Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
File: 9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json)
Hash identifier: IXOAnnVu7R1iStm9ii2E99wqIfT8Fp3ig8U1qlCW8V8=
Subject key identifier: 5B:4A:CD:DF:D3:0F:E3:EA:8E:5C:BC:1B:76:AB:91:C4:B3:74:BF:89
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial: 0752
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
Manifest number: 074B
Signing time: Thu 30 Jan 2025 21:33:26 +0000
Manifest this update: Thu 30 Jan 2025 21:33:26 +0000
Manifest next update: Thu 06 Feb 2025 21:33:26 +0000
Files and hashes: 1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: K1FeNDqc2LaBe8VZ1sil2Yx6BnoEMx+fu2kSGGkU45Y=)
2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: WcDWxE3j9p1VFrhk+5Av6h7oQt2r0PNsjg2nFhhQ81o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Validity
Not Before: Jan 30 21:33:26 2025 GMT
Not After : Feb 6 21:33:26 2025 GMT
Subject: CN=679bf026-f5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:a1:fc:65:3b:26:02:c7:47:04:6f:c0:15:
9c:5a:66:f2:67:9b:5f:d5:09:d5:79:fa:91:7c:52:
cb:1b:78:e6:d3:eb:7d:7f:47:ba:f0:7b:3b:d6:16:
8d:7b:3c:d4:0f:2d:2f:67:e6:72:48:50:a0:1a:e9:
92:ea:30:6b:8c:a1:29:d0:8c:7b:c6:68:ac:fb:0d:
65:d7:f4:55:b7:35:f1:31:02:3b:2b:43:71:c3:71:
b7:6a:5c:cf:5c:8d:f7:e1:cf:41:81:32:19:6a:1d:
a4:46:37:36:bd:a0:87:40:d0:28:2e:a1:db:c1:ad:
a4:b9:83:ff:ae:c4:44:d1:74:1c:98:29:aa:bd:8c:
b5:e8:dc:a6:35:2c:54:62:75:df:42:a5:ba:57:98:
76:2b:87:05:0e:ec:a3:16:49:90:cd:ff:12:9c:c1:
c4:fa:a2:b8:44:a7:d0:48:67:4d:a6:4d:0b:c5:03:
31:24:3e:07:3f:1a:5e:42:8b:a8:33:b6:58:80:87:
08:16:af:42:14:99:aa:f0:e5:eb:5e:39:33:24:9e:
12:7a:d4:5d:04:90:c7:c9:a1:43:9e:91:88:cc:61:
ed:5a:d7:0c:80:10:c5:fb:09:a7:65:4f:77:0f:70:
bf:ea:14:c8:1f:d7:54:a5:24:39:48:e8:60:e4:35:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:CD:DF:D3:0F:E3:EA:8E:5C:BC:1B:76:AB:91:C4:B3:74:BF:89
X509v3 Authority Key Identifier:
keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:aa:b5:1f:4b:3a:c6:fe:dc:ca:1e:2b:4e:5e:28:23:f9:
70:5b:b0:9c:7c:10:32:4f:7c:09:e1:05:af:95:c8:3b:e4:04:
4f:91:00:ef:60:f0:2c:61:59:8c:5f:89:ba:c5:1b:74:51:d5:
d9:b8:8a:fc:13:84:e1:c6:5e:0f:ab:f6:87:ab:97:01:c4:5a:
16:fb:20:5d:37:99:6c:e1:cd:d4:ad:d1:ec:a8:06:ea:a3:3c:
23:8b:69:a5:49:ae:eb:b9:31:50:a1:68:7a:f4:9e:67:8c:8f:
b7:ef:27:97:a9:2a:1f:e3:ad:83:65:f7:14:26:75:c3:2a:4a:
f4:8a:1a:76:99:b2:c7:aa:bc:59:34:43:18:9e:7d:16:b8:cb:
56:c3:f1:d9:06:62:0f:54:a9:57:e2:3f:db:9f:2c:89:d0:20:
7a:ad:ce:ec:99:1e:73:f9:42:aa:1a:28:a0:ac:1a:a4:1f:b0:
d3:d3:a0:ea:66:5e:2a:04:3f:2a:52:59:2d:ba:13:0e:ac:7d:
67:ed:0e:5e:41:a4:b7:96:fb:ed:83:9f:54:29:bf:93:14:82:
5f:47:14:67:b8:57:e5:d6:f7:e0:52:93:a2:50:60:e2:e2:88:
b8:fe:1f:37:4c:0b:bf:f1:39:e5:43:29:b3:11:02:61:4f:09:
ff:1b:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:55 2025 by rpki-client