Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json)
Hash identifier: NiGye2ePaRrVC/V3MZJ5wq+H5gVnnM1WoZj+GiZlrik=
Subject key identifier: 9E:89:60:B4:4F:B1:5C:72:A8:77:C5:9D:C4:76:EC:5D:4C:78:7B:8D
Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Certificate serial: 0577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
Manifest number: 056F
Signing time: Thu 30 Jan 2025 23:21:15 +0000
Manifest this update: Thu 30 Jan 2025 23:21:14 +0000
Manifest next update: Thu 06 Feb 2025 23:21:14 +0000
Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: 2LlXNTMVSCaiTU6Mhrzl9xSzKzg9NqRV5ryooLlvdew=)
2: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: lCYYN1i9IbJqwRctgnEOzzG7AOe1LHSeBCWruRPnC40=)
3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: 8IJ4hd5hgtTMjRCQeFaMZGfRaNHjTczEG5GeSYDk6qI=)
4: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: ZotghGiuMfOw+s3uuTOdkshmDTpBWNWmcIBqIc4IVro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399 (0x577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Validity
Not Before: Jan 30 23:21:14 2025 GMT
Not After : Feb 6 23:21:14 2025 GMT
Subject: CN=679c096a-ff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:94:0f:da:0d:05:0c:91:b4:42:62:4f:8f:
43:f8:3e:d7:16:85:97:2a:01:e7:a9:11:cc:5a:c3:
db:45:aa:2b:f6:a4:54:dc:cb:17:3a:8e:70:2f:5b:
9e:55:59:ad:33:ba:c0:d6:a1:b9:8c:8f:2e:f6:99:
4d:dc:39:70:b5:92:76:42:c4:4d:7f:68:2d:15:3b:
37:3e:82:91:29:9d:18:d6:fc:f4:23:25:6c:d8:16:
29:55:7d:6a:fc:24:e5:2c:45:00:93:6f:b9:27:86:
a9:b0:a5:ef:8c:71:4c:a2:86:8e:6f:85:19:05:a4:
87:00:62:d8:06:82:b6:d2:11:63:f7:22:de:e0:50:
d9:89:bb:54:ce:f6:2f:90:6b:87:28:58:e2:7e:d5:
ef:ad:a8:6d:da:0c:1c:6e:4d:39:7b:85:88:de:27:
67:3e:03:54:c5:95:e4:82:ab:66:3a:cf:69:e4:33:
da:15:c0:90:09:c3:4a:ac:6e:67:7b:af:b4:1c:34:
3d:64:54:12:3c:8a:c5:9a:7d:7b:dc:b1:cf:32:44:
70:51:62:ee:f4:ae:d5:da:2b:25:57:e5:21:bf:08:
5d:a2:49:bc:30:11:03:66:63:29:76:a2:6d:f4:25:
26:19:24:e2:5a:8f:b7:1c:9e:16:a7:0c:e2:48:b6:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:89:60:B4:4F:B1:5C:72:A8:77:C5:9D:C4:76:EC:5D:4C:78:7B:8D
X509v3 Authority Key Identifier:
keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:45:45:97:c7:f3:5e:8e:92:26:a7:0c:db:c8:da:c2:75:6b:
3d:a8:f0:03:d8:32:4f:30:3e:bc:26:ec:17:7f:57:78:34:23:
8e:19:1b:e6:d0:ac:2c:64:71:33:2c:ac:f0:d8:58:36:79:e7:
ab:0b:ca:96:e3:1b:f8:cd:0c:73:b6:87:75:a5:8b:bb:09:9a:
98:7c:23:8a:ea:d5:ac:85:60:63:c0:c4:9b:1e:83:48:74:73:
7e:e5:e9:d8:cb:c2:42:ce:57:f4:21:d0:02:a4:98:98:0d:5f:
e1:22:5c:e5:ea:3e:07:80:99:72:8c:56:f7:7c:6d:a2:4c:92:
de:24:72:7e:15:b7:1a:10:99:da:3d:3e:eb:9b:6f:24:21:b6:
e5:57:79:85:80:d4:b6:bc:62:08:32:57:29:67:fc:2c:f5:86:
9f:54:d2:a0:dc:be:5d:fc:b6:69:60:bd:72:f3:fb:2c:10:de:
4c:5e:27:0f:27:f5:93:43:f1:08:88:15:01:60:b3:ed:58:60:
54:b2:19:d0:de:d9:73:87:0e:9d:6f:33:3c:33:e8:93:2d:de:
bf:09:8e:82:2e:0d:88:0c:18:2c:80:94:1a:78:70:09:f8:d7:
f4:b8:b7:77:30:86:b5:b6:63:dc:c3:2e:af:23:d5:c2:d8:3d:
be:01:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:07 2025 by rpki-client