Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json)
Hash identifier: pIcg0J66hfAvmOqHvEczarXDM7Ax9RLiO5dzDWQyTBw=
Subject key identifier: 34:F3:F5:B3:C9:B6:08:5A:7B:C8:7B:67:BB:45:CE:B9:E7:22:99:C9
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 07F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
Manifest number: 07B9
Signing time: Thu 30 Jan 2025 21:17:48 +0000
Manifest this update: Thu 30 Jan 2025 21:17:47 +0000
Manifest next update: Thu 06 Feb 2025 21:17:47 +0000
Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: h4w7Ciaq52V5saSBhYt5JDpQGCOmDU4kVL9W710lpJw=)
2: 39C67EFCB77711EFACD51778C4F9AE02.roa (hash: 8rIyXoL5Gs7jLLbRH396TCE4QCJidAVlris0YAU7RL0=)
3: 8FFCD106CF5511ED870A7753C4F9AE02.roa (hash: O4Np0XtDQoEvb+gWsTJXU39EKi5Py43jm59eT2hWjjY=)
4: A6D1B25E5AE511EEAD94D258C4F9AE02.roa (hash: hZG4bG/zIGOWdRwpBTCsmc07NfVhuGqDmS9pSUVeD1I=)
5: C013D3A4B2B511EF81703019C4F9AE02.roa (hash: slFLF/nNcRmvVbWzDwxxPzlcrLH2s/Zde9GjVjPqlO0=)
6: BEC6DAC8B2B511EF81703019C4F9AE02.roa (hash: 3W+S0LJThnJ7HFnoC2hqRoDyAMv/ObtzTy7MQ7s+IZ8=)
7: 394BF592B77711EFACD51778C4F9AE02.roa (hash: LHaIgZmgEGGhHJxPJAJ50n+DoMeW6y27wrzIMYcgRDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Jan 30 21:17:47 2025 GMT
Not After : Feb 6 21:17:47 2025 GMT
Subject: CN=679bec7c-2f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:89:0c:a4:7b:4e:ca:68:40:af:25:73:92:
52:75:a2:0f:7f:f1:98:d2:21:63:6c:6a:00:c0:37:
a7:85:4f:fc:45:63:d8:59:66:89:22:07:9a:22:1f:
49:3c:98:9e:19:56:77:e6:64:37:04:53:5b:9d:56:
1e:bc:16:21:8d:cb:4e:4b:8d:76:74:c2:36:05:24:
c6:88:c2:ca:1c:ea:60:c0:30:68:3f:37:ae:a3:08:
34:f8:d1:12:82:3f:cd:6b:ae:ef:83:20:36:e2:73:
73:52:ec:02:b9:48:f9:84:a8:15:40:ab:48:ca:8c:
2f:49:26:84:13:32:18:6d:f2:d1:6c:ec:15:4f:ee:
2c:54:0d:bb:70:df:d5:f4:d1:bd:01:cc:36:a5:8f:
77:4a:3f:be:cb:3c:fd:d7:44:42:5f:5e:6c:95:4b:
83:ca:0b:d9:50:25:44:32:82:b1:10:7f:f4:ce:8e:
65:72:a9:31:53:45:45:cf:ee:0d:00:21:e3:0f:fd:
da:ba:a2:e6:6d:a8:0e:a2:49:3a:16:ae:24:8c:1c:
c8:e7:81:2c:b7:6d:e2:b2:b6:6b:70:04:da:9e:8b:
be:6f:ec:ee:41:9a:bf:d2:b1:81:19:c0:9f:eb:b5:
b5:12:32:d3:33:ad:c6:61:b6:d4:64:7f:45:7a:b3:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:F5:B3:C9:B6:08:5A:7B:C8:7B:67:BB:45:CE:B9:E7:22:99:C9
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ea:5b:91:9a:92:9d:97:ee:f0:54:9d:aa:bf:d8:02:28:e0:
ea:9f:a4:a9:0c:ff:15:e2:dd:8c:96:42:9c:8f:35:e8:ae:a2:
32:e1:d7:aa:1c:b6:0c:4d:5c:b7:f0:cb:b1:5d:d1:d5:a4:e9:
f4:93:12:36:2b:8e:30:2a:3b:a3:e9:1f:35:63:5a:14:92:56:
aa:cf:14:3e:17:ea:28:b2:fd:82:86:61:dd:9e:90:7b:16:60:
13:cc:73:11:f9:72:86:eb:9d:6f:9a:b6:33:88:e4:cc:3e:71:
e6:d1:ef:ff:59:b1:85:54:6d:c4:3c:2e:3d:76:d7:a2:50:8c:
e2:ff:54:b1:d4:e3:75:85:57:6f:54:d0:bf:75:cc:f4:09:af:
36:d9:4b:6e:e4:76:08:cf:8d:bc:e9:d6:c5:60:1f:43:eb:56:
ef:5b:a3:f2:4a:23:e5:9e:23:79:a8:bc:46:c2:85:5c:28:28:
8f:11:91:0c:e1:2e:e2:7e:9c:67:a6:bc:8e:e5:f0:d2:49:a9:
8f:90:8b:03:c9:6d:aa:aa:9d:00:89:83:db:72:b1:e1:3e:69:
f9:cb:cb:0f:5e:43:c3:e8:6f:02:64:b2:eb:c7:7e:33:92:c1:
d7:b6:9c:43:c1:64:7c:f9:13:7e:eb:09:f8:97:5d:81:83:c3:
81:2b:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:11 2025 by rpki-client