Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
File: Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json)
Hash identifier: cOFbLO26kxPA8sn40/HnEBaYaq0r2vZo4wqPM7w5DwY=
Subject key identifier: A6:2F:0C:FE:F8:86:21:BA:53:BD:98:70:DA:4F:FF:E9:B6:B1:6A:1F
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
Manifest number: 025D
Signing time: Fri 31 Jan 2025 01:55:48 +0000
Manifest this update: Fri 31 Jan 2025 01:55:47 +0000
Manifest next update: Fri 07 Feb 2025 01:55:47 +0000
Files and hashes: 1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: AcHQLA5XEhWR1fhJqYFtx0JJhoGHNb+tI4TdlHzyzDE=)
2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4=)
3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Validity
Not Before: Jan 31 01:55:47 2025 GMT
Not After : Feb 7 01:55:47 2025 GMT
Subject: CN=679c2da4-64d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:55:de:46:1d:ec:ce:2e:36:89:97:4a:29:
0f:ef:30:8e:33:3e:ed:92:8f:a2:59:29:d5:0c:15:
a3:3b:6d:d2:3f:50:18:bd:07:44:b3:a3:b1:c7:9e:
46:9e:21:c5:6e:b6:56:94:06:eb:4c:79:f1:c2:e1:
ab:ee:b9:4d:b9:35:77:a6:3d:7a:59:35:7d:c1:1b:
73:3c:e6:bd:33:de:46:a5:09:be:b4:4f:6d:52:62:
1b:ef:a9:d8:1d:1f:50:19:8c:9b:2d:99:ba:e4:cb:
28:e6:46:65:47:9e:bf:3e:0c:53:3f:1a:73:76:21:
04:f3:6a:76:66:8e:56:67:83:63:c9:d0:af:82:99:
63:f2:1f:70:f2:37:fa:6e:ec:d1:a9:02:e1:7c:f0:
c8:c2:1e:b4:ea:67:9e:4b:3e:36:c3:e3:df:b4:64:
67:54:26:9a:a3:29:25:7a:40:49:6d:da:5c:cc:c0:
51:c3:c6:a0:a3:b0:f1:d4:e9:11:14:23:0d:84:0f:
6e:d9:74:94:5f:cf:00:49:72:5e:c1:55:71:b5:33:
48:3a:6e:82:53:8f:cb:cc:b7:97:75:e4:05:48:cf:
65:36:59:9d:3f:77:4e:ff:bf:da:f8:f9:ed:88:cc:
42:83:dc:4b:b7:ba:4c:d2:bf:65:e6:62:a2:1d:97:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:0C:FE:F8:86:21:BA:53:BD:98:70:DA:4F:FF:E9:B6:B1:6A:1F
X509v3 Authority Key Identifier:
keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:b3:d0:e6:2f:3e:03:9c:6f:f7:df:0d:8f:4f:0d:86:22:5f:
64:42:5b:ea:93:35:1d:c3:28:f7:fb:4d:5b:ab:24:a6:84:ee:
47:3c:1e:b2:a1:0c:26:d3:f6:20:b5:94:5f:e5:b0:97:fc:ae:
14:b1:2b:68:fa:27:21:6c:bc:6d:3a:f7:5a:3c:15:70:28:08:
30:dd:d5:0e:9f:06:0f:5d:39:3e:81:1b:46:f1:64:b6:9d:ec:
a7:e8:70:df:86:4d:73:21:48:5b:e5:c9:aa:ea:6b:49:95:63:
6e:95:f8:9f:ab:a1:56:57:8e:a6:1d:03:a7:e0:79:0f:95:1a:
0d:2c:0b:d6:d3:2e:0e:f5:53:3a:32:aa:50:7c:de:56:a8:a4:
2d:67:25:52:b8:ae:d7:72:cd:30:65:09:84:3b:b5:6c:62:23:
ba:ce:00:3b:cf:2a:28:43:ce:b6:25:1e:0c:71:d7:3d:ac:94:
f4:ae:bc:11:ef:5a:98:ce:6e:38:38:1c:3f:f6:e3:70:d3:04:
3e:e6:29:3d:b3:2e:8f:ce:07:e5:cc:2a:5f:12:e8:2d:0d:42:
88:e8:fb:fa:73:cb:3c:94:e1:7e:78:ab:78:e3:0d:0b:7f:19:
4b:62:04:14:58:7a:98:d8:8a:d6:b5:3a:95:39:f3:1f:a7:03:
68:8e:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:48 2025 by rpki-client