Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier: Gw+jjJQhWVzgyeM+qPf0RE4NXCdpklNjO7RvTqz5ZRk=
Subject key identifier: C6:EB:7C:54:D0:68:AE:09:43:88:61:86:08:81:8B:A0:D8:F3:F2:AC
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial: 059E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number: 0596
Signing time: Thu 30 Jan 2025 23:12:59 +0000
Manifest this update: Thu 30 Jan 2025 23:12:58 +0000
Manifest next update: Thu 06 Feb 2025 23:12:58 +0000
Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: xIRLh1fLQHQLxojCMLYPw/h6Ge2pXhzw9KsF/pF6bLk=)
2: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: 5uGQKQHacdIz6+gIYb0KhNuQPFZrw2PyFjSKiH2Athc=)
3: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: jXDp4XiCvpV4wY49c46QBfx2cr7QhdJZL2oEG7fy8Gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1438 (0x59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Validity
Not Before: Jan 30 23:12:58 2025 GMT
Not After : Feb 6 23:12:58 2025 GMT
Subject: CN=679c077a-5b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:c4:6e:ed:cc:39:fa:b3:76:75:f3:79:19:
a0:f4:a9:e8:5b:54:d3:88:6c:a3:02:34:2f:70:51:
0f:f8:52:fd:95:91:14:2d:4e:59:0a:b6:be:09:67:
bb:64:f5:7e:51:95:94:22:74:9f:1f:8a:6c:97:93:
31:3e:f9:08:ed:03:4d:fd:ee:91:32:e4:da:ed:61:
78:10:9e:ed:d3:cc:23:6f:ec:a8:2c:e5:69:e5:eb:
7f:40:f1:f2:53:b7:a0:d2:6c:17:a0:c8:01:ee:15:
06:ad:14:01:05:68:41:3b:44:4b:5e:00:d6:5c:f8:
da:ff:12:62:54:5a:69:25:12:8a:2f:b9:b4:c7:06:
ad:dc:89:94:a7:f1:a2:b6:68:91:2f:a2:6a:8e:ab:
3a:6f:e0:c7:0b:ad:58:9b:cf:da:e6:49:86:de:d0:
56:ff:39:9c:a6:91:db:03:bc:c7:08:44:a0:33:07:
c7:f3:35:e7:93:bc:db:e1:ec:e6:a5:54:d4:c3:f5:
ed:fd:9a:f8:54:92:fd:6e:ac:f1:35:6d:5c:cf:24:
71:84:9e:58:ba:f6:1e:a1:20:a5:ea:4f:3a:b7:15:
0e:d7:07:8d:e2:94:24:99:4b:b0:b7:22:e6:ff:fd:
72:cc:9b:82:30:e7:a7:42:d8:2a:4d:5c:f4:77:30:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:7C:54:D0:68:AE:09:43:88:61:86:08:81:8B:A0:D8:F3:F2:AC
X509v3 Authority Key Identifier:
keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:27:d7:93:fe:9f:61:6a:5a:15:13:26:83:2a:f9:3f:f0:d4:
8d:3e:13:e1:b2:4b:06:7b:03:d8:de:26:91:bc:e6:e7:f9:a7:
a4:df:f6:c4:ff:75:b9:b2:76:de:a5:5b:32:89:c6:c2:2a:ec:
ae:83:41:7a:de:a3:9f:c1:6a:b8:53:2c:a5:d6:75:c7:1c:83:
e7:66:cc:ca:e6:3a:f2:76:a0:c0:71:5f:8c:50:14:6b:0d:73:
17:a0:fd:3e:89:bc:4d:7e:e3:8b:33:32:fe:1d:3e:55:08:77:
d3:10:67:3e:20:5c:66:84:bd:3d:d1:38:09:ed:03:b3:b9:05:
16:16:57:23:43:bc:25:87:b4:ee:be:3e:d1:b7:4d:dc:73:af:
08:a4:1e:43:c7:a7:78:b0:e7:b8:f0:ff:09:6d:db:6f:66:98:
f2:53:66:d8:ea:b8:1d:34:48:4a:15:2f:b8:ce:89:2b:9b:bd:
7e:85:46:bc:79:fc:aa:44:ac:b4:56:8f:c8:7b:9e:74:98:ac:
69:25:07:94:d7:a4:64:8d:79:ec:4d:5a:91:38:fb:5d:34:bb:
1b:8c:43:f2:03:ab:6a:2b:2a:f1:9e:e6:d7:26:49:cd:5d:44:
e7:02:b9:e8:6d:28:ff:40:76:58:0f:23:f2:e8:9c:5b:92:d7:
6f:4e:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:56 2025 by rpki-client