3:e4:42:a7:f0:
10:4a:12:ec:91:fb:5f:cd:da:52:6b:06:7a:b6:13:
d6:63:0d:2c:ac:82:b2:74:49:f3:7f:a4:73:bb:3b:
ab:29:a3:35:d0:0a:62:5b:03:0a:58:4a:fc:b9:30:
43:45:c9:16:12:84:48:68:21:24:6d:2e:a0:2e:7e:
9e:21:a4:c1:d1:8b:1e:03:73:73:e1:6a:1a:f6:b2:
bb:70:cb:18:9a:b3:08:3e:0a:be:b3:59:35:73:fc:
cf:87:a4:60:32:3f:c4:dc:ef:1c:d3:e7:97:d1:b8:
82:85:ea:5c:f3:e3:06:3f:43:53:b9:c1:81:6f:d5:
6a:ef:18:67:52:17:0d:2c:f4:a2:ef:1a:88:64:81:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:CA:DC:91:B9:15:58:2C:F2:17:06:B7:5A:CC:A2:E9:CD:71:01
X509v3 Authority Key Identifier:
keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:fb:8e:c8:a4:62:d7:01:73:55:8d:81:a2:d1:95:4c:73:66:
1a:57:c8:b8:df:82:31:e2:71:6a:07:21:b3:16:91:d0:7a:10:
1a:01:46:2e:53:16:f0:d2:3b:65:b8:02:f5:22:b1:bb:36:67:
67:4e:4e:2b:65:ca:37:b7:63:c6:db:cf:0c:ba:16:d7:0c:3e:
7a:4a:f7:d4:23:22:4c:be:6d:5f:1a:ed:9b:15:73:d9:8f:c6:
e0:17:8a:66:a3:ca:fb:94:cb:8e:fe:53:f1:4c:2f:3a:03:a3:
61:d6:d6:b7:4f:11:01:75:ab:45:5f:64:85:f8:bd:83:98:dc:
02:15:b9:82:2a:ea:07:bd:b5:6e:99:bf:73:1a:e3:cb:c1:3c:
86:4b:d4:38:dd:3d:9b:0e:48:33:79:70:24:60:1e:1c:22:d0:
26:06:39:59:2a:03:e2:4e:a9:84:db:90:b3:96:93:41:04:6c:
1f:70:f7:d7:a3:86:da:32:94:e7:1b:2e:64:af:92:41:01:a2:
79:f6:ee:74:ae:85:1f:ed:d2:e2:45:cd:8e:69:06:d0:2e:c5:
6b:a4:34:1e:bb:ef:ae:96:75:b2:6c:21:48:3f:3b:1e:7b:6b:
8f:5e:0d:f4:29:12:a8:32:98:31:03:1f:eb:a2:fa:0e:d7:c7:
04:2e:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:24 2025 by rpki-client