
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier: IO8vL600SETc25fBkiU4DYRYZdKqG4OS+0cVMHW3qAM=
Subject key identifier: 29:4F:A2:18:47:52:29:6C:EB:4D:57:CC:32:1F:54:58:26:1A:F0:3A
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number: 051C
Signing time: Thu 30 Jan 2025 23:37:32 +0000
Manifest this update: Thu 30 Jan 2025 23:37:32 +0000
Manifest next update: Thu 06 Feb 2025 23:37:32 +0000
Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: P8oFItYtwRhxd6xEMUJwrJ7zBmZMBxfyX7h/limgEKQ=)
2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Validity
Not Before: Jan 30 23:37:32 2025 GMT
Not After : Feb 6 23:37:32 2025 GMT
Subject: CN=679c0d3c-b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:6d:02:6a:f0:9d:cc:07:33:6d:dc:a4:83:
a5:3f:d0:62:c6:33:37:ea:34:d8:6c:6b:f7:18:48:
af:ff:c9:8b:4b:83:8c:6b:33:e9:c0:0b:de:cd:c1:
a4:94:e4:b5:e1:dc:6e:ab:2e:f2:bf:19:de:7f:3f:
ad:39:52:87:80:5d:3c:c7:10:30:27:2f:40:b4:08:
69:1a:3b:e5:9e:08:b5:17:fb:25:b6:d3:be:01:9c:
3e:d6:24:c2:9e:7c:c8:8e:d6:15:b3:c8:36:ae:e1:
b9:69:75:e4:f8:f5:e5:05:fc:84:4a:c4:c1:ac:2b:
88:22:99:d5:1c:db:3b:05:ba:c7:fa:d2:f4:ed:13:
55:76:c0:7f:07:9f:df:b5:49:bc:9e:de:2f:3f:aa:
fa:bc:0c:b9:9f:b0:e8:91:b0:45:9c:68:ec:b7:3d:
66:22:4d:88:00:fa:27:ad:16:80:e5:92:ba:e9:90:
b9:9c:1c:ff:ff:0e:a6:a2:e3:c3:4c:57:0d:3e:e3:
6b:6e:3a:b5:f1:43:2e:65:ab:ce:7d:6a:c8:fb:23:
53:f8:fc:b6:5e:20:b5:c5:c1:cb:2b:fb:c4:f3:f3:
a3:ff:ce:a0:d4:ab:40:62:8b:64:04:00:79:07:33:
42:bf:06:5a:dc:1f:ed:f0:3d:d3:e8:89:de:51:b2:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4F:A2:18:47:52:29:6C:EB:4D:57:CC:32:1F:54:58:26:1A:F0:3A
X509v3 Authority Key Identifier:
keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:18:7f:15:27:04:6a:0e:cd:93:d6:14:9a:ed:f1:be:61:04:
69:0d:0f:84:eb:62:db:2e:99:49:98:49:5c:0a:de:67:34:ea:
b8:21:c2:5b:e2:7f:83:2d:bd:f6:6f:4b:3c:34:ae:c9:3c:ff:
6c:8f:45:26:92:9b:c3:be:76:80:11:8e:fb:76:ab:01:90:46:
e0:77:20:f0:6b:9f:18:43:f1:33:19:7e:91:0b:51:11:f7:29:
5b:e7:b1:16:57:08:f1:05:b4:12:a7:95:94:19:c2:4a:9f:19:
0e:6e:a1:65:32:6c:c8:ec:8e:ea:00:1f:a0:a6:70:71:fb:fa:
04:27:ea:87:93:2f:5a:d8:d3:fa:10:85:f5:d9:4d:79:1a:ae:
b0:c7:cf:c2:72:f5:fe:a3:5b:57:a4:a2:0a:a7:62:21:e6:b3:
ff:99:26:0c:54:26:6e:90:9b:61:9e:b5:3f:17:62:db:b9:02:
98:96:7b:d0:48:19:d1:08:34:1b:08:5e:33:08:f3:3e:05:6f:
ef:3c:71:ec:71:d7:9f:93:29:5b:f6:c4:b6:87:b5:2f:03:13:
db:9f:e6:09:35:30:6c:33:fe:15:06:3d:64:7d:36:ea:5c:38:
26:7b:95:4b:0b:6f:ae:90:7a:56:9c:3c:cc:69:a5:78:34:a4:
aa:ba:d2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:16 2025 by rpki-client