Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json)
Hash identifier: ZvvITHA5oClU8PpukfdAJhIghln+51C1tzh8DsaCge4=
Subject key identifier: C1:FF:D4:2E:6A:1F:0C:24:37:4F:F1:7C:ED:1C:F6:A2:E2:73:34:03
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
Manifest number: 0154
Signing time: Fri 31 Jan 2025 03:37:36 +0000
Manifest this update: Fri 31 Jan 2025 03:37:36 +0000
Manifest next update: Fri 07 Feb 2025 03:37:36 +0000
Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: hK/SuSFnnyR/onpDmEVMUMPnJOpXAkIIHFRER9RtWXU=)
2: 1D7A0DE468FF11EE8F94AD6AC4F9AE02.roa (hash: woS729tk0hFtPGLUns+ELkiLka/6z63X+WiwGWiKLrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Jan 31 03:37:36 2025 GMT
Not After : Feb 7 03:37:36 2025 GMT
Subject: CN=679c4580-5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:ce:f4:bd:65:23:07:20:2a:0e:6a:fc:dd:
76:35:18:27:13:9e:f3:22:3d:36:51:6b:60:1a:a0:
d5:65:a3:3c:f9:99:58:dd:56:3c:82:0a:be:36:bc:
51:d1:1f:04:11:5b:4d:66:7f:dd:e3:1a:6b:54:59:
1b:69:3c:aa:8b:cf:f9:9a:c9:85:43:81:0e:23:6c:
d8:a5:0c:e4:1a:41:f3:11:6b:fa:f2:49:c6:6e:71:
1d:65:3c:05:ea:90:1b:d4:9c:03:d9:34:10:f3:0a:
ac:82:1a:22:57:e4:94:05:9f:9e:9b:54:16:10:fd:
ee:2e:fe:bf:43:14:06:8e:6e:92:c0:aa:b8:2f:f5:
7a:2a:99:c3:5a:df:57:c4:f0:f1:18:45:9a:e5:5b:
1e:96:0d:6c:fc:05:bf:af:c0:8b:73:db:64:99:f9:
16:35:64:c0:aa:a1:57:bf:87:74:b7:1f:17:11:ff:
d1:ce:29:6c:79:8f:d1:c7:e1:e1:b0:d6:55:49:63:
2c:8f:e4:50:90:0d:a1:df:4f:70:da:71:ef:2f:09:
0e:3f:30:82:f2:21:0d:1b:4f:be:58:20:f7:16:2d:
1e:f5:d9:25:61:7e:48:76:ea:1e:95:1e:e6:0a:e9:
fc:a5:b6:4a:de:c4:7d:a6:bc:b8:61:b3:44:a9:80:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FF:D4:2E:6A:1F:0C:24:37:4F:F1:7C:ED:1C:F6:A2:E2:73:34:03
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:e3:e7:bb:67:bf:f6:4c:6a:1c:2f:98:e7:ed:90:62:ab:
83:de:ba:d9:65:d7:42:7c:dd:c4:a9:69:c3:dc:5e:25:e8:f8:
fb:5f:5d:c7:ca:bc:a3:fa:c9:c2:4c:a2:08:87:44:a4:69:0a:
67:e3:78:dc:8b:b5:6d:33:0f:08:cc:4a:34:9b:18:dc:c9:a2:
4d:ed:6f:ab:9f:85:00:5f:33:be:8d:3c:34:6b:5b:ff:dc:55:
c7:24:91:e1:50:ad:0e:63:22:ec:49:31:13:c5:5f:90:d4:eb:
5c:12:d4:a7:94:54:28:93:d4:c2:71:0d:cc:db:73:e4:13:42:
fc:e3:a7:86:9a:80:2c:40:18:52:39:d6:4c:4f:f7:68:5f:50:
f8:34:87:ec:39:6f:c6:ca:4b:38:af:4d:3c:52:37:f5:4f:de:
19:6c:86:e3:3b:c4:91:3c:ac:ab:b7:c4:62:2a:18:eb:7c:d4:
38:99:99:33:3e:c8:76:7d:3f:45:3b:1a:e6:9d:ad:49:9a:f7:
7e:98:3a:8f:cd:15:55:e3:50:dc:82:cd:c5:62:42:9b:4b:bf:
1e:be:f4:96:8e:1d:b6:89:4a:d0:e9:27:92:90:88:2e:dc:a2:
24:9c:3b:5b:0a:4a:d1:a8:ab:27:e1:5f:2f:3f:ec:d2:99:69:
44:48:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:18 2025 by rpki-client