Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier: gV4UwN2/7XkT/imeFxgdgiDVJiZdoFWknk8AOr2JdFw=
Subject key identifier: F1:FE:7F:13:3A:E4:B6:AC:9D:AE:BB:3C:43:AD:95:C3:CB:F3:B9:67
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial: 0770
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number: 076A
Signing time: Thu 30 Jan 2025 21:22:18 +0000
Manifest this update: Thu 30 Jan 2025 21:22:18 +0000
Manifest next update: Thu 06 Feb 2025 21:22:18 +0000
Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: O6EpdOEwjbx3+zqQf9XrPQytgUkhD/ev8aLFGZgxtMQ=)
2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: f+tqP307alHmtL4Nv8/Sj5RxK8BZomyv0PqPMhlVuTE=)
3: 83B284AEB54F11EF8F5EE86FC4F9AE02.roa (hash: DfjAP4F+b7VdurvxdjrAlhP/yG1ojER19VQC4yTE15s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Validity
Not Before: Jan 30 21:22:18 2025 GMT
Not After : Feb 6 21:22:18 2025 GMT
Subject: CN=679bed8a-b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:74:3d:00:94:ae:49:89:2b:cf:81:8c:03:
3a:b1:49:b7:9f:82:80:91:d6:cb:56:d0:17:c4:96:
fb:53:1d:80:95:5c:d9:02:65:84:e9:d2:6c:41:b9:
df:bf:4a:ed:e5:65:ec:b3:e8:a5:49:3f:3a:16:a0:
f4:5e:c7:df:23:7e:f5:5d:af:65:7a:1c:a4:6d:ee:
ab:6b:a7:12:83:85:18:dc:9e:a9:51:bb:47:73:c0:
71:77:6e:3b:e0:33:40:43:a2:a5:ad:65:36:1d:92:
b9:a0:1d:70:ea:82:46:28:69:de:14:71:37:e3:cd:
0f:e0:2e:9c:dc:e6:53:94:23:c3:7a:95:84:85:74:
75:1f:20:c7:f4:53:f1:f6:62:f3:1c:09:67:bd:ae:
c0:4b:1a:43:e9:0a:58:9c:d5:d6:60:af:22:d9:98:
a4:3e:e8:94:06:7e:fc:27:1f:e9:b5:0c:48:9c:78:
6d:65:1b:c2:a2:66:af:f0:52:cb:a0:2a:fa:a2:67:
9c:ad:c3:fe:0d:68:3e:cb:3a:7e:cb:35:e8:7d:5d:
06:ec:b1:f8:68:ae:80:25:92:4b:7d:b9:f1:4a:db:
9f:19:6b:de:1f:c6:c9:97:85:16:42:79:4e:31:57:
99:a3:fc:0a:9e:d1:9a:b4:12:7a:6b:cb:cf:5e:a2:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FE:7F:13:3A:E4:B6:AC:9D:AE:BB:3C:43:AD:95:C3:CB:F3:B9:67
X509v3 Authority Key Identifier:
keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ce:94:6d:6d:aa:84:1b:9d:a3:33:75:e7:dc:73:ce:2c:74:
1b:2f:1d:82:c5:ab:ab:d8:1e:90:61:b5:32:d8:3a:74:f1:91:
58:06:97:5f:5a:ad:dc:cf:4b:28:47:70:f1:60:54:5c:03:40:
a3:54:f1:d2:13:51:11:b0:72:e0:60:3c:48:18:09:dc:bb:80:
ca:f9:8c:fb:34:34:25:75:65:e1:60:5f:0c:3d:47:ac:76:c5:
3f:6f:47:0e:05:2d:4b:f3:78:94:5e:2f:80:01:42:aa:1b:eb:
42:9b:7f:53:51:de:ca:c6:d7:b5:9a:b3:90:25:19:3e:df:c3:
4a:4f:be:06:f7:e8:30:bc:3f:69:8e:2c:b8:8e:43:de:bd:6b:
52:5a:a1:c6:61:85:d4:45:8b:a7:2b:a5:3a:44:02:4f:b8:89:
7a:c1:7e:c1:d5:6b:0c:8c:73:46:09:78:51:2f:f1:81:76:67:
c9:3c:f0:00:06:50:8f:e1:a6:ae:f2:79:84:c2:ec:cf:ab:0e:
a4:fe:0f:09:54:82:7f:d8:94:ca:cc:c4:1f:d3:04:fd:a6:4f:
c3:22:47:bd:4c:75:0d:7e:ed:be:99:45:f9:63:9c:4b:a7:ae:
cf:1c:3b:d3:1a:69:3d:0f:06:d2:d8:b3:25:e1:70:f0:1c:16:
4f:ec:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:05 2025 by rpki-client