
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier: TZkAoQ8APKaQOaiphbqxnkDsJ16JVOk5Tvy1vSOpgEM=
Subject key identifier: 98:20:0F:89:E5:73:9C:6B:55:A2:9D:74:61:33:69:AB:92:E0:51:96
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial: 0BFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number: 0BF3
Signing time: Fri 31 Jan 2025 18:34:29 +0000
Manifest this update: Fri 31 Jan 2025 18:34:29 +0000
Manifest next update: Fri 07 Feb 2025 18:34:29 +0000
Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: nnor462z9SCRzsUderhl87RzUBbc311qvlXW9U8XUfg=)
2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: ReXGjvFy+TWrsr7RgwOcoe4seJnPX23TJX01LZAfVPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Validity
Not Before: Jan 31 18:34:29 2025 GMT
Not After : Feb 7 18:34:29 2025 GMT
Subject: CN=679d17b5-3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:d8:2d:98:ad:e5:45:2d:5f:de:c4:cb:a5:
09:30:0f:13:4a:38:6b:a5:2a:2b:3d:c9:dd:f7:f0:
6d:c0:8d:44:37:fd:ab:d9:b1:ea:6a:36:fb:f1:32:
6f:fb:15:fc:b9:7f:16:03:8a:a4:d6:b6:7c:55:d5:
4c:0f:ad:41:00:10:ea:b7:39:0e:15:31:65:03:c2:
56:7a:64:1f:a3:63:57:6e:ef:fa:9b:1c:91:51:89:
b9:d4:05:67:03:1f:f7:b5:5a:29:6e:e4:92:85:bc:
c2:20:e6:a7:00:fa:36:bf:e8:7b:3e:32:e7:bc:25:
da:48:52:65:35:5f:b3:bf:9f:20:c9:99:16:da:84:
f1:d1:a2:88:f9:a4:35:8c:85:7e:b9:76:bb:78:68:
ce:1e:12:83:78:0b:21:d6:58:f5:98:ce:c8:b0:ab:
2d:c7:29:e6:16:e9:36:0f:3a:ad:99:bf:8e:c0:01:
48:1f:84:4e:49:19:22:2b:3f:0c:9e:e0:38:d4:b8:
4d:88:93:3d:d3:b7:31:07:0c:8c:b7:f0:e6:a3:d1:
83:02:78:be:d3:6e:b4:60:7a:2d:a2:df:3a:f2:9b:
92:28:be:d5:f7:3a:19:af:01:3f:fd:e7:a2:a1:5e:
6f:82:d7:b0:7e:34:a8:44:c9:43:84:79:0c:2a:08:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:0F:89:E5:73:9C:6B:55:A2:9D:74:61:33:69:AB:92:E0:51:96
X509v3 Authority Key Identifier:
keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ed:f3:0a:ed:09:7f:5e:8f:07:2a:58:f2:ef:58:c7:30:8f:
29:9a:28:0a:bc:f1:bf:00:34:d9:5c:99:16:3a:c0:51:b2:5e:
34:bd:be:b6:12:28:c9:22:98:bc:23:4d:bc:33:4e:f8:db:22:
02:1c:44:74:27:96:60:7f:ac:33:26:7d:c2:e9:69:ba:f4:2e:
5b:9a:7c:66:52:8c:22:a3:d0:ee:ca:7c:d1:a7:e5:ba:e2:02:
d4:06:0f:fd:c8:3a:6d:9c:a9:f4:b4:7a:44:44:34:be:ec:2e:
d8:bd:fc:cc:94:45:8c:b7:ea:84:d1:55:2b:5f:0b:a9:e4:55:
75:bb:e7:c8:e2:ed:60:ac:f6:70:65:27:f0:b4:cb:98:8a:86:
2f:3a:58:c0:dc:2c:a5:f5:52:bb:e6:1b:2a:dc:a4:82:95:0b:
51:80:51:9d:d1:e5:2e:3d:f9:dd:6d:7f:c9:26:ff:ef:c2:6b:
e9:e0:a1:ee:d0:7d:84:db:3c:4a:67:64:54:16:5f:7a:4f:82:
ed:6d:8d:29:b9:86:08:2a:41:dd:c3:9c:f6:ea:54:5a:4d:e8:
46:e3:0d:5e:ca:03:e9:db:76:04:c6:9e:32:61:9d:05:9f:f6:
b3:76:a1:4e:fe:4d:ea:a5:a8:c7:38:0d:76:21:3d:98:9a:b2:
4f:da:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:41 2025 by rpki-client