Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json)
Hash identifier: rJyPrc+U/GYJ679aPvQeG4TVkVLRLH2yWG46g9oPgts=
Subject key identifier: C2:38:59:18:FA:24:E1:23:30:1C:14:B9:6D:68:36:D2:F2:96:0A:E6
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
Manifest number: 01A5
Signing time: Fri 31 Jan 2025 02:31:48 +0000
Manifest this update: Fri 31 Jan 2025 02:31:47 +0000
Manifest next update: Fri 07 Feb 2025 02:31:47 +0000
Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: Wp5KrljHfig8ennodpHEa8Q8uWXvTQTELmYwnzwvC28=)
2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: BISS5CmxNxvmt9rFH6DiKF6LgvgQpzJ1qyGwOCZsmrY=)
3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: gXomgC3UWF4hRBWpPOIJ1KbjovqaJl+GP7rjTy7IiYk=)
4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: /sVqx8q3knVsrGKYvA1MUovYNq+EQPYvWXQlJdzVZFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Validity
Not Before: Jan 31 02:31:47 2025 GMT
Not After : Feb 7 02:31:47 2025 GMT
Subject: CN=679c3614-2adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:91:64:55:47:b9:b5:bd:e1:5c:d0:50:a8:
99:9c:ca:73:cc:cb:5f:27:6e:e5:67:85:61:77:0d:
cc:16:d6:6b:a3:11:9a:0c:d9:b1:e1:c4:f3:af:86:
e2:ac:63:99:3f:66:b4:1f:53:9e:a5:64:54:0f:10:
37:27:82:4d:02:08:ce:63:70:90:cf:24:dd:e4:1a:
47:01:d5:2e:cf:a0:ac:f4:f7:89:b0:18:93:9a:e1:
6e:00:3b:52:e6:a3:3b:a6:ca:9a:96:8c:76:03:7b:
3d:cc:ec:e1:d0:3d:0c:f3:d3:e7:9a:c8:de:fb:9c:
7b:04:cc:6f:76:e7:bb:43:a4:89:e1:d7:3a:5a:4b:
59:70:67:87:36:0b:ac:09:69:e2:9b:53:fb:3a:f6:
92:33:e8:f4:72:b0:79:ad:d5:89:bb:d7:9e:6a:63:
60:3f:e9:c1:b6:12:b2:d2:09:83:d2:8c:cd:b8:cb:
c2:02:55:1f:6c:eb:fe:14:ab:b1:36:4e:9d:15:c9:
6b:5b:e1:97:7b:c1:51:b5:de:c7:e6:25:16:8e:a4:
17:e7:0e:bb:89:10:72:17:30:3b:4b:89:d6:e8:b0:
46:85:30:5d:0c:c2:ac:98:8e:be:97:09:9f:6f:60:
15:a6:fe:9b:d0:9d:e2:aa:92:a1:1d:aa:f6:f4:2e:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:59:18:FA:24:E1:23:30:1C:14:B9:6D:68:36:D2:F2:96:0A:E6
X509v3 Authority Key Identifier:
keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:16:33:b2:c3:7e:39:4b:b4:f5:29:0b:bd:fc:10:0e:46:8f:
c0:96:5b:6b:39:2a:1d:89:5c:d0:f9:ce:31:9c:7f:16:a1:1c:
a8:aa:b2:c4:b8:aa:da:cd:2e:6e:54:cf:8e:8b:8d:4f:76:d8:
73:9c:ff:9b:18:ef:c6:c8:3f:cf:6c:39:3a:28:f9:24:d7:be:
59:a7:fb:fe:b5:e1:75:82:ff:d7:9f:e5:a4:96:61:bf:1e:18:
f6:a9:a6:a4:99:63:e8:88:ab:e3:9f:71:6d:08:98:a7:30:82:
27:53:87:29:6b:e7:6d:5e:cb:55:51:4c:12:88:8b:c5:9c:6f:
b0:da:92:79:87:1b:ae:ee:e6:af:05:52:6e:9f:ae:93:58:e0:
86:20:a5:97:24:e9:4c:b6:a9:b7:4d:4d:46:4d:1c:80:1c:83:
23:67:4d:63:2c:02:5b:e7:96:b3:86:de:4b:51:90:5a:b3:fd:
41:74:ca:e1:9a:ab:53:c5:60:03:31:f6:63:51:26:bd:d5:c0:
22:c2:93:94:75:04:ef:9b:79:20:91:90:4c:6f:f9:9a:cf:7a:
54:e8:51:db:49:df:b8:1b:aa:99:7a:19:a8:07:92:a2:b5:ce:
1f:d2:38:5b:d2:b1:30:1e:54:aa:24:8c:27:04:20:c5:38:f4:
b7:7f:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:28 2025 by rpki-client