Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier: EPFXNegI8JcgaeeH9F+wbR0Qd8bDNEpVGKDIOh6KN6c=
Subject key identifier: 5F:49:C3:F7:B6:EA:83:6D:FD:1A:18:C0:08:8E:A2:2A:FA:65:BE:DA
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number: 09
Signing time: Fri 31 Jan 2025 07:15:53 +0000
Manifest this update: Fri 31 Jan 2025 07:15:53 +0000
Manifest next update: Fri 07 Feb 2025 07:15:52 +0000
Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: 17e/2vVhXyYraV/JQn+0iSwSD69dJhSMjxRsdHB8NHA=)
2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: FjkNGrENcSIvFxBilAn18yNNIFNeTLoQBLQNAUhyMb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Validity
Not Before: Jan 31 07:15:53 2025 GMT
Not After : Feb 7 07:15:52 2025 GMT
Subject: CN=679c78a9-16b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:73:81:34:7a:37:b2:28:db:34:bb:00:ae:
92:08:c6:32:8d:9f:fd:ed:e3:f5:c2:83:9b:d4:74:
af:28:29:ae:78:a9:c4:31:c3:a0:6e:a1:06:20:8d:
cc:82:ed:84:32:80:fe:f3:64:5b:a6:33:20:b1:8d:
60:63:4a:b7:f7:af:47:ba:24:28:b0:d9:8f:d1:47:
af:7f:a0:2e:dc:69:f8:09:05:ef:52:a6:c7:61:00:
71:86:42:93:1e:62:25:e8:45:be:37:99:04:eb:60:
91:a2:5d:85:d3:20:a7:d5:f2:b4:f1:6f:bf:52:c3:
53:c7:5d:4c:b5:aa:14:92:07:37:5a:2c:34:05:83:
9b:b3:01:2c:39:ce:d6:d0:76:94:aa:df:b0:35:51:
36:84:78:8c:67:2f:fa:90:5c:01:57:fc:12:28:bc:
79:cb:d4:37:f0:12:5b:14:0b:f9:8e:26:ae:4f:4c:
8e:60:15:5b:4b:84:1e:df:41:6b:fa:28:5f:da:a8:
1e:43:64:71:14:a3:16:98:44:52:2f:5c:b5:22:f1:
ae:96:b6:ec:68:bc:c3:a3:85:f4:32:81:f2:d6:41:
95:ba:c3:d1:c7:12:5a:28:27:c4:47:f8:56:b5:be:
6a:4d:4d:ca:cb:4d:25:76:a5:ec:7c:6f:fb:ff:f4:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:49:C3:F7:B6:EA:83:6D:FD:1A:18:C0:08:8E:A2:2A:FA:65:BE:DA
X509v3 Authority Key Identifier:
keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bd:50:e1:46:f2:49:ee:ad:5b:16:68:ae:e8:64:cc:de:f9:
33:09:19:33:24:65:05:96:b5:4a:c7:1a:a7:95:37:87:a8:f9:
27:2d:67:85:40:e8:d7:3f:eb:4d:76:30:70:3c:57:43:6b:0e:
8a:87:65:54:6c:4e:fa:1e:85:a9:b4:98:c8:ec:40:c7:c8:8c:
e8:74:94:15:1b:f2:a1:bf:18:c5:fc:7c:ac:2b:33:63:30:62:
8a:fa:f5:87:eb:5d:17:ba:9c:3d:6b:9c:72:8c:5a:62:ec:12:
9a:f8:3a:7e:6b:8b:26:b0:27:f6:6f:00:44:90:81:02:79:e0:
5e:a9:8a:9b:17:f0:1a:0f:48:8c:76:e8:66:f1:85:2a:a4:aa:
c7:52:5e:bd:a4:88:d5:13:ff:67:9b:cd:08:b3:1a:ea:6b:f9:
ba:88:c2:2b:01:a6:01:61:98:69:88:d5:3e:86:fc:4a:87:a6:
07:97:9f:8a:0f:93:cf:6b:26:03:57:20:63:1d:cc:9b:74:7f:
1e:8d:c9:e9:81:68:34:84:c9:4e:67:f0:63:f3:b3:ac:0f:e3:
1e:92:fc:a6:60:80:bc:06:33:33:c6:57:01:c1:0a:19:e8:fd:
5c:5e:84:27:36:29:aa:2c:37:13:52:63:41:a0:2c:45:4d:b6:
6a:17:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:18:19 2025 by rpki-client