Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft
File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json)
Hash identifier: 5AtZjboYJ+vnV9vXGlRKLzjU5hHzQxDmPEQkP673Pw8=
Subject key identifier: B8:FF:EE:72:EF:4E:5E:17:5F:C9:D1:B0:7E:90:98:AD:23:46:11:C0
Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02
Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02
Certificate serial: 0BAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft
Manifest number: 0D17
Signing time: Thu 30 Jan 2025 19:03:31 +0000
Manifest this update: Thu 30 Jan 2025 19:03:30 +0000
Manifest next update: Thu 06 Feb 2025 19:03:30 +0000
Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: pQRvWQZmg9HsO1IvdTu5dkQq4Mcc11bJzIvFOSiH1+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2989 (0xbad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02
Validity
Not Before: Jan 30 19:03:30 2025 GMT
Not After : Feb 6 19:03:30 2025 GMT
Subject: CN=679bcd02-4242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:e4:6f:98:b6:e4:c3:6a:ca:ca:d3:0d:c5:
e9:bf:a8:cd:7c:78:66:4b:a0:06:3a:f1:aa:52:3f:
cd:85:e1:90:c0:72:5a:7b:68:fa:2f:a0:c9:3e:1b:
a5:c0:94:7a:df:bd:24:28:3d:6d:f0:4a:cb:57:d1:
6a:61:1c:c4:bb:50:41:5c:bd:4f:f4:b0:b5:c5:15:
6d:63:ec:9c:d3:f1:4b:96:01:56:c7:14:83:52:7f:
1a:1b:b6:c0:5d:d8:8d:b7:79:34:b7:23:99:85:d9:
cc:39:e1:43:1d:6a:aa:ce:cd:fc:bd:ee:4c:3f:d6:
46:7c:f3:b5:82:96:2f:f0:91:a5:da:f5:cb:fb:39:
70:82:99:a8:23:77:96:01:14:55:65:1d:03:11:3c:
74:55:7d:09:d6:8f:52:e7:be:7b:a3:18:c5:a5:ef:
85:0f:21:72:58:be:1a:3e:1c:e1:27:82:05:94:f1:
71:fa:74:3f:ad:67:08:a5:d5:a7:0d:db:e4:cf:4e:
db:1b:58:66:43:9f:e8:f0:15:9f:bf:bc:f9:48:75:
9e:fe:37:6a:5b:ac:01:a3:26:ce:a5:6a:01:b9:9b:
94:6a:74:eb:35:b8:eb:12:07:70:29:81:c9:58:ce:
fb:fc:ef:dd:30:ed:92:c9:ef:52:02:6f:01:9e:32:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FF:EE:72:EF:4E:5E:17:5F:C9:D1:B0:7E:90:98:AD:23:46:11:C0
X509v3 Authority Key Identifier:
keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:eb:78:34:bd:e8:65:c5:d0:c4:67:d5:1c:2a:9c:74:36:c8:
16:97:01:28:37:1f:7b:ab:dc:79:7a:64:32:8c:7d:ba:80:e4:
82:4c:fb:42:3d:85:65:d9:ad:13:7b:69:38:78:7c:f0:33:76:
30:63:ae:d7:31:54:79:a6:66:94:5f:d6:1f:cb:1f:bf:b9:92:
ac:89:eb:68:eb:0c:0d:00:2b:cb:9c:71:fc:ec:a5:cd:c6:d0:
d0:0d:0e:e7:31:6b:dd:4e:73:37:b7:16:8b:1d:58:b6:b3:93:
24:2c:8b:43:ce:25:4a:5f:2c:74:f0:9a:36:6e:a4:49:f7:3e:
71:8c:2e:c5:06:83:19:e0:9e:a6:56:8f:03:03:4b:69:af:fb:
7c:78:09:37:d6:0a:2a:c5:01:46:93:a5:5d:08:5a:dd:72:7c:
3a:f7:98:8a:77:e9:b2:67:3f:fd:5b:d6:7a:a1:b2:68:0f:0a:
3b:24:e7:50:01:22:a8:fa:d6:44:1a:65:67:ab:2e:39:e4:60:
f9:b7:d7:42:51:ad:8b:91:03:7b:e6:68:c0:c1:73:02:b4:e3:
4f:3a:39:6a:5f:02:bb:a5:21:b3:a5:a4:8b:ab:23:06:74:b9:
8c:66:a8:b4:e9:3c:b5:72:80:dd:b0:41:4b:bf:84:82:97:0b:
6b:dd:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:30 2025 by rpki-client