Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier: hSDrfJIie5nGiMrVIV0OQB2JWjlUCDFo4lC7fV2/U9s=
Subject key identifier: 58:3D:56:AB:63:66:31:DB:C0:08:BE:86:3D:D5:37:4C:0A:DB:8C:6E
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number: B6
Signing time: Fri 31 Jan 2025 05:11:40 +0000
Manifest this update: Fri 31 Jan 2025 05:11:39 +0000
Manifest next update: Fri 07 Feb 2025 05:11:39 +0000
Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: 31iQrzdB8HeQq/Wdq9n04hU3/P6CxA9veJ3I+Y0/hj8=)
2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: wWpGWXc0da4NayJh8tXlJgOGWzmykFbxwGJAc8cXKN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Validity
Not Before: Jan 31 05:11:39 2025 GMT
Not After : Feb 7 05:11:39 2025 GMT
Subject: CN=679c5b8c-771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:9a:e6:5d:57:47:79:73:6a:70:93:ec:ca:
ba:28:75:b6:e6:a3:47:f4:7a:97:ff:0f:17:09:16:
1b:69:61:39:7a:9b:5c:41:40:d4:ca:5c:a2:a2:bd:
10:f7:78:9e:8b:05:4f:de:7c:06:27:7d:a9:20:45:
45:54:7e:e0:40:66:d2:7a:f5:62:80:46:fa:c3:24:
82:79:67:42:ef:a8:01:56:c8:d5:9f:53:c1:f6:f3:
08:f0:fb:41:82:33:1e:b4:d8:a1:d5:c9:b8:98:0e:
37:ae:60:50:14:2b:81:1e:db:31:fd:d5:00:39:c4:
21:ce:7b:8b:0d:98:30:ca:4c:fe:b5:26:92:66:f7:
5f:a8:3b:c5:1f:58:ad:06:6e:fc:ac:fa:2c:b7:8b:
9a:3c:c5:7b:6b:dc:31:30:62:ba:16:56:33:36:27:
b3:1e:0f:b8:e6:06:60:1f:e4:d9:44:5f:d1:9b:63:
c9:a6:02:cb:0f:4a:d2:83:fa:37:7c:8c:05:65:d9:
6d:f2:21:2e:d7:31:62:44:a5:04:7f:62:7a:ac:b6:
b3:6c:4c:5b:f3:3b:ad:88:8e:7f:ae:9a:c8:bb:d9:
87:2e:30:9d:02:65:38:f4:c8:1b:e2:17:82:4e:e1:
08:d1:ae:5d:79:92:89:59:5c:11:c5:69:a5:2e:c6:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:56:AB:63:66:31:DB:C0:08:BE:86:3D:D5:37:4C:0A:DB:8C:6E
X509v3 Authority Key Identifier:
keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:d2:94:c8:fe:e0:91:91:93:63:34:66:69:8a:b8:90:53:1e:
cb:4f:a0:cd:d1:ed:2e:fc:74:9f:cd:d4:0e:87:ab:24:88:5e:
40:b4:0f:72:a0:7d:c6:dd:fd:c8:93:b6:ea:6b:dd:5a:9f:32:
60:f1:77:ab:84:53:a8:32:ec:bd:05:4b:3b:fc:25:4b:55:cb:
66:00:26:c4:6e:6f:bc:c3:8d:05:f2:8e:c5:17:c3:42:52:1a:
e5:63:34:23:ac:b2:ae:85:ba:f3:d0:d4:e0:8f:ca:f3:6a:0e:
f1:d5:b1:97:ea:fe:8a:d1:a1:7d:3e:df:91:cf:15:ac:f6:54:
b9:53:38:d1:3d:ad:c2:00:d7:f0:7b:63:20:63:bd:77:91:aa:
2e:40:c4:60:b4:ac:6d:78:54:2e:22:32:e6:0d:af:4c:a8:01:
b5:c3:5b:73:4a:c3:94:97:54:89:1e:e6:d4:31:a4:aa:09:3c:
1f:15:a0:0d:07:e9:cf:53:72:47:de:3a:05:97:69:7f:56:04:
c0:8b:4b:b4:8c:29:4d:0b:9e:6f:71:98:b8:c4:0c:40:12:66:
72:89:11:2e:e5:74:49:5d:83:72:36:bc:9b:6f:44:d3:0f:f5:
89:5f:85:b6:63:90:52:9b:bb:f6:56:4b:80:03:90:cd:fa:86:
df:6a:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:19 2025 by rpki-client