Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json)
Hash identifier: 8BS8k7ZWMcq63h2X5gUu1xaHKpELi37UTz7BDZ5Hduw=
Subject key identifier: 5D:58:8E:6F:7C:5B:DC:60:F1:D9:B7:F1:84:C8:33:93:2B:E5:19:BE
Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Certificate serial: 0936
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
Manifest number: 0919
Signing time: Thu 30 Jan 2025 20:25:24 +0000
Manifest this update: Thu 30 Jan 2025 20:25:24 +0000
Manifest next update: Thu 06 Feb 2025 20:25:24 +0000
Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: xhJruKkKH4KqJpiNu8pfXJrNCx6sgQy4kdtM3CCDboI=)
2: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: l3rdDpZz30YsSC80nrWoniyy/AfdmnICXGfhctuIIDk=)
3: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: QLB059PUHE1UbeMH66LaVQjEVmCcXSDSbvOoBGw3o3I=)
4: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: ofC7tglYcEt0K5DgsHyHVWTgOvFGFcBwV3e64Pwy/mA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2358 (0x936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Validity
Not Before: Jan 30 20:25:24 2025 GMT
Not After : Feb 6 20:25:24 2025 GMT
Subject: CN=679be034-9bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:46:31:25:f5:a2:62:e8:e0:76:77:dd:32:
48:71:13:fe:dc:0f:82:8c:ac:7e:50:2e:b8:68:6b:
34:bd:22:1c:b7:30:7d:9b:15:d9:e9:a4:da:3f:8f:
72:d8:18:5a:d3:e0:b1:e5:e1:bc:da:42:29:f2:a3:
27:46:bd:1e:5a:04:94:85:a7:f5:0b:56:2b:48:ad:
a1:97:25:65:90:e1:cf:bf:d9:74:d3:a5:d4:d6:18:
7d:05:98:63:d1:8e:25:5c:7e:54:59:98:76:77:1f:
b8:01:84:d5:35:db:ab:16:1c:8a:de:66:bd:bd:9f:
1f:46:a5:96:dd:f3:c0:03:af:e0:02:5f:6b:50:2b:
bf:f3:55:df:90:88:88:51:26:1b:17:5a:57:fc:b9:
18:26:85:8e:49:dd:e1:28:6d:fd:99:f1:48:d5:29:
f9:81:2e:1e:d5:91:ef:90:74:8a:22:4d:fb:87:b6:
3d:72:08:da:50:27:57:58:2d:2d:d3:7f:4b:34:ab:
94:96:16:60:d3:55:0b:e9:12:81:87:de:10:5c:2d:
ef:f5:d7:ac:13:6f:76:6b:ea:9e:d0:76:39:1a:c8:
ec:45:7a:f4:b9:03:cf:79:ba:74:f9:aa:84:98:1f:
31:f0:44:12:1c:fe:05:26:bc:34:a3:65:a7:bf:b0:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:8E:6F:7C:5B:DC:60:F1:D9:B7:F1:84:C8:33:93:2B:E5:19:BE
X509v3 Authority Key Identifier:
keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:60:c9:e1:3b:14:5b:ea:f6:37:d6:0e:ec:bb:ed:c1:b8:
9a:6d:61:e1:d2:22:44:45:7c:38:a5:33:e9:be:1b:44:b9:10:
d5:f0:40:17:0d:3d:df:89:5d:02:37:67:29:b3:ee:f0:ff:be:
5a:7a:23:d5:2f:54:4c:62:a2:86:34:d2:8b:60:57:02:61:7e:
17:de:74:14:61:8d:fa:1a:fa:a4:54:ee:53:8f:c4:a6:ef:3a:
0f:d8:f8:4f:d6:22:76:a3:f8:89:de:b3:6a:77:ca:82:63:85:
66:e0:2c:f5:be:f1:4b:65:76:82:ee:85:1d:7b:be:85:ab:99:
36:21:23:36:85:39:0c:a8:de:fc:43:77:65:14:b7:1d:3b:2a:
a9:fb:ef:bf:e5:28:88:cc:89:67:51:fa:4d:73:9b:31:31:06:
23:b3:32:fc:3e:75:83:9e:6d:58:f2:3a:22:38:af:9b:c9:cf:
7f:a1:72:6f:c7:d8:2e:66:34:48:a4:b2:b6:b0:35:8e:00:a7:
0d:69:84:e0:c2:5d:09:ff:4a:41:31:98:8a:3a:e3:42:5b:a3:
96:59:9e:a8:44:70:62:9e:25:35:70:98:02:39:ec:6c:6c:d2:
50:18:2a:98:48:67:73:19:6f:6b:66:54:15:3b:03:a1:d6:e9:
2f:a3:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:01 2025 by rpki-client