Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
File: CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft (raw, json)
Hash identifier: ZQv0IBB8ZKSAXQLvFovYCod/1yeCOPYDe+LcIxFNM3Y=
Subject key identifier: 67:8B:98:DF:1A:C8:E8:E4:26:7E:CE:34:85:68:D5:B4:63:1E:B9:4A
Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
Certificate issuer: /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
Manifest number: 0163
Signing time: Fri 31 Jan 2025 03:14:09 +0000
Manifest this update: Fri 31 Jan 2025 03:14:08 +0000
Manifest next update: Fri 07 Feb 2025 03:14:08 +0000
Files and hashes: 1: CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl (hash: ZyBJhR9/s4jBYTVyxi76eSbs9G1Gff107IuchtmVM90=)
2: D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa (hash: l8Gj0m9EkG6Fdaxl7SxKrM92rnUZHTkx+j8ukMd+sL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389
Validity
Not Before: Jan 31 03:14:08 2025 GMT
Not After : Feb 7 03:14:08 2025 GMT
Subject: CN=679c4000-6a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:75:14:c8:5a:29:15:8d:43:7e:c5:2e:98:
33:20:31:f5:12:8c:d2:ba:d9:36:77:66:81:2a:1a:
db:7f:c2:98:fd:12:a7:18:fb:62:f7:81:ea:cd:0b:
1d:45:72:d6:0a:56:33:28:bc:08:0e:7c:7c:0b:ee:
cb:24:fb:2d:ca:0c:06:85:c2:72:7f:f9:1f:6f:a2:
4d:f0:39:9d:ba:24:df:63:d4:84:81:ea:3e:a7:56:
a9:1a:02:e2:e7:e5:06:0b:3c:c8:7b:47:95:b0:a1:
21:5d:98:2d:7c:ca:99:95:b2:f6:be:ab:dd:e5:8a:
94:c5:8b:46:c2:e4:44:97:22:1b:98:23:3b:13:4d:
e4:b0:8d:b6:0e:a0:c1:16:64:58:a8:b5:57:c0:ae:
d1:1a:83:cc:fc:cc:d7:e1:bb:36:23:36:9a:51:82:
f9:d2:cd:72:71:dd:60:3d:6b:3d:6c:90:f6:cc:04:
cf:f0:58:ec:0f:1a:7b:d0:05:39:36:c0:7a:df:54:
17:df:25:ce:9f:a7:d5:ae:3b:3e:27:02:46:e7:df:
4a:e5:f7:cb:e8:08:11:d6:11:e6:7a:8a:e7:f7:4a:
8f:e9:29:5b:e9:3c:6b:fe:b4:d6:9b:95:b5:4b:e7:
3b:b9:74:21:d7:c1:80:f2:85:6f:09:e5:ec:25:6d:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8B:98:DF:1A:C8:E8:E4:26:7E:CE:34:85:68:D5:B4:63:1E:B9:4A
X509v3 Authority Key Identifier:
keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dc:21:63:90:29:6e:e2:14:10:f8:c1:60:9e:6a:a4:23:0c:
a8:02:e5:3a:cb:9e:e7:c2:12:cf:4c:c6:df:5a:af:44:cf:82:
bc:d3:45:01:51:c6:e5:78:00:a9:f4:1d:b5:f7:c3:2b:75:f5:
6c:f7:a7:a9:f4:ca:72:64:62:af:1a:c9:81:77:0e:ea:a5:b7:
aa:b4:60:cf:28:1f:08:cf:20:7f:6b:49:af:c6:d7:73:1b:8a:
b4:9a:36:10:1b:99:67:a1:74:87:3f:e0:45:4a:ff:f6:43:7c:
98:c2:d1:1e:9f:90:82:49:1b:02:42:73:e8:1a:64:39:d2:39:
24:47:11:54:06:34:bb:9e:02:e2:f0:58:99:7b:40:b3:38:f8:
a1:3b:18:ab:c4:28:13:3d:0d:c6:b2:fb:aa:4c:44:83:50:2b:
e5:1c:15:13:19:fe:bb:41:07:ff:ba:6d:b3:b3:fb:c6:cf:43:
ab:6f:4b:96:8c:6b:2f:8c:55:e9:93:8f:f1:75:ef:8e:05:67:
e5:15:1f:89:3b:32:a7:cd:e4:ac:86:92:b8:0b:c6:96:66:15:
d8:c1:25:0c:be:ee:dc:a7:dd:0f:76:98:f8:7f:37:3b:7b:85:
a0:b0:71:7b:50:ce:1b:01:39:35:e3:6e:09:f2:8d:bc:f0:59:
6a:bb:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:36 2025 by rpki-client