Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json)
Hash identifier: 4X102klSekmLSEoHme2V5tydBybaOFEW37yhxC9SW/s=
Subject key identifier: 0C:75:EB:92:3F:AE:F7:46:28:0E:FC:B8:C9:C6:CD:62:37:27:A2:FB
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
Manifest number: 8D
Signing time: Fri 31 Jan 2025 05:35:22 +0000
Manifest this update: Fri 31 Jan 2025 05:35:22 +0000
Manifest next update: Fri 07 Feb 2025 05:35:22 +0000
Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: HjSi8LKFCLQDjT8BWabDwdCU4RQvFZc4noO+WWGi4eA=)
2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Validity
Not Before: Jan 31 05:35:22 2025 GMT
Not After : Feb 7 05:35:22 2025 GMT
Subject: CN=679c611a-a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:44:39:80:e5:04:27:06:19:27:f2:3a:a3:
0b:9f:cb:02:ea:7f:eb:3f:3b:34:66:b4:a2:84:15:
aa:de:02:75:73:30:ee:2c:c8:52:31:f0:c9:df:0a:
b6:d1:e2:a6:a9:2c:26:c2:10:90:78:98:7a:0c:a2:
7b:81:e8:7c:59:81:b7:6b:94:84:88:3d:ce:78:d2:
da:91:67:58:5b:9a:21:db:67:1d:fa:d8:e8:a0:2a:
6c:43:22:19:c1:c3:19:36:f5:54:e2:a1:c1:7e:5d:
3f:9b:1b:8d:65:50:11:6a:f8:23:34:72:d2:83:65:
1c:59:65:e7:4e:c7:f8:16:fb:90:19:14:7f:fe:8e:
7e:4c:9a:37:8e:cc:77:e7:ef:17:42:ff:c9:2f:e4:
63:53:e2:35:9c:27:11:13:9f:a2:3f:56:7b:b7:9b:
05:49:d7:7c:d4:9e:39:2d:39:d9:b9:c8:35:cf:ae:
64:7e:5d:3e:d4:ff:f1:43:fc:6c:16:b1:4c:25:11:
6d:b1:cd:18:2f:a9:84:6d:db:ba:f6:a1:53:4e:56:
d9:6a:e4:92:69:35:5d:6b:5a:c8:76:e6:85:72:b5:
eb:d0:e2:fd:3e:e8:8d:9d:9a:0c:9b:cc:54:91:a3:
74:2d:32:5d:6e:75:8d:5b:99:4e:72:f1:4d:86:e0:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:EB:92:3F:AE:F7:46:28:0E:FC:B8:C9:C6:CD:62:37:27:A2:FB
X509v3 Authority Key Identifier:
keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:24:54:2b:28:b4:ec:cd:1b:d2:6e:a3:c8:e9:28:82:78:e8:
3d:9c:dc:eb:90:dd:61:c1:5b:34:e0:76:9b:63:6f:32:c8:88:
e2:92:82:32:ec:93:8a:e0:87:8f:7d:35:30:5b:75:6b:50:ff:
ac:65:7d:bb:41:49:a6:00:dc:16:b6:1a:f7:22:33:ac:ca:29:
12:6f:7a:4e:d9:e8:5f:14:ac:2c:12:f6:15:8b:96:d2:09:dd:
1c:a3:65:4d:3b:9d:c4:39:53:b3:43:20:9c:4e:93:03:c0:f9:
ae:3c:fb:f8:7a:3e:9e:cb:76:e3:9a:7f:5a:d6:06:93:b2:68:
12:94:c6:63:e6:cf:ec:e4:ae:6b:36:8d:38:e3:bb:40:0b:9c:
2b:82:02:fe:cf:a9:a2:ba:f9:e3:66:bd:87:34:95:5b:70:46:
a6:b2:18:fe:5c:ef:28:c6:fd:1a:05:7f:7a:e5:fe:9d:06:7a:
1c:84:64:45:b9:f8:5a:aa:5d:07:5b:e0:26:9c:38:7d:f2:ba:
a7:22:a3:90:0f:c1:5c:19:f8:78:4e:77:69:b7:29:69:a7:d4:
71:d6:12:fb:27:7f:4d:23:f0:24:c2:b7:5a:d9:a5:b9:86:09:
0f:cf:f4:48:dc:46:16:bd:c4:88:12:5c:5f:df:51:a5:19:6c:
7c:c1:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:09 2025 by rpki-client