Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json)
Hash identifier: VxV8McrkeHNwqd+OggDBDWNg5kvsMkorNi1qD7iTvxw=
Subject key identifier: 23:1E:DC:A1:03:C9:4E:86:E9:F6:08:51:0E:AE:63:CD:8D:18:F8:37
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 06:41:23 +0000
Manifest this update: Fri 31 Jan 2025 06:41:22 +0000
Manifest next update: Fri 07 Feb 2025 06:41:22 +0000
Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: p+McYLLhl2EVNI8bAMdxTCOqAvRdirrYLdVbCbufRUs=)
2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: 0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Validity
Not Before: Jan 31 06:41:22 2025 GMT
Not After : Feb 7 06:41:22 2025 GMT
Subject: CN=679c7093-09b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:fd:54:7e:b8:61:1b:da:1d:d8:2b:f0:1d:
ca:cf:7c:2d:d6:45:c2:9f:f3:c1:e7:8c:b9:41:20:
8e:7d:70:d6:1e:4e:e3:28:ff:b4:f6:79:65:6f:be:
c0:05:d1:63:6f:10:7a:30:e9:9c:34:11:45:43:53:
b4:fa:90:5f:cf:e9:ca:53:fa:bb:5a:89:ec:76:ea:
a0:fc:5e:94:78:0c:5b:ab:9c:81:9b:22:bf:15:d0:
60:24:af:fb:2a:d7:fd:9a:85:7a:73:ca:4e:98:f8:
6a:2e:7f:c9:ea:7e:0a:eb:8f:20:b1:d3:0c:02:f5:
83:07:48:7a:00:04:ac:5d:2b:ce:c0:59:8d:9d:03:
30:db:41:55:11:00:36:c9:9f:be:c1:76:7b:49:08:
f6:06:cb:aa:33:8d:84:c7:48:6f:b2:92:3a:da:d3:
e6:34:a9:dd:15:c0:5b:9f:87:bd:22:a3:61:14:75:
17:8e:cf:a8:d1:bd:c5:ee:03:be:f4:73:eb:ce:26:
03:47:e1:cf:da:d9:13:39:81:e4:b8:7f:8c:f7:97:
5d:4f:87:77:32:3d:95:a0:a3:c8:2b:dc:54:c8:fc:
82:f4:7b:e2:3e:3c:1a:07:c9:c4:13:40:b0:c3:2f:
e1:0b:c8:d3:b2:f9:30:5d:c4:fb:0a:4a:84:14:f2:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:DC:A1:03:C9:4E:86:E9:F6:08:51:0E:AE:63:CD:8D:18:F8:37
X509v3 Authority Key Identifier:
keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:61:0c:21:09:2a:b0:d7:63:84:6d:5a:1b:a0:49:30:8f:01:
6c:39:fb:f6:3f:6a:29:a8:7b:70:45:a4:6b:11:e0:12:ae:84:
e4:53:d6:26:9a:bd:a3:d7:af:f5:b8:13:30:9b:9f:ee:25:d8:
f8:b6:32:3f:d9:56:07:c1:94:86:f6:fb:ce:84:f0:78:82:6e:
54:ad:a2:6d:5d:4e:69:14:c2:5d:09:80:1b:35:92:dc:d8:0a:
8a:a0:6b:7d:37:41:05:32:01:7a:1f:e9:c9:fa:85:16:06:87:
aa:46:16:aa:4e:b9:3f:e0:d7:24:2f:56:64:b9:52:85:94:9a:
c5:39:dc:a2:d6:90:63:03:64:c0:63:d8:03:4e:28:96:1d:4b:
ce:9e:2c:4a:fe:a4:de:91:c6:b0:71:17:46:94:82:6a:2c:d4:
fd:46:3b:60:1e:4d:45:96:20:d2:5c:0f:e4:b4:4f:61:a0:9b:
91:96:e4:a8:e8:86:d3:23:3b:c8:ae:b8:6a:12:90:c8:d1:ea:
83:e9:24:29:00:07:22:57:4d:a3:cc:63:84:fb:10:cc:59:9e:
df:10:88:95:0b:01:5b:11:60:6c:b7:0f:8d:89:30:30:12:fc:
57:77:ae:92:c6:0c:bb:57:cc:8b:56:75:04:89:81:00:ea:e5:
29:05:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:47 2025 by rpki-client