Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json)
Hash identifier: wxcZwxsE5XWxlaHftw9lrye2UrWHi5NPBX7NDGoZpgA=
Subject key identifier: 32:2B:C5:F1:70:D8:9A:EC:16:97:CF:90:9D:99:4D:41:67:D4:85:DA
Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5
Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
Manifest number: 0274
Signing time: Fri 31 Jan 2025 01:45:57 +0000
Manifest this update: Fri 31 Jan 2025 01:45:57 +0000
Manifest next update: Fri 07 Feb 2025 01:45:57 +0000
Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: J7LJYIomf5YzO2jbdWpHVNQeq0F2G8vkT5dqmHtqBSE=)
2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: ohpq6w4FsQ6m2qtbeIH2kHfbJGiR8GKYHoRy8L7uggA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5
Validity
Not Before: Jan 31 01:45:57 2025 GMT
Not After : Feb 7 01:45:57 2025 GMT
Subject: CN=679c2b55-8dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:78:5c:cd:89:fe:12:50:2e:fb:38:0c:7a:
f5:7c:5b:b6:03:36:d0:6b:b5:55:ac:1d:f8:aa:ad:
8a:86:0e:99:30:f9:58:53:90:ed:1b:39:8a:9d:f2:
a3:04:45:5b:d2:0c:17:fb:54:49:9b:69:da:90:21:
35:d6:46:78:b0:ad:51:bc:74:91:25:80:55:af:4a:
f5:bf:2f:70:26:4c:bf:f7:1c:6a:aa:be:9b:3e:42:
9c:53:b8:fb:32:6f:05:5a:73:f3:9d:b8:3a:8a:4b:
e1:dd:aa:47:66:d4:86:9f:73:c5:60:84:0d:c9:64:
26:47:5a:5f:e4:df:3a:8a:1f:bd:f0:d0:56:41:11:
c6:9e:b3:e5:7e:c1:cc:24:c2:84:e2:ac:9f:dc:f8:
15:7c:4a:d6:2d:1e:d5:5b:6c:39:2e:f9:d8:df:88:
98:ad:ae:29:10:1b:11:26:61:cc:86:fe:eb:95:5f:
37:7e:aa:fd:bf:a0:70:de:5e:16:90:6d:bc:0a:44:
0b:05:c0:b5:79:c4:8e:f8:7a:64:d1:4b:1b:20:fc:
2b:fd:93:ed:20:ae:67:07:f9:5c:f1:60:3b:db:22:
7e:c3:e6:a3:5e:52:3a:9f:d9:25:83:7b:d2:ad:38:
f0:75:fc:86:f2:ff:a9:f4:18:1d:4a:c6:4b:28:c7:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:C5:F1:70:D8:9A:EC:16:97:CF:90:9D:99:4D:41:67:D4:85:DA
X509v3 Authority Key Identifier:
keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7b:3c:c7:6c:7b:1d:7c:78:b4:a3:03:0a:96:91:65:d1:dc:
a8:a7:8b:71:8a:d3:4b:ad:9d:87:63:e7:85:1b:b4:7d:7e:fd:
f2:0c:3e:e4:f0:17:5f:83:58:d7:c3:82:0d:7f:4e:80:82:44:
40:97:05:70:d1:b2:83:8b:b0:44:5a:aa:d4:e7:95:40:7f:02:
8d:60:7c:6f:59:b5:03:40:48:c7:4d:7f:06:a9:2b:b9:0b:4c:
fc:06:f5:f4:fc:18:de:95:8e:0a:84:36:22:aa:01:a1:0a:c6:
da:5d:47:0c:17:86:f5:90:3d:8f:8c:e6:01:d4:13:ad:49:ea:
c8:80:68:e1:fd:be:99:bb:16:31:a5:94:5b:4d:da:6f:85:d0:
be:72:c6:f1:a4:e0:69:29:de:51:4b:c7:bd:9c:ba:3f:33:70:
4d:ed:1a:ad:7f:49:c0:d0:71:29:a2:d0:d1:c2:6a:d9:86:30:
d1:cd:98:dd:c4:8a:50:da:73:20:fd:66:cc:ba:25:c6:f7:b2:
eb:8c:7b:8a:d4:52:50:71:73:53:2b:1a:ce:ed:d8:5e:2b:43:
fc:0c:df:39:28:50:51:7e:cf:f2:ff:0d:9e:4a:8a:1f:1b:29:
7a:14:9b:32:bd:7b:ca:8e:92:c4:b8:11:b0:eb:4b:b0:1d:eb:
73:73:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:17 2025 by rpki-client