Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier: hONvzuBilT/3n6saLMw0mYDBcbOwCWG9c9+tX4MxfPY=
Subject key identifier: 40:A3:36:EC:6D:C4:68:F2:2B:20:5E:85:C3:83:1E:35:D0:DF:D8:E9
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial: 0371
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number: 036D
Signing time: Fri 31 Jan 2025 00:57:48 +0000
Manifest this update: Fri 31 Jan 2025 00:57:48 +0000
Manifest next update: Fri 07 Feb 2025 00:57:48 +0000
Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: MSopHRjKqH7f7XdDdetDmv9cw5MaOkrucR5UuiZJsRM=)
2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: 82bmKccqbBzTdNqrTXoGpBcJx8ypp4VeLlhE4Yo0df8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Validity
Not Before: Jan 31 00:57:48 2025 GMT
Not After : Feb 7 00:57:48 2025 GMT
Subject: CN=679c200c-73f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:57:38:12:d8:83:64:10:27:a5:89:b0:4d:
fd:93:94:22:ad:56:0f:43:74:e2:ba:ab:73:6a:ee:
bd:a2:93:9b:b8:7c:55:da:bd:b0:f1:6d:21:fb:0b:
9e:38:51:8c:96:ec:aa:cf:c2:88:cf:a8:48:5e:4c:
f5:26:97:46:b9:79:ce:91:06:ea:44:1a:09:06:3d:
59:cf:2d:c1:a8:cf:d9:be:f3:fe:79:83:dc:8e:b6:
e1:6d:b1:19:6d:8f:62:49:2d:98:d6:30:07:b2:4f:
25:cd:fe:01:67:6a:79:44:a9:3a:5f:db:42:5e:b1:
13:77:3f:90:81:57:30:2b:ca:1e:8b:f1:67:5e:d4:
f2:56:63:2f:70:ed:ab:a3:91:35:68:bc:14:de:b4:
3e:5c:2c:7b:d6:d6:24:7e:ed:f3:dc:2a:5f:9a:84:
86:91:98:e7:f5:a5:ea:0e:f9:fe:a4:e3:da:b2:55:
a5:be:33:59:0a:3a:30:81:21:9d:33:50:13:ad:d5:
cb:76:f4:fa:f3:92:7f:9a:9f:6f:bf:52:a2:09:04:
c5:e9:f5:00:f9:5c:4f:49:76:a4:fa:f1:d1:ca:f7:
16:a9:b9:7d:17:8a:73:1a:03:ef:6c:9b:37:72:1b:
82:f4:f5:62:fa:a6:8c:ba:de:8d:7d:26:ac:9d:73:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:36:EC:6D:C4:68:F2:2B:20:5E:85:C3:83:1E:35:D0:DF:D8:E9
X509v3 Authority Key Identifier:
keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e6:72:c4:f6:17:d3:55:55:85:d3:92:fe:9b:d5:73:0d:6f:
49:18:0b:98:28:59:b0:2e:1c:ef:29:63:1a:99:58:e6:ed:93:
d4:cd:1b:4e:b0:78:48:c1:3c:67:2a:93:0a:1b:f7:02:9f:42:
5d:e8:bc:dd:0d:10:3d:32:21:33:da:8e:b6:02:f7:5f:83:fe:
96:6a:e1:36:70:1c:ca:f3:32:86:b7:0b:53:5b:ad:34:f6:b2:
0c:1c:33:0c:f4:e0:ec:17:fa:86:9d:d7:85:e4:36:01:67:32:
6e:89:40:26:c1:b2:41:ba:7a:e3:ed:45:a0:ed:1d:6f:33:e4:
50:cd:b0:50:16:b3:1c:b7:09:11:d0:5f:99:bd:48:c5:6b:80:
39:85:04:84:4f:4c:db:4f:a0:e4:ce:97:8e:36:7b:d7:83:06:
93:d8:f5:70:2b:f7:85:aa:42:ee:66:e8:ca:3a:51:39:0f:5f:
20:b3:83:2d:8d:c9:d9:b6:86:c4:2f:aa:ff:03:ea:d9:26:06:
b0:c8:85:f5:d2:5b:7c:7a:48:e3:f6:db:d6:f2:39:aa:85:b5:
1f:c6:6f:6e:e2:24:b6:59:9a:5e:43:9b:5f:d0:77:a3:c6:c9:
20:4d:40:b7:bc:b0:04:56:be:f4:69:d1:05:dc:47:81:4c:96:
5f:67:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:51 2025 by rpki-client