Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier: BTCl9+jL+3pmfzbG0zBuauYGHfztu5siSZozn88/szY=
Subject key identifier: 6B:B2:CF:EF:06:5C:5C:FF:AA:72:B9:B6:9A:16:82:E8:26:69:AD:8F
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial: 03A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number: 039E
Signing time: Fri 31 Jan 2025 00:21:08 +0000
Manifest this update: Fri 31 Jan 2025 00:21:08 +0000
Manifest next update: Fri 07 Feb 2025 00:21:08 +0000
Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: f/loeCZzQpXTIrx2Pwv4znipmbfhG1V9iC53rst0M5A=)
2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: PLGw9NG/LDLAwYupVxB/HWVn7IiF43r6Nw3857fc1oc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Validity
Not Before: Jan 31 00:21:08 2025 GMT
Not After : Feb 7 00:21:08 2025 GMT
Subject: CN=679c1774-1bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:71:ca:bb:f4:0c:5e:32:6b:fc:4a:8e:39:
fb:47:c6:7c:41:a2:5f:fe:18:34:c5:f7:81:9f:9c:
ab:5e:3b:01:c3:ea:d4:e9:21:d8:bb:66:fb:6c:d5:
42:d1:b0:bf:62:cd:93:2f:aa:af:31:c5:17:40:54:
e1:dc:51:32:76:ae:9a:50:85:10:2c:8f:5c:f9:08:
50:6f:b0:21:8d:2d:67:50:21:1a:ea:64:04:76:cb:
40:1f:5f:7e:21:97:92:38:c2:0b:24:33:ea:80:e4:
cb:4b:33:1d:fd:6d:78:cb:9f:29:7f:94:f6:26:82:
d7:ac:ff:4c:e2:af:6f:17:2e:f4:fb:98:ab:e6:4d:
bc:57:f1:58:fe:1b:55:b1:ef:29:33:54:ab:a4:83:
07:57:c0:b7:fa:7f:d3:a3:8c:5b:b4:b9:67:93:15:
5e:7d:d3:e5:b1:25:e3:67:26:95:11:8b:1a:1f:b9:
d3:5d:b9:b5:b5:6b:54:9a:75:a6:1c:e3:6d:50:76:
bf:cc:63:f9:15:36:5b:c8:21:0f:24:a3:65:2e:1a:
4c:a5:4c:7d:33:f1:4c:f5:33:3d:4c:23:76:7d:32:
bf:6d:2d:7c:ad:01:15:9d:84:dd:bc:ed:75:b5:83:
12:34:32:b2:53:98:12:64:3c:3f:9b:1c:18:e3:8d:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B2:CF:EF:06:5C:5C:FF:AA:72:B9:B6:9A:16:82:E8:26:69:AD:8F
X509v3 Authority Key Identifier:
keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:68:c5:eb:8f:9a:37:d9:61:8b:44:55:87:9c:fb:65:4f:
85:72:b1:58:1e:33:e7:bd:fb:b6:29:67:ef:42:c5:f3:f2:6b:
f0:ef:08:a2:0c:e6:bd:75:41:4a:82:b8:3c:50:72:f3:71:f4:
69:61:b0:ec:d5:d0:99:7e:2b:3d:2b:0d:30:dd:8d:a2:26:6b:
ff:dd:c0:bd:ff:a1:4d:d8:f4:8e:95:44:e8:21:7a:cc:58:bc:
d7:7f:16:d4:73:b2:06:67:76:cf:a5:c5:33:9c:b7:a9:cc:8d:
2d:7a:62:7a:f9:a7:e8:54:b4:df:94:3c:87:72:16:7b:ea:44:
72:ac:c0:db:32:ff:9a:4d:75:97:73:9e:07:7e:ff:77:40:2c:
c5:65:ab:20:2f:91:f6:f2:42:29:64:16:d6:6b:e5:d1:04:b4:
fa:d1:90:48:18:ff:91:58:0d:dc:01:2e:8c:6f:4d:5c:15:b5:
b8:be:42:01:51:8a:7e:c0:44:90:50:59:ab:0c:e4:a1:3f:31:
46:4b:1f:a1:94:d5:8a:f6:6a:4c:2b:65:d0:78:ac:37:59:91:
b1:43:e1:2d:79:0d:db:66:d7:7e:7c:4c:72:e1:ad:6f:13:b9:
20:9d:0a:6c:b1:0f:5c:5b:2e:96:a9:9d:2f:0c:2c:43:80:cb:
20:45:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:50:04 2025 by rpki-client