Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier: QsC1OJzzUXencqbA7mU6myXCRmdIc5vmIaWe6L9vzsw=
Subject key identifier: 52:09:15:7E:2C:66:3E:8E:7D:B4:8C:34:5E:3A:B3:E2:A6:90:6A:8E
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number: 015E
Signing time: Fri 31 Jan 2025 03:16:36 +0000
Manifest this update: Fri 31 Jan 2025 03:16:36 +0000
Manifest next update: Fri 07 Feb 2025 03:16:36 +0000
Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: 5UPv4LPQyQpdlCljD29aOkvfPxLmZptJ01/FHt8YxKc=)
2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: NLCu2j7NyVCfAMNadoeiUtb8mS5PqTykxmEmvgk0+vQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Validity
Not Before: Jan 31 03:16:36 2025 GMT
Not After : Feb 7 03:16:36 2025 GMT
Subject: CN=679c4094-32b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:cb:77:e4:b0:a9:4b:43:43:a5:dc:ee:58:
e2:6a:22:e5:e1:e8:91:a1:30:a3:25:ad:ce:32:21:
ee:af:bd:24:e0:8c:7a:28:36:aa:e8:25:50:f4:c9:
52:15:80:ca:8f:ae:f1:f3:a7:f0:d0:6f:05:2a:41:
95:f3:80:ba:96:d3:dc:c9:f7:79:5c:8c:38:0b:e6:
89:d8:e0:2d:5d:23:a9:0f:bc:5a:92:18:8e:a8:5b:
18:b2:4a:f8:46:7c:c2:67:dd:e1:4a:c4:4a:52:1f:
9a:1e:68:b9:b7:08:27:b5:9f:a5:80:3f:89:5b:3e:
cb:73:91:ff:92:8a:41:e6:93:2d:be:c9:74:4b:a2:
22:49:1a:75:0b:13:0d:4c:f6:07:8f:e4:57:00:fd:
8f:62:89:37:c3:7f:f7:6a:d5:8a:36:63:5d:83:c9:
19:c9:18:5b:8d:e3:eb:49:23:36:5e:52:a6:61:39:
d8:af:2a:65:c4:14:28:e9:71:27:85:41:c3:21:87:
1e:99:db:96:b4:92:49:03:4f:b9:18:c4:11:f3:54:
d0:50:b3:7c:fd:6d:73:65:3e:23:39:43:f5:12:04:
6f:ae:f4:a4:73:23:53:9e:01:39:3f:fb:31:f3:24:
c9:da:ec:aa:b6:78:a2:dd:3c:dc:79:69:d5:01:50:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:15:7E:2C:66:3E:8E:7D:B4:8C:34:5E:3A:B3:E2:A6:90:6A:8E
X509v3 Authority Key Identifier:
keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:fd:89:bc:cb:85:9f:8d:4c:bd:9b:0e:5a:52:b7:57:b3:
5a:22:d5:dc:84:4d:1b:ab:61:6f:1f:87:8c:67:e2:90:ee:fb:
48:35:83:9c:85:2d:f1:a6:64:ed:f5:cc:b6:e8:60:00:65:8b:
1d:24:b1:92:da:37:ad:8d:04:90:a0:e3:47:b4:69:3a:14:6c:
0b:8d:6e:16:c9:e1:e3:6a:ff:fb:99:ad:8c:0c:1e:e0:29:75:
af:4a:17:54:3a:ef:58:62:30:57:1e:1b:5e:58:b1:2a:16:e0:
e4:b1:65:9f:41:88:6c:83:f8:b8:aa:58:be:d9:c7:96:04:b7:
ad:1c:e3:ed:fd:ee:44:05:09:d5:7b:36:b0:a7:50:ea:43:f0:
a4:f8:13:da:69:75:71:13:23:f9:08:7e:f5:e8:dc:40:ee:ac:
a1:ad:ce:8c:9e:db:81:22:c2:1d:c0:6c:31:3b:82:8b:b2:fc:
42:4c:7f:f8:01:78:42:75:c7:d3:e2:9e:ae:14:d7:62:f2:06:
bb:66:cd:73:f1:a6:c3:60:84:67:3f:db:1c:0d:09:70:d4:bb:
19:ae:4d:39:9c:3d:34:22:aa:e6:bb:46:ea:9c:4b:89:a8:b7:
87:18:7d:69:ef:c4:95:04:14:16:fb:f6:c5:45:31:46:84:aa:
b8:12:31:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:38 2025 by rpki-client