Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json)
Hash identifier: Ojl97Ae8u4+wcaEp9wBLJxLVtP3XOXKFnbyMUGoaxy0=
Subject key identifier: 0B:EA:DD:E3:1F:FB:DC:59:0E:DB:66:1E:B7:DB:5A:0B:3D:27:70:80
Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D
Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D
Certificate serial: 04F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
Manifest number: 04EE
Signing time: Thu 30 Jan 2025 23:44:57 +0000
Manifest this update: Thu 30 Jan 2025 23:44:57 +0000
Manifest next update: Thu 06 Feb 2025 23:44:57 +0000
Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: RHcCgtTNQ4yLxzd6A48AFlm+5z779nM+UlGPxDqK5L0=)
2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: nPFntpiH3e+VxnHZACKr8y86wdGV/j1zFhWwhLBnbJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D
Validity
Not Before: Jan 30 23:44:57 2025 GMT
Not After : Feb 6 23:44:57 2025 GMT
Subject: CN=679c0ef9-549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:4c:63:a8:7d:3d:35:a9:f0:4c:96:c3:c3:
73:5f:17:95:3a:31:9b:5d:9f:47:55:06:6f:94:ec:
ab:fa:6a:47:0b:24:dc:76:3c:2e:4b:0c:73:92:a0:
5c:09:62:fb:e5:93:5e:12:a3:72:a3:de:15:3d:d9:
59:9c:df:91:5f:63:d7:1f:98:0e:c5:68:b8:4a:fc:
36:29:7f:87:6a:7b:03:ab:e0:a0:ed:96:3a:8f:5d:
c9:02:e9:45:cd:fd:ca:ee:cc:92:7a:ba:99:e1:59:
b0:46:d2:a0:01:4a:ed:94:16:f5:9d:d7:f6:92:98:
0d:af:fe:bd:32:27:c1:8e:17:7a:5c:3b:82:31:9c:
2d:72:d9:19:51:4f:5f:01:1a:8f:0b:aa:71:9f:68:
2c:43:a8:1b:65:b2:d4:d3:68:9b:b1:6a:b2:23:f2:
02:65:e4:56:75:89:a6:53:ad:89:b9:14:62:ff:41:
e5:12:fa:58:c1:68:a0:55:d0:7d:07:4f:19:22:bc:
0e:f9:11:5d:88:ef:2f:a9:ee:98:0f:c5:54:eb:73:
fe:3c:ff:98:64:af:04:4f:10:df:0f:82:6f:bf:07:
7b:6e:f0:9b:52:ce:88:16:d6:56:2a:f0:31:3f:57:
bc:59:08:7d:44:92:fb:60:7a:15:71:97:c3:8b:3f:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:DD:E3:1F:FB:DC:59:0E:DB:66:1E:B7:DB:5A:0B:3D:27:70:80
X509v3 Authority Key Identifier:
keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bf:57:82:15:fc:42:40:78:3a:f7:9f:2f:cd:a9:62:d8:09:
71:d3:6b:a8:e2:e8:de:1f:c5:32:7e:c0:fa:91:a9:4b:d6:43:
25:8a:36:4a:18:f8:f9:09:a3:48:5e:14:cf:bc:dd:1a:1f:ed:
29:50:ed:3f:bb:99:00:3a:68:90:27:e6:7e:0b:5a:b8:71:d6:
b4:2e:da:42:12:68:15:95:dc:ce:62:c7:f6:76:9c:05:6f:a4:
b4:c2:71:75:43:ea:7d:5c:8e:97:57:17:d2:38:a3:21:67:4c:
ea:a1:7c:28:d7:a1:d8:25:be:d7:81:c2:b8:4a:c0:ff:e7:04:
d1:ae:93:6b:0b:dd:eb:99:0d:56:40:da:ef:75:31:a6:8d:96:
a1:4f:b1:96:2c:07:28:cc:b1:d9:6c:a7:45:16:fa:6a:f3:c5:
86:a3:7b:69:cc:a8:59:04:4f:04:bb:8a:55:30:9c:de:3e:b1:
99:16:b5:91:f0:cf:9e:2c:0f:b2:a9:d8:4a:5c:77:d5:c6:b5:
e3:e3:fd:2d:23:73:9f:57:cd:77:03:4e:17:1d:7c:56:d8:3a:
e0:d3:f4:54:8e:fb:6e:ad:a1:30:65:69:7d:02:c4:2e:76:79:
58:28:c7:1f:68:58:e7:7d:9b:e6:44:ee:e6:66:a0:79:66:68:
b8:4f:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:59 2025 by rpki-client