Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json)
Hash identifier: GMMvec+Vf4I+DaOQSeR5Lklf9nDoEn9ygBj1RewpCPY=
Subject key identifier: 6E:D1:5C:4B:0A:AB:32:F0:4B:13:A3:91:63:BE:F3:D7:83:22:6A:8D
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
Manifest number: 0BDB
Signing time: Thu 30 Jan 2025 19:03:05 +0000
Manifest this update: Thu 30 Jan 2025 19:03:04 +0000
Manifest next update: Thu 06 Feb 2025 19:03:04 +0000
Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: jKSeNYuzmBLFyssXoI9qJ8qpFRCA6ev+DO+A3/sNokY=)
2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: CGy5xeA/R04EEe+9BMCjpd9tn/JSS5izmnErdKNLMSk=)
3: 3B84FE56A8DD11EF95A59966C4F9AE02.roa (hash: VKmfv5i+eSAJE895I7T6V3irZF1QAbmZmndIgWhdzpE=)
4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: Da7Oq+gy8JjH2/2kLIZfGFO2TVEISlU4H2fgWS1x8V4=)
5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: 5ix6TXQdDGiTg3sIxgSP6CSbbOhBSuDftWpLz4sc6TI=)
6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: 6CKNYrxn6uuhIzBVf2WpYIgqxuMLibqV+ZHFdmrqlEY=)
7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: zEcAoH6Tp/2QV/N0ADzgdcdiJXIraNxY9bGSgI8p4Ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Jan 30 19:03:04 2025 GMT
Not After : Feb 6 19:03:04 2025 GMT
Subject: CN=679bcce9-ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:16:da:72:c6:5e:3f:a0:73:84:0a:79:8d:
6e:55:8f:c8:b3:63:3b:7a:1a:8a:2a:93:ac:99:9c:
36:77:1d:6f:fc:6b:38:60:86:1d:65:b6:24:19:10:
0f:96:fd:bd:44:14:da:f4:97:41:d8:47:1d:d6:d2:
60:9a:34:1a:73:31:32:f2:7b:f2:cf:9b:d0:da:3a:
58:07:48:b0:f2:7b:08:96:c3:04:cf:fc:16:ed:bb:
1c:7a:e9:92:79:ba:60:05:72:24:14:5d:ff:ef:1c:
20:96:b0:aa:53:1b:77:74:5d:4c:4e:37:2b:96:26:
8a:e0:92:74:58:65:3b:27:30:0d:87:7f:34:66:bb:
d6:ec:ea:35:5c:e1:4f:eb:4a:e4:06:2f:9a:a1:8e:
c9:3b:b4:7c:94:f0:99:9b:d5:59:ab:57:c9:a7:10:
e7:0a:22:0f:69:0f:73:18:46:9f:d3:8f:86:ab:3f:
63:73:df:20:de:15:53:38:15:f6:ad:de:df:3c:94:
2c:51:b5:43:1b:31:34:e1:7b:1f:ca:52:5d:bb:9d:
cc:34:50:5f:c0:85:f2:1a:e9:00:dd:42:fe:fb:c0:
fd:e6:12:12:df:68:2d:b0:5d:6f:af:bc:10:fb:3e:
54:4e:51:1a:70:00:d7:f3:76:d0:0a:d2:00:09:13:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:5C:4B:0A:AB:32:F0:4B:13:A3:91:63:BE:F3:D7:83:22:6A:8D
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:24:4a:80:1f:13:8e:7c:44:32:ce:c3:47:87:1c:a3:34:
73:7f:11:9e:08:31:d5:c0:33:ba:ac:54:16:3e:ce:fd:a4:bd:
c4:c5:d1:80:32:65:22:09:5d:c7:67:fd:03:e0:fa:c7:d9:cc:
6f:99:3a:e9:a1:6b:e4:a1:09:be:1b:76:19:c6:57:4f:9a:fe:
89:ff:7f:3d:d0:70:ae:96:96:92:d0:b4:98:79:cc:64:5d:ee:
9b:1f:e7:61:8f:0f:d6:03:fb:05:20:d8:d7:dc:ce:e8:09:3e:
e6:ba:7d:f2:aa:52:dc:80:ff:87:94:d5:04:40:57:a4:f1:9e:
9e:30:11:e2:90:db:bf:80:1f:53:51:a5:11:3e:93:4f:87:79:
25:04:d8:af:65:f1:2c:13:37:a7:78:e2:a3:7b:01:77:3f:f4:
d8:3c:45:66:fb:63:74:00:88:03:da:da:06:02:ca:d5:be:41:
ec:10:ac:b0:41:ef:e8:32:06:f4:ee:2c:96:07:9a:24:1c:1d:
6f:1b:53:d7:0d:9e:69:88:8e:e3:f8:26:9b:d5:67:82:e7:72:
f0:0a:b0:54:63:38:dd:47:b9:ec:94:1f:4f:58:5c:56:29:03:
21:f6:61:78:16:c5:9e:c3:f4:6f:14:34:fc:1a:e4:b9:6f:5f:
21:f9:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:15 2025 by rpki-client