Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier: tAYWsvgfNagdHqHIz9DoHexP3BS+Mxhb9ADwOv+Zqvw=
Subject key identifier: DA:6E:B2:DE:BB:80:1B:DE:DD:BA:28:3F:77:67:5E:9E:33:D0:8B:98
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 05B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number: 0594
Signing time: Thu 30 Jan 2025 23:22:32 +0000
Manifest this update: Thu 30 Jan 2025 23:22:31 +0000
Manifest next update: Thu 06 Feb 2025 23:22:31 +0000
Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: YB1B+c2Ab0TmHMi+hIvsdoNrUfpzN6kOsX5GiuYC6ok=)
2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: tzTNsTyay71DnZ6Tdbo+sDlbNh8WzoY7t1vlYqQ5Tec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Validity
Not Before: Jan 30 23:22:31 2025 GMT
Not After : Feb 6 23:22:31 2025 GMT
Subject: CN=679c09b7-2216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:29:63:e7:93:be:6a:ab:12:00:da:a4:5a:
df:b9:ae:be:45:7f:5c:c6:e9:89:d6:dd:7e:33:76:
97:01:fc:7f:9e:e5:5b:a2:87:db:6d:d1:f3:a6:d7:
1d:55:54:d2:0d:34:ae:f7:7b:e6:ff:5e:b9:99:6f:
fb:44:fb:a6:82:19:c3:51:8e:ef:ea:17:25:97:27:
91:f9:0d:5e:e7:c8:e7:d8:6f:0b:15:a9:58:4e:65:
8f:df:24:0e:e3:75:50:1a:3e:fc:9d:63:97:6e:c0:
4b:a7:4a:1b:70:ef:cd:70:ff:34:28:b3:f2:45:df:
86:d3:e6:b1:b9:ea:57:ac:93:e8:75:a6:74:7e:0d:
b9:4b:37:4c:f3:58:83:81:7c:f2:4a:d0:36:04:86:
97:d5:e1:6e:14:aa:4d:a6:c0:4f:38:e6:a0:2b:d3:
82:97:b7:af:57:f7:14:eb:96:26:2b:16:33:35:94:
92:b9:07:37:61:17:9b:f7:04:52:99:7a:5c:24:ae:
04:e4:0f:ad:da:d0:86:e6:ce:ed:07:12:15:64:43:
b9:e8:b6:ed:ac:a0:75:20:90:47:25:f3:94:a3:9f:
dd:73:16:15:8d:44:86:7a:af:51:a5:a6:83:b7:01:
13:46:03:fa:ae:aa:b1:e6:f6:bb:0e:7f:b6:04:b4:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:B2:DE:BB:80:1B:DE:DD:BA:28:3F:77:67:5E:9E:33:D0:8B:98
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:44:a1:3f:20:65:11:be:11:3c:f6:bd:7c:0d:9d:47:0e:7c:
d9:e1:ec:e2:8b:53:c9:8e:86:c9:9a:0e:b9:15:21:b8:95:c9:
4a:62:a5:c5:90:02:d1:0f:fa:bf:e0:ca:61:2f:8e:08:1e:29:
87:08:23:31:d3:ae:f1:6d:b8:5e:fd:a4:83:c7:f3:fc:3b:5f:
af:b2:68:cf:b8:e9:39:74:79:56:20:fd:98:d4:82:1a:4c:13:
3f:fb:e4:b0:15:91:de:58:86:ad:02:a7:70:d6:30:c1:3e:94:
60:a1:9d:55:4e:9f:fc:f6:43:65:9d:2a:54:48:58:4b:06:eb:
d9:59:5f:e8:a3:82:20:9f:9e:a6:1f:2c:61:b3:a9:03:28:71:
9d:61:21:db:f1:9c:d2:21:39:65:4c:02:53:53:47:58:86:76:
e0:46:5d:64:27:cc:8c:71:51:cb:0d:aa:6d:ae:8f:55:19:ae:
41:31:39:2d:bb:b2:a4:7d:54:31:d2:d5:06:e3:c6:3b:81:16:
af:b3:a7:2c:ff:6b:54:da:23:a6:f9:e3:1d:e8:b1:2e:d6:ae:
fe:5b:62:b9:ed:12:8a:6e:6e:99:df:af:df:87:b0:32:a2:6b:
dc:05:c5:bf:9e:98:e2:cb:9d:4f:a5:24:ea:5c:03:54:93:04:
91:50:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:40 2025 by rpki-client