Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json)
Hash identifier: KXMMY8sWORKOv7qaJOlypusoZirA8yO4hE+Rd5PjrU4=
Subject key identifier: B3:1B:13:72:80:4B:09:10:88:C7:BE:FF:B1:08:51:87:A6:4C:11:ED
Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
Manifest number: 0BFE
Signing time: Fri 31 Jan 2025 18:30:23 +0000
Manifest this update: Fri 31 Jan 2025 18:30:23 +0000
Manifest next update: Fri 07 Feb 2025 18:30:23 +0000
Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: ycTM/PhhZ1c4MmCDR9r6Aqjlyto5Uu+Qz2DQQRZQCds=)
2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: Ykh/ajdiEQ6UqJC1nIow2mRMlvxbjVdtujI4Th0ysiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Validity
Not Before: Jan 31 18:30:23 2025 GMT
Not After : Feb 7 18:30:23 2025 GMT
Subject: CN=679d16bf-cc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:89:9e:be:25:5e:b1:8c:b6:7a:74:51:3d:
25:b9:2d:07:c3:0d:ec:88:ea:6c:68:79:d5:db:5c:
b5:d2:d9:78:9b:e1:e7:6f:9d:29:e0:80:97:9c:8c:
93:8b:3e:0b:03:90:73:c0:8a:2b:4b:63:c3:6a:ea:
e0:07:38:72:5a:8e:ef:75:2b:33:8f:e8:8e:d6:2f:
8e:15:8c:17:67:b4:36:5a:65:f6:23:00:f6:8f:a3:
d9:0e:cd:5d:75:85:5f:12:b6:04:3b:2e:ac:75:6c:
4b:db:92:1c:3e:48:cc:4d:0f:40:50:89:0b:80:f7:
de:0d:30:08:5e:85:ce:46:22:d9:7e:10:20:e3:3f:
a1:83:df:f3:31:67:c9:ad:09:af:ea:01:0d:bb:d4:
b6:ea:7a:d8:fb:fa:40:f6:fc:b6:aa:a5:84:df:9f:
6f:98:57:cf:6b:02:c9:e6:de:46:fe:3c:1f:bc:80:
5d:e2:4e:d8:f2:a2:b4:82:d9:0d:cd:04:14:2d:a1:
76:90:eb:ce:9a:ae:9f:d0:e4:ac:8d:6a:53:33:f4:
47:f7:a6:1a:3b:d6:55:68:b4:6b:63:57:df:9d:fe:
4c:08:4b:43:32:e0:fc:57:1b:3c:ba:37:eb:9d:9c:
58:7a:ea:53:44:2a:bc:f8:56:49:b3:b0:6b:54:1c:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1B:13:72:80:4B:09:10:88:C7:BE:FF:B1:08:51:87:A6:4C:11:ED
X509v3 Authority Key Identifier:
keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:d3:30:5a:d9:60:ef:d1:6f:93:ee:7f:da:7e:2e:45:fa:
64:9e:dd:d0:c6:27:97:8f:d0:de:d6:ef:c4:65:dc:e2:09:cc:
76:69:7a:fa:9a:0b:24:ae:3e:ff:f5:f4:1d:3c:67:36:19:40:
42:71:5a:6e:19:fa:24:6d:29:f1:52:99:f3:7f:5b:74:b6:13:
3e:09:e2:0e:60:44:d0:56:0c:1e:63:4f:59:c9:e9:33:2d:cc:
e0:1e:51:f8:95:c3:85:68:19:10:ca:5b:9c:c1:db:51:7c:c1:
96:71:27:d6:a2:2a:a6:94:f8:5d:72:5d:7c:37:ec:08:d7:99:
17:6f:63:3b:ef:c3:97:fa:fb:d7:f1:c1:b6:d4:ad:85:be:cf:
f7:4e:fd:72:7f:ad:2e:aa:54:21:c0:9e:99:eb:5a:7a:49:a9:
b0:14:e7:c2:b7:c9:90:eb:cb:c4:91:3d:bf:c1:40:96:2a:f2:
fe:de:f2:88:0a:8e:95:d5:7d:22:c0:d0:f3:05:fe:94:c5:a7:
36:be:77:9e:e1:77:f1:3d:ec:2b:31:08:78:a4:6c:2c:a7:39:
f3:b3:59:80:28:5e:6f:ad:29:a3:85:8c:fb:68:95:83:00:17:
b2:c5:ed:74:a1:0d:d3:38:fe:42:79:d9:f0:6c:e2:42:4e:5a:
bb:27:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:35 2025 by rpki-client