Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier: nvJj36TCPEON5Nl7x2PcKgnKpcneGktSapoO5alepY0=
Subject key identifier: AB:70:4A:3D:A2:9D:BC:95:48:2A:48:C2:35:C3:B9:A5:CD:84:E1:5B
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer: /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:10:09 +0000
Manifest this update: Fri 31 Jan 2025 06:10:08 +0000
Manifest next update: Fri 07 Feb 2025 06:10:08 +0000
Files and hashes: 1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: D3mwjBftQcihZpVc8X2YNqg+1CsHtOYA1eDAcHlgliU=)
2: BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa (hash: Gqrui0OpB1CczHELSAaN90W0H5eLSv922/lG6tauLOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Validity
Not Before: Jan 31 06:10:08 2025 GMT
Not After : Feb 7 06:10:08 2025 GMT
Subject: CN=679c6940-b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:5a:2c:49:41:3b:3e:bc:66:03:62:77:9c:
40:eb:0b:31:8c:12:81:2f:0f:7e:ed:2d:b6:38:d2:
3c:f4:76:6d:b4:2d:31:ca:73:1a:d6:c6:45:f9:19:
a6:2f:99:e9:d6:73:1e:ae:fc:56:3c:02:2b:d8:92:
b4:f3:5b:8a:2c:ad:a0:f8:f6:0f:bb:56:b1:ef:37:
c3:58:58:5b:10:15:9b:d1:03:a8:f8:ea:47:f8:22:
be:74:b5:e3:88:c5:68:04:96:a2:d7:d6:70:4b:be:
30:3e:7b:2c:1d:99:71:fe:54:d9:da:dd:95:46:b4:
92:99:15:90:45:08:60:8d:f9:c6:62:fb:bf:4f:5b:
db:2d:cd:22:87:e9:a0:be:0e:b3:7c:dd:f7:2f:6f:
df:0e:e6:33:a6:99:0e:a9:5b:47:38:c0:e2:68:67:
3c:50:ce:0e:d6:13:90:4b:a8:5b:6d:c7:db:b6:d6:
73:37:d8:81:4a:30:11:26:26:6a:f1:1b:7b:08:02:
a5:7e:55:6d:43:be:fc:10:c5:d4:64:c5:ad:7f:83:
29:c1:d0:01:09:a3:fd:a7:ba:13:c7:28:5e:05:81:
4c:75:50:34:e8:d1:cc:ce:3f:62:73:fa:4f:a7:20:
04:59:de:76:59:05:72:f7:36:88:56:5e:a8:e8:1e:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:4A:3D:A2:9D:BC:95:48:2A:48:C2:35:C3:B9:A5:CD:84:E1:5B
X509v3 Authority Key Identifier:
keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4a:e5:d7:28:86:28:05:81:f8:43:76:22:47:48:8c:8d:2e:
02:61:c4:d0:ab:47:21:2c:f9:0e:f8:98:0d:22:9f:5f:a8:1d:
8a:81:89:3f:c6:b9:bc:07:5e:53:77:f1:e6:4f:78:20:1e:a3:
66:71:af:e3:24:5b:04:39:41:d7:4e:1d:be:04:84:ba:9d:8d:
d5:07:ad:a1:8f:01:ed:e6:c0:23:cc:ea:70:54:d8:51:d1:93:
17:b9:59:74:62:8a:66:3c:7d:3c:34:fb:90:9b:79:75:8c:6c:
d7:5f:62:4d:26:9f:38:08:b3:71:a1:ce:d0:03:bd:bc:f7:b7:
27:5a:83:a3:5f:3c:86:9a:98:b7:49:55:f2:3d:6d:b8:0c:c3:
dd:23:c5:68:f3:6e:07:60:69:8d:39:80:6f:fe:e7:7d:98:b8:
fc:0c:07:27:43:25:f7:4d:c3:3f:b9:c1:90:9b:ad:74:31:36:
32:35:f6:e6:9f:75:46:df:24:88:94:23:96:47:d0:b1:33:de:
ea:d0:8b:31:9d:94:8b:04:74:c4:31:d7:18:0b:06:d2:c2:ac:
cd:d3:3e:41:39:1e:18:75:c7:80:0f:83:c3:fe:2a:c6:34:48:
c6:a4:d5:ae:24:a5:33:11:34:2f:22:98:49:99:67:e0:b8:ec:
41:64:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:45 2025 by rpki-client