Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json)
Hash identifier: NYJ9OqOQL8KSZfxK+G7eTU+zib0zEp9FwWLYMA41PEY=
Subject key identifier: 23:1B:3A:02:9C:09:78:AF:F5:AE:E1:E9:99:8C:C9:6A:99:5F:C0:BD
Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Certificate serial: 0D96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 17:55:20 +0000
Manifest this update: Fri 31 Jan 2025 17:55:20 +0000
Manifest next update: Fri 07 Feb 2025 17:55:20 +0000
Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: bhlV0haoCjMdcyuhNRYlfpPgGwqyXOq0OEplWJJmb1A=)
2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: LJDJT9b2tqtA8O6hQfQCHkjQVIf/COk/4xlUjuao3vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0
Validity
Not Before: Jan 31 17:55:20 2025 GMT
Not After : Feb 7 17:55:20 2025 GMT
Subject: CN=679d0e88-4818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:e3:49:a7:50:93:cf:43:7f:3d:96:ae:f3:
23:ba:4b:93:66:7a:ab:e3:ef:cf:ad:0e:1c:b2:55:
96:c7:8b:9e:d7:5d:d6:42:60:82:91:3e:37:a6:c8:
46:59:f1:50:72:f5:0a:a9:2f:a1:69:b5:f4:b2:d7:
66:5a:d4:38:50:d6:97:89:df:a7:aa:ce:94:75:ac:
e8:5b:69:67:b9:ed:d2:62:72:1b:3f:6f:a5:63:8e:
bb:dd:53:0f:39:bd:aa:75:4d:8f:6e:7a:21:fa:1c:
3e:4b:c7:44:2d:74:cc:a5:16:5b:94:32:76:51:d1:
cb:dd:cf:bf:ff:a0:25:ef:e8:95:9e:be:7f:63:9a:
83:42:6b:14:a9:0c:5d:ee:2b:c2:c4:c6:98:ac:4d:
6f:27:7f:a2:55:ce:e3:68:29:cf:de:96:63:fa:80:
c5:ff:49:b8:52:b8:27:b2:34:00:52:8a:20:ed:0f:
cb:2f:db:a7:4b:70:8c:70:95:bc:a8:f1:a0:29:88:
6f:68:4e:45:a2:53:75:4c:51:bc:02:62:09:71:b3:
32:43:7c:a9:40:03:cb:b4:71:2c:27:4e:82:72:71:
a9:f0:d0:ac:43:f4:ac:00:7b:b4:cb:a1:02:c5:6a:
62:bd:d4:7b:f6:de:e7:c5:13:ad:fa:05:cc:37:52:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:3A:02:9C:09:78:AF:F5:AE:E1:E9:99:8C:C9:6A:99:5F:C0:BD
X509v3 Authority Key Identifier:
keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:9f:4d:a8:66:13:cb:54:23:00:dc:6f:98:5e:5e:61:21:
5e:01:ee:26:6a:3b:c5:a6:06:66:ae:24:3f:5c:33:d6:03:ec:
a5:62:c9:73:5e:79:30:08:7b:51:6a:16:be:9a:f0:10:08:71:
38:97:40:38:a5:67:c9:62:f7:ed:12:2f:60:95:89:7b:7c:4f:
e0:ef:66:9c:bb:d7:b6:35:c8:8a:6c:8a:2b:55:e2:68:28:27:
6c:ee:ed:7e:01:d0:10:86:7e:61:85:ab:78:f9:bb:6a:8b:0d:
ab:af:e7:8c:3c:37:f7:34:e2:a9:19:a2:ad:24:61:b7:16:a2:
0c:eb:6f:4a:08:f4:6b:dd:7f:59:93:5f:cb:7d:39:71:0f:8c:
74:e2:70:44:74:1d:f5:bf:f9:83:41:f8:b9:41:77:1c:c9:ea:
d8:24:56:fd:58:cf:0d:6a:1a:24:9d:c6:68:a6:9f:15:04:06:
60:12:3d:45:e3:a9:36:1f:93:25:8d:55:4c:41:99:fb:e4:50:
fe:89:b8:6b:b8:53:49:83:4f:53:ab:f3:6d:57:33:8d:76:05:
ae:f9:37:1d:54:b0:10:ce:f0:b6:ad:1a:4e:f8:4c:2b:13:69:
fc:85:95:59:8d:34:be:3c:8d:37:f4:21:6d:6d:06:81:43:5c:
72:ec:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:38 2025 by rpki-client