Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json)
Hash identifier: gEE9K/Poy+WJTidm9CORiiiWdSHyBkDo8i6vubQg+kE=
Subject key identifier: DE:EE:9F:5B:2D:0B:F2:E4:D9:F8:31:8A:2C:03:65:B6:77:A6:71:3C
Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Certificate serial: 039B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
Manifest number: 0397
Signing time: Fri 31 Jan 2025 00:50:54 +0000
Manifest this update: Fri 31 Jan 2025 00:50:53 +0000
Manifest next update: Fri 07 Feb 2025 00:50:53 +0000
Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: saM3sfvV5eAulPYF1sIbuo3g3uzvbNtkIwAD37EQMB4=)
2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: xOZ12cOlEG5/7TsMkSxP626Z5sclYlovpXozWoB9tWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Validity
Not Before: Jan 31 00:50:53 2025 GMT
Not After : Feb 7 00:50:53 2025 GMT
Subject: CN=679c1e6d-4efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:2d:ed:51:bb:b8:d0:f0:21:e6:a5:23:e8:
c2:3a:5b:71:d8:67:97:3a:50:cc:54:36:19:4b:41:
81:89:4c:a8:b7:68:f1:5c:fe:0b:9e:ea:3c:06:93:
da:ca:f0:14:01:fd:5b:d1:00:dc:a6:d4:c5:d7:ce:
57:cd:8f:76:0a:39:6f:f3:61:2a:a0:4e:76:13:c8:
97:3b:7e:8b:ed:4e:96:3c:d8:f1:40:e9:c0:58:64:
15:0d:3d:03:6d:94:df:58:f2:3e:f4:76:b3:4d:ca:
95:07:b8:09:97:4d:5b:fc:9d:fd:ca:d5:b3:70:73:
e8:a9:f3:9b:24:4b:a9:12:0d:29:44:c8:96:af:47:
8f:32:78:60:34:8f:90:03:3d:e3:ed:59:ab:66:b8:
9e:f3:70:48:06:c8:b7:3a:d6:35:ae:dc:dc:fb:2f:
55:2a:42:ab:10:e3:a6:fc:8e:27:a7:74:8f:46:32:
4c:b2:7f:f3:f1:55:bd:ea:57:c5:0f:90:1f:72:ba:
79:24:38:b1:2a:8a:2c:cb:e3:93:84:95:e2:5c:d8:
51:0b:3c:cd:21:76:b9:ba:a6:ef:8c:95:a6:09:b1:
81:41:39:26:81:76:60:3e:08:dc:ce:eb:fe:69:70:
e2:68:84:f8:ac:8e:a7:bf:6e:1d:af:f8:09:12:ed:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:9F:5B:2D:0B:F2:E4:D9:F8:31:8A:2C:03:65:B6:77:A6:71:3C
X509v3 Authority Key Identifier:
keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ca:e9:14:2a:45:88:42:b3:a8:50:5f:4a:cf:22:c6:90:c2:
94:43:be:db:53:85:2a:66:0a:ae:55:7c:6b:b1:e3:e4:16:c2:
bc:ca:a6:b7:63:7f:62:f2:ae:6b:6c:1b:2c:f5:38:0a:39:2d:
06:fd:d5:c9:40:19:34:f4:a4:9b:ac:ca:d2:3a:01:fb:b0:37:
0e:b8:9e:5c:d1:0f:f9:ed:ff:13:5f:f5:fc:0e:7e:59:9a:01:
d2:ea:ab:79:a4:ca:45:22:0a:26:21:2f:c5:63:03:ab:ca:e8:
5d:42:bf:40:1f:42:8c:f8:ce:a5:c2:4e:76:d8:d0:32:86:d0:
7f:95:33:18:51:e1:5c:c8:70:31:f4:3d:c6:b9:3b:9a:22:a0:
34:e1:4a:eb:90:67:96:be:fc:c9:e1:a6:02:5d:6c:1e:4e:10:
a6:fe:f5:6b:19:4b:3f:90:eb:a7:bc:59:2a:7e:97:f1:01:7f:
4c:f5:b9:c6:55:4d:ad:58:3d:a0:7f:21:2e:ca:0e:15:c6:1b:
db:fe:6d:aa:2a:de:93:69:30:f9:34:83:b1:fc:28:89:bb:72:
92:65:3e:f0:a8:af:25:24:88:c4:9f:92:05:78:1e:68:b2:12:
6a:e5:07:06:65:79:d5:b7:7b:44:f5:8a:48:03:39:e6:a2:fd:
98:ae:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:35 2025 by rpki-client