Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json)
Hash identifier: 0K3A7+LYw+sKmgimDhEiCp4Zg+o904VJWJl0EWlwywM=
Subject key identifier: A2:F9:39:92:9A:63:B7:7C:7D:F8:5A:51:81:F8:8B:E5:D1:89:BA:B1
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial: 0506
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
Manifest number: 0502
Signing time: Thu 30 Jan 2025 23:39:42 +0000
Manifest this update: Thu 30 Jan 2025 23:39:42 +0000
Manifest next update: Thu 06 Feb 2025 23:39:42 +0000
Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: oDMsubo/cHVj6GmosbBR58AGpqTD8XpXGh8SGmQt9aE=)
2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: AKQYRTBp1uq5xNSQ+35Oq/CNR0101RtjFiouleUDl3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Validity
Not Before: Jan 30 23:39:42 2025 GMT
Not After : Feb 6 23:39:42 2025 GMT
Subject: CN=679c0dbe-def1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:71:d8:7a:13:db:92:14:ce:3b:ef:fa:b3:
d1:8e:a7:06:1c:69:5e:72:ac:70:59:78:18:46:04:
02:32:c0:ad:15:bd:ae:08:d4:75:97:87:60:a5:e0:
8d:97:14:67:90:40:b1:cf:ac:91:94:24:e1:9d:cd:
bd:a1:b2:be:5b:53:c4:b0:27:44:5d:87:89:36:85:
0b:95:e3:d5:48:86:d1:fe:60:9e:3d:3b:cc:c0:dd:
ef:3f:85:63:8a:95:cb:8a:a4:ef:e3:6a:3a:62:f8:
7c:a4:0e:d1:59:50:ab:a7:16:07:a1:16:2f:4b:02:
20:92:cb:cc:4c:12:36:71:d6:65:c5:32:58:88:64:
87:d7:eb:c2:9d:25:2f:1a:a4:a9:2c:b7:60:19:53:
b2:44:07:3b:02:98:50:63:ab:8c:7b:b3:66:60:01:
91:17:2b:48:cc:79:c0:fb:be:d5:c4:2a:79:56:c5:
c5:47:ef:3b:ae:24:6f:55:7e:85:e8:1c:e3:51:25:
7a:43:db:ca:67:ee:10:ac:36:67:de:3e:fc:b4:77:
e5:48:d4:51:f1:a8:6b:02:c5:12:f7:15:c1:cc:e4:
ef:5e:f8:3d:97:5b:a4:f4:c7:e3:df:62:7b:b9:a4:
1f:41:e6:3c:bc:89:78:7f:c3:d0:2f:89:25:9f:46:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:39:92:9A:63:B7:7C:7D:F8:5A:51:81:F8:8B:E5:D1:89:BA:B1
X509v3 Authority Key Identifier:
keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:92:55:41:54:b5:4e:da:33:15:9b:a0:fe:f5:ae:33:83:d5:
c5:5e:0b:95:2e:bd:e7:16:ea:82:aa:ff:2f:4b:a8:6d:45:68:
ac:70:fd:61:f9:cc:ce:d5:90:d4:4d:42:52:2c:25:08:59:b4:
4b:78:a8:dd:13:2a:0d:e0:13:2e:03:5b:c0:8f:d0:c2:83:bc:
08:6e:85:42:c4:68:7d:19:34:e8:99:b1:c2:5f:84:41:d0:ac:
a1:e0:53:d2:44:bf:3d:2f:b4:fb:ad:e3:14:ca:3d:99:be:77:
11:47:b0:67:b8:ce:40:f3:44:e4:53:6e:ea:fc:1b:b9:34:72:
cd:86:3f:bd:22:55:87:52:e3:f7:54:30:4d:d4:bf:4e:44:40:
04:e8:7a:fa:a9:89:85:8b:62:45:64:e3:8a:91:5d:0a:c1:5d:
b9:c3:e5:ea:60:93:60:8e:ac:7d:9a:ef:b5:c9:9e:93:4d:54:
a7:e6:ee:08:78:52:68:fd:8e:90:30:a9:e7:ab:30:db:6b:20:
24:93:30:80:32:96:a1:f0:52:d9:70:f9:c0:3c:59:ba:c7:e0:
92:65:a0:12:18:cb:fa:fb:1e:b8:4a:3c:ab:db:08:cd:7c:98:
8a:82:d2:f2:8e:34:b2:1e:5e:ad:e0:7b:57:fd:03:73:31:7f:
4a:f6:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:46 2025 by rpki-client