Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier: TotSrt3VtJrU/EBxqJN13AjNO1+A6iTeHJIb5dDykC8=
Subject key identifier: CA:E9:DD:A8:34:F8:7F:9B:8E:5D:6F:C9:54:A0:05:FC:8C:12:9F:EC
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number: 02BA
Signing time: Fri 31 Jan 2025 01:11:22 +0000
Manifest this update: Fri 31 Jan 2025 01:11:22 +0000
Manifest next update: Fri 07 Feb 2025 01:11:22 +0000
Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: 5eyXhgjKf653yKhVpjXHJ2ISQBTHJog27RQYEtLYjVo=)
2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: PU6naooXvRoDV33LBTNRBxRANbQSj2Y43wiSsnkhFEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Validity
Not Before: Jan 31 01:11:22 2025 GMT
Not After : Feb 7 01:11:22 2025 GMT
Subject: CN=679c233a-435a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:5b:4e:3b:a9:0f:77:bb:ac:ca:d8:e9:26:
6f:76:24:5f:08:26:52:70:93:c9:cc:a6:7f:06:8b:
14:28:f7:77:26:da:05:6b:4f:55:be:0f:07:ee:61:
37:e1:01:3f:14:9a:e6:13:b3:d3:28:0e:a7:ab:18:
d9:66:7a:24:30:59:46:c7:e2:9c:6d:be:4f:1a:cf:
a9:83:a2:1d:25:a0:9c:b9:25:0f:ab:8d:21:d9:54:
28:8e:47:f7:18:3e:25:a9:cb:76:45:7b:fb:e8:7e:
12:98:b3:c2:36:c5:da:92:99:49:e5:95:0d:2e:53:
55:2f:f7:0e:f8:89:78:27:54:2d:2f:5f:20:ca:a1:
36:b9:11:b4:61:95:df:8b:1e:a4:7a:4d:a9:3c:82:
bd:43:0b:50:72:97:a9:63:42:60:f9:c8:c9:12:d9:
a5:75:06:a6:2b:61:5a:16:b7:6a:6e:ad:ee:8c:4b:
fc:4d:0f:d4:e2:fb:66:6d:96:e3:3c:7a:84:63:11:
df:f7:be:30:ed:10:31:85:6a:f7:9a:f0:c2:03:ba:
18:1c:c2:d1:fd:6b:00:8d:ca:7a:3a:90:a5:25:4f:
cf:18:c7:f8:0c:58:97:2a:94:40:c6:70:9b:94:53:
fd:94:06:6c:2f:9e:57:aa:33:0a:3f:3d:05:5b:f0:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:DD:A8:34:F8:7F:9B:8E:5D:6F:C9:54:A0:05:FC:8C:12:9F:EC
X509v3 Authority Key Identifier:
keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:5e:9b:1e:41:1f:56:87:5a:0e:ec:ad:b2:aa:d1:11:35:
12:f3:21:55:a6:51:d6:e6:da:c4:5f:45:05:fb:af:4a:50:71:
63:68:39:1a:2f:f9:74:23:76:56:5e:4c:64:86:cc:a4:84:08:
8d:c0:70:74:50:54:41:5c:d3:28:03:58:7f:6e:e4:85:b6:8d:
44:8e:e0:ee:57:e6:18:0c:fc:d0:04:a8:01:1e:58:91:1b:9e:
94:97:02:42:f3:d5:0e:18:73:eb:c7:43:63:85:45:3c:30:0f:
61:05:06:30:39:6c:82:17:f1:8f:57:76:65:78:bc:8c:a1:07:
91:1a:66:7b:a9:b7:0f:ce:40:b3:46:26:e5:6d:7f:65:f1:c5:
dc:37:94:26:36:62:00:b4:e3:96:76:9a:32:69:af:0e:29:9a:
93:af:53:3a:ca:b6:a2:df:54:c5:f1:f5:5b:f6:31:61:c9:44:
94:41:32:47:51:0b:b1:c6:21:9c:ef:7d:ac:53:1f:34:74:c7:
c3:06:53:af:52:8e:70:6d:15:04:c0:17:10:8d:97:78:0d:38:
00:b1:91:be:5b:66:0a:cc:ff:ff:b3:a3:f5:97:16:cc:69:a2:
24:1d:7c:a4:9a:6e:05:a3:ee:d7:db:7c:af:f9:de:ba:e1:9e:
47:9c:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:41 2025 by rpki-client