Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier: 1f918w9u/FmiFfcjdzOTh6aazOwv0X03+P+EgKYRUvY=
Subject key identifier: 2B:76:65:0D:90:C7:73:7C:D1:3F:28:14:68:D4:CF:19:C3:EC:C6:08
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 04:00:45 +0000
Manifest this update: Fri 31 Jan 2025 04:00:44 +0000
Manifest next update: Fri 07 Feb 2025 04:00:44 +0000
Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: Boalx09phcXetpTgE7XQlmp89TILe0nTxEUhM2UtnIA=)
2: 79A50468BCA911EE8F42E684C4F9AE02.roa (hash: WCxfAGIVMH/a++ZJ4jx3iPBs/9NLSjs9q4Xkq6Czo34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Validity
Not Before: Jan 31 04:00:44 2025 GMT
Not After : Feb 7 04:00:44 2025 GMT
Subject: CN=679c4aec-4d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:b6:d3:b2:64:45:33:fa:c6:96:7a:63:02:
2b:7a:6a:75:16:57:23:1f:05:bf:ca:d7:13:3c:76:
73:41:fd:84:52:cc:11:4e:68:74:6e:30:b4:29:8a:
6a:c6:0b:f4:ab:c3:f1:c5:17:9c:33:0b:86:8d:6f:
2c:ef:c6:e7:0f:1b:0f:a9:9f:d5:51:a5:43:a9:51:
a2:d9:0d:6d:1c:a1:c6:ef:11:79:48:d4:eb:d6:f7:
86:e9:de:41:72:4c:f7:a2:26:de:41:e4:e7:67:82:
a6:f1:63:46:74:c2:e1:0b:2a:98:dd:f8:76:8e:74:
eb:53:b6:50:88:e8:ba:69:f8:33:0c:4d:cc:49:6d:
46:88:ff:21:37:9f:a2:72:c5:12:ca:ab:ed:bd:be:
a6:13:dd:80:f7:80:42:88:94:2a:f6:b0:8f:fe:12:
a7:d2:3a:bf:45:b6:40:7f:83:97:72:8b:58:33:79:
c4:76:5f:80:8c:1c:e0:03:ad:49:aa:74:20:cd:27:
e9:20:63:f7:5c:d1:85:97:17:b7:61:ba:e6:73:cf:
86:fb:39:f2:84:86:77:9e:66:28:59:70:75:98:3d:
0a:84:e7:e8:06:78:9d:c4:ab:da:2d:ab:b8:4b:3f:
a4:01:1e:44:a9:8d:43:f3:5c:9e:04:5d:de:ca:7d:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:76:65:0D:90:C7:73:7C:D1:3F:28:14:68:D4:CF:19:C3:EC:C6:08
X509v3 Authority Key Identifier:
keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:30:60:39:1a:3f:50:0c:65:18:f3:46:5c:ee:d4:1a:5d:20:
e4:cf:a2:e5:96:cb:d2:59:26:a9:89:26:63:8a:ed:eb:eb:c8:
5d:3a:29:89:7d:42:01:65:b0:38:15:be:55:1e:0d:fe:41:cd:
2d:ab:77:24:f7:df:e1:48:e4:38:97:33:bd:3b:b8:57:45:f9:
9f:ae:ac:94:6c:ca:ac:ae:93:f3:56:2b:a2:29:e4:45:5d:68:
ee:2f:92:46:e3:d9:6a:7d:c3:f5:fd:dd:99:e5:3f:c8:60:76:
45:72:0a:1b:41:23:cc:be:8b:a6:f8:4e:34:e4:c6:eb:e1:3d:
8e:97:24:d5:ff:4a:12:78:63:68:78:41:08:1c:21:2e:42:f8:
8b:94:a2:4c:5d:cd:e9:73:ea:b2:bd:f8:a4:86:a5:c5:b3:33:
50:29:42:00:2b:0d:e2:bb:70:f3:6a:56:79:43:79:e2:10:9d:
d4:ed:1f:69:92:ed:c1:01:48:d6:a4:56:d2:51:42:2a:b7:d5:
01:9e:f9:e5:da:46:1e:5e:62:a3:31:15:59:e3:86:0e:fc:38:
8c:74:52:9d:fd:85:f8:73:a2:4d:64:30:26:49:5a:82:ac:3d:
23:9d:03:f3:16:fe:ee:a5:1c:98:57:8b:ac:df:c9:aa:b6:f1:
8b:7f:c0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:21 2025 by rpki-client