
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json)
Hash identifier: fp8a2lNodtva+HLRy3va2JUntWB4d0I/31rQy0FXczw=
Subject key identifier: 5D:D3:DB:D0:1D:AB:C0:25:27:25:80:56:F7:D3:28:B1:9A:30:60:4C
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
Manifest number: 18
Signing time: Fri 31 Jan 2025 07:11:08 +0000
Manifest this update: Fri 31 Jan 2025 07:11:08 +0000
Manifest next update: Fri 07 Feb 2025 07:11:08 +0000
Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: 46oTqqg768xOxeZwr2jsbch3CtPJ/Orzj4Md1jYPZP0=)
2: 8D88F6EEDC9011EFA0219858C4F9AE02.roa (hash: jLDieWIRNg8FoWvPe6GNayNZYERhEqz23NTu1Iqy4LY=)
3: 06C84D20DC9B11EFB3BCA087C4F9AE02.roa (hash: jckmyQxpUBI6CgfUPTNi2GpMJpyKjsAzxMXFFNKFXtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Jan 31 07:11:08 2025 GMT
Not After : Feb 7 07:11:08 2025 GMT
Subject: CN=679c778c-b87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:2a:dc:db:38:56:83:d1:95:c8:e1:ea:08:
30:3d:62:4d:6e:fc:9d:0d:d3:5a:2a:f2:51:b5:9a:
fb:cb:78:13:0f:de:f3:0b:44:17:74:95:6c:6b:92:
88:b3:24:d3:9f:16:39:1f:e2:8f:06:d6:13:89:1f:
8f:67:b8:e0:72:fd:29:df:38:0a:27:c8:6f:1e:26:
de:80:d6:e0:fc:c1:0b:c3:17:9b:db:ef:32:94:6e:
55:ef:17:cf:06:01:d3:9d:d5:95:6c:99:c4:9e:03:
f7:11:b6:d4:b0:13:57:c9:34:eb:3a:af:13:bd:5c:
b4:22:ea:fc:67:27:02:21:0c:a2:67:d4:bc:a6:46:
7d:f2:0a:67:4e:e9:0f:87:c0:28:64:02:62:35:a2:
cf:45:e1:28:0b:41:22:87:20:0f:7c:d4:83:2f:a5:
5b:9f:d1:85:5b:0c:45:02:ff:e2:f7:b7:0a:18:c7:
e5:1d:1a:f6:26:47:6f:45:cb:e6:fc:c0:6a:9a:7b:
e1:e1:08:55:5f:4a:b3:55:80:1c:77:04:36:bf:00:
af:82:1f:a2:4a:df:57:45:6a:71:72:7b:81:d7:ae:
6e:18:4f:78:a1:a8:88:2b:b9:dc:16:5e:40:17:ba:
c4:3b:f4:d1:4d:4f:00:f2:d5:f3:69:30:99:2b:55:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:DB:D0:1D:AB:C0:25:27:25:80:56:F7:D3:28:B1:9A:30:60:4C
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:8a:b7:23:ee:66:dc:67:33:a2:75:10:41:5f:71:18:af:cd:
00:4b:15:49:b7:9a:e2:e2:08:fe:aa:99:d6:cb:4e:6d:ad:5d:
e0:2b:de:c8:ba:9f:f2:a7:b6:18:4e:9c:ef:f3:51:82:fa:65:
21:ee:33:46:12:cc:40:78:0c:46:56:26:56:f9:5e:c3:2c:08:
b4:db:4f:08:8e:e6:da:77:f9:3c:9f:6f:a1:36:f9:b6:00:97:
71:9f:4a:32:c3:4a:3b:6b:60:c0:84:68:ec:3f:dc:7e:d0:9f:
ab:47:d3:3d:36:fd:5c:30:b7:01:94:2d:8e:d3:a4:f2:b7:79:
de:14:f5:ea:c7:17:aa:fe:a4:cd:b8:aa:72:c0:a2:33:03:2b:
9e:fb:f5:7a:4d:1a:cf:33:1e:d9:34:31:45:e5:bb:da:f0:72:
b7:89:53:eb:c4:b1:c0:3d:16:4b:60:f1:86:a8:b1:59:23:40:
bd:3d:4c:45:f9:2b:ca:15:17:2f:08:24:1e:bb:14:b0:fd:17:
72:d9:2d:06:3c:46:35:f2:b4:f5:60:39:1e:25:6f:5c:84:57:
d9:24:cb:f1:3a:49:2c:88:20:c4:08:ae:c7:ca:7b:4b:ea:2c:
77:1f:4d:53:fd:01:6d:4a:b1:d9:fa:8f:11:6a:56:94:65:a7:
bd:3f:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:40 2025 by rpki-client