Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier: BdiPpQCACsf98GgGmGKGTEoiX+FfTraZjPWlYp3IsJU=
Subject key identifier: 2C:4E:ED:2C:56:7C:04:33:F4:36:D9:D8:90:46:C1:6F:1B:F4:33:B8
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial: 08D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number: 08D1
Signing time: Thu 30 Jan 2025 20:29:42 +0000
Manifest this update: Thu 30 Jan 2025 20:29:42 +0000
Manifest next update: Thu 06 Feb 2025 20:29:42 +0000
Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: zJdqLZMNWBAuh4aLD1OLXUEwdCxAFIPfvN6NaMvqS9w=)
2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: itCLnBcL2Gte2voVtQcQvcDsZmsmQBg0colGRKDZXYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Validity
Not Before: Jan 30 20:29:42 2025 GMT
Not After : Feb 6 20:29:42 2025 GMT
Subject: CN=679be136-206d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:91:5d:29:ec:f2:b7:5c:24:89:47:a9:e0:
6c:08:6b:c3:2b:6d:1b:a1:59:44:98:f8:05:fa:d4:
e9:d3:7b:4f:68:38:e1:44:88:09:30:90:e3:aa:69:
52:c0:0a:0a:e4:94:c0:44:00:c5:28:85:ff:4b:84:
92:3b:32:4e:42:f5:d7:d8:ea:ba:1c:ab:63:bb:d0:
a2:b5:0c:7b:00:0e:29:e8:e9:7d:5a:63:c7:24:c9:
7e:69:51:f0:b6:50:e6:b3:5b:aa:f6:97:44:a7:14:
86:c3:de:06:bf:39:b8:a6:04:eb:e4:9c:fc:0a:1e:
a7:ad:cb:93:f7:b5:1b:d6:c5:52:83:a9:55:a6:54:
c2:5b:a9:c9:a4:5f:c4:5f:9e:fb:c4:07:01:06:82:
2a:7d:4a:19:c3:1f:e3:c6:a2:74:f1:e4:64:fe:05:
f6:ca:8e:fa:43:dd:42:72:1f:a3:66:89:8a:98:0c:
a4:77:70:87:2c:70:33:22:b7:54:4b:0d:92:62:0a:
ea:fa:f3:3a:8f:16:4b:ba:4d:3d:63:1c:84:6c:55:
64:54:e0:4c:9e:44:ea:d3:cc:37:b2:43:a9:86:f9:
8b:ee:85:d8:d0:dd:8c:c2:a9:6d:36:24:64:90:e9:
2d:e0:71:7b:4c:e7:d4:9a:fc:d3:b3:24:aa:ee:2a:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:ED:2C:56:7C:04:33:F4:36:D9:D8:90:46:C1:6F:1B:F4:33:B8
X509v3 Authority Key Identifier:
keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:78:92:87:d2:4c:8b:8d:d1:81:bb:ab:1d:ad:87:5d:99:
c9:9b:c2:5f:c9:79:31:49:8e:89:42:fa:1b:89:42:88:e5:79:
a1:c6:9c:7a:f1:c8:57:e3:23:84:1c:28:34:f6:5a:57:30:0b:
04:cf:4c:58:3d:bb:87:75:76:7c:83:5e:46:7c:8e:04:a3:f7:
e8:38:b3:9a:98:d2:09:38:e1:40:f2:58:66:25:cf:d4:00:f0:
93:f8:f0:85:07:60:b2:27:8e:f4:c9:ef:21:c8:9a:aa:e2:8d:
02:b6:20:78:2c:4c:16:fe:f3:dd:35:fb:93:40:98:fb:35:07:
c9:d1:11:f3:7a:94:18:01:fd:ec:e4:3a:82:25:a5:0d:3a:6f:
85:2a:81:c6:d1:2a:d1:94:4f:5b:bf:c0:fa:74:a8:65:5e:8c:
99:dd:6d:41:af:43:23:77:33:77:3e:98:c0:d7:4a:34:8c:b1:
75:f2:d8:d2:b1:fb:a5:9f:51:1b:5c:95:5d:70:35:39:82:ad:
d0:15:cf:ea:8b:c0:92:4f:39:e2:d3:5f:06:36:d3:3f:6c:f1:
85:cc:3c:9c:62:5f:c0:fc:9c:e9:95:f2:9e:88:12:30:b5:40:
be:cc:08:bf:46:fa:4c:08:34:f0:1f:0a:91:fd:93:e0:3f:bc:
82:c5:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:02 2025 by rpki-client