Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: H5Tfdi6l9Il32uE1LHIPxumtDd+4m3b9zNPcTGK8ArI=
Subject key identifier: E8:B6:0F:12:62:65:2F:0D:FA:46:DB:32:26:EB:13:41:7A:6D:91:B5
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 03BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 03B5
Signing time: Fri 31 Jan 2025 00:44:44 +0000
Manifest this update: Fri 31 Jan 2025 00:44:44 +0000
Manifest next update: Fri 07 Feb 2025 00:44:44 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: CtX3M7KK+w3fa7YsVTsA2U3hI+I4IWYnG425aficCPA=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Jan 31 00:44:44 2025 GMT
Not After : Feb 7 00:44:44 2025 GMT
Subject: CN=679c1cfc-79f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:c1:00:37:92:23:c4:f6:94:6a:bf:64:4b:
ec:99:49:28:0f:1f:dd:60:b5:9e:a7:4c:1d:e3:d6:
23:37:d3:5c:78:94:ef:b2:6e:ab:0d:9f:cd:c1:42:
4a:8c:af:60:6d:7f:8d:cf:9d:11:94:ae:80:62:88:
9f:fa:53:e8:14:a8:1a:ad:3b:1b:5e:e0:89:96:26:
92:f3:19:6f:3f:b9:d2:50:cc:e0:3e:e5:46:d3:0f:
a1:c1:df:9e:f5:57:b3:26:3a:87:d4:98:f7:9e:65:
23:b5:12:65:79:3b:05:cf:40:b2:c7:74:ff:78:65:
99:cf:50:36:9d:87:fa:b2:5c:ea:58:a5:23:08:c5:
e8:dd:91:99:de:c2:c3:3c:f8:1e:75:1a:03:9b:79:
19:25:c6:7f:77:ee:23:38:36:4b:4c:78:63:18:75:
24:39:99:e5:dc:c4:d7:dc:9b:c4:f3:45:f9:1a:84:
66:6e:d2:a2:af:06:c3:42:f2:13:96:5d:44:a9:fc:
9d:7f:c6:5e:f6:a6:a2:86:f3:9e:99:7b:04:7d:0d:
48:66:09:d5:7a:37:d0:59:91:96:5b:50:52:1a:17:
48:17:58:36:b1:74:b1:00:25:88:83:7f:0e:da:7e:
70:7d:a5:5a:08:48:0b:c0:b5:20:0b:41:d0:4c:25:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:0F:12:62:65:2F:0D:FA:46:DB:32:26:EB:13:41:7A:6D:91:B5
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:a2:95:2b:99:48:34:97:8f:3e:5d:59:d3:c7:e8:88:64:
3b:de:43:c4:99:39:61:9d:63:77:04:5e:84:42:0b:63:d3:53:
bd:4f:35:c2:e8:76:94:1d:c7:37:33:24:91:49:d8:17:40:c8:
99:cc:65:15:78:5f:8f:f6:c9:f6:30:35:f3:52:3b:da:3c:c5:
ba:0f:39:29:4f:24:cc:92:1b:80:84:4b:e4:ff:40:15:37:70:
b0:32:67:57:25:71:3e:5e:9d:78:ba:b5:a0:68:3a:98:6c:f0:
e4:1b:fe:46:1b:6b:83:21:8a:ac:9a:3c:72:5f:5f:e3:89:15:
a8:e0:ae:a9:38:a8:62:34:91:76:d6:79:83:93:75:5c:cb:6e:
8b:0b:13:47:37:44:8b:f2:cb:d9:f9:b3:e6:e9:43:f4:35:98:
6e:7b:7c:05:bf:e0:21:b0:12:93:c1:fc:67:9b:4a:6b:97:62:
77:4e:4d:69:86:52:42:25:f7:eb:91:21:88:19:1a:de:97:90:
b2:3e:6a:86:2e:f7:ac:02:72:71:28:67:ad:92:fa:80:e8:b3:
3b:f1:3c:60:f8:c9:59:b3:f8:82:63:fc:d0:93:dd:08:f3:2a:
03:9d:75:7a:1d:b2:87:a2:aa:0e:82:f3:be:b8:d4:a8:8d:4d:
be:fc:ce:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:39:29 2025 by rpki-client