Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier: NpcQ8i2QHV1WXahWAObHYY4fkpI9Ka3tVQURY9UyH+Q=
Subject key identifier: B9:1B:67:22:3F:94:87:DE:E0:21:35:35:49:3A:9B:27:07:BE:98:5E
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial: 0744
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number: 073E
Signing time: Thu 30 Jan 2025 21:35:46 +0000
Manifest this update: Thu 30 Jan 2025 21:35:45 +0000
Manifest next update: Thu 06 Feb 2025 21:35:45 +0000
Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: 5m0aQXdCAfZuEaxeXa09DbAm5lWJ0DV8qDSmZOMNzrk=)
2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: wTQeNYARIZusYUWnvq2BJbFkJZok+hL8MWM5NCLPLwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Validity
Not Before: Jan 30 21:35:45 2025 GMT
Not After : Feb 6 21:35:45 2025 GMT
Subject: CN=679bf0b1-c0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:18:18:4d:71:23:ee:c2:0d:9c:4b:2d:40:
3c:3d:c8:17:c6:39:aa:de:4f:21:da:16:63:86:a4:
b0:6b:df:c9:4f:36:02:af:c8:31:00:de:3c:93:f3:
db:51:a7:61:58:fa:fc:80:fc:aa:33:80:1d:c0:2e:
3f:8e:5d:ff:32:ba:0d:f0:59:ad:75:65:3b:24:1e:
44:a5:d0:d5:eb:4e:68:93:e3:c1:b3:e9:a8:d3:73:
e6:22:3e:a9:9f:bd:12:2a:db:a3:76:16:e7:34:67:
51:f9:df:d2:10:8c:fa:86:06:01:d5:a7:27:e5:b4:
c1:86:f2:79:62:2f:19:0b:e9:4c:9e:06:c4:3c:e5:
05:3a:92:cc:46:59:db:7e:e1:3a:4a:7f:51:3c:7f:
0f:4f:82:74:7d:11:00:85:8c:ed:2a:8a:69:4b:01:
bf:6b:e1:ed:08:36:96:6c:3f:ae:80:61:dc:69:d0:
64:ae:69:3c:c7:b1:72:42:fe:0a:ba:2e:66:a5:a4:
cc:0c:a6:6b:17:20:d1:06:86:af:52:9e:2c:fa:94:
7a:2b:7c:c0:60:f9:f1:79:cd:2a:02:45:e2:c4:c6:
ab:6e:9a:5e:9e:41:17:3d:61:a6:ec:11:97:2e:ad:
64:97:a6:07:73:d2:e9:8c:06:b2:dd:bf:96:7c:57:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:67:22:3F:94:87:DE:E0:21:35:35:49:3A:9B:27:07:BE:98:5E
X509v3 Authority Key Identifier:
keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:e4:9e:78:f7:fb:ea:98:9f:77:7c:31:94:72:11:ba:f6:
a4:2e:7c:4c:4e:f9:d7:9b:fe:77:de:9f:c5:bd:55:bb:eb:bd:
13:57:3b:00:05:cd:de:eb:6e:da:1d:19:01:c6:13:14:3b:b7:
32:83:f0:57:ce:e4:3e:15:46:ff:7b:f3:25:4d:2c:74:16:0a:
37:b3:6f:45:82:75:dc:9f:2b:47:dd:41:01:85:76:fc:b5:a6:
ca:24:e6:ac:83:75:de:a7:fe:9d:ac:8e:13:8c:9a:d8:4b:05:
6f:f7:e0:3d:42:de:08:b9:fa:02:1d:eb:60:bf:5b:6a:96:38:
ca:6c:23:ff:03:cf:c3:86:a6:3a:62:b2:2f:68:d3:ad:54:36:
4c:fb:b6:05:93:f7:7c:1c:6e:dd:8d:ac:80:ed:b4:33:be:52:
72:fe:a8:d8:0d:a8:f9:39:9f:c7:67:1d:6b:83:71:64:17:cb:
16:de:5b:b1:38:e1:9a:80:8d:79:6e:4b:73:0d:14:e4:e8:4f:
25:8e:f3:7c:f4:0e:42:9b:7e:80:bf:d2:8a:15:c4:26:4f:0b:
75:d4:6f:b9:d6:79:f6:7c:82:c5:bd:07:a5:f4:b1:dc:c1:c5:
9d:a8:6c:ed:12:f9:6c:1c:62:13:44:71:7a:ce:03:93:6d:be:
de:2f:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:09 2025 by rpki-client