Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier: LO2nofAghwXxrS0/0TlgzqBiY9pU8RJpW3m1/1WBZRE=
Subject key identifier: 8E:18:43:0A:42:9D:C0:83:F3:9D:40:45:B2:18:AA:12:C2:41:34:DA
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial: 0638
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number: 0635
Signing time: Thu 30 Jan 2025 22:32:53 +0000
Manifest this update: Thu 30 Jan 2025 22:32:52 +0000
Manifest next update: Thu 06 Feb 2025 22:32:52 +0000
Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: LIpdZcOocFT0et0WWiCOfVri+mtH9PxOvr73dqjPtr8=)
2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: yju+fZAWtM3RsMZrSlngexqtu4I3chkHV+7N/8ZbBdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Validity
Not Before: Jan 30 22:32:52 2025 GMT
Not After : Feb 6 22:32:52 2025 GMT
Subject: CN=679bfe15-d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:84:9a:8a:a4:a5:1c:2b:ce:d8:82:05:8c:
7f:98:7c:e5:01:93:90:a8:63:b9:85:46:6e:d7:41:
e1:0f:c8:47:e6:58:51:fb:d8:2c:a9:0b:61:34:da:
1b:cf:75:64:20:9c:7e:8a:cf:ab:83:2c:29:40:01:
08:30:2b:a7:d3:91:0d:6a:22:2d:27:b0:01:1a:33:
62:88:c0:02:8c:ca:4d:e7:69:51:78:f6:ef:78:2a:
58:7e:6b:4f:40:bc:53:14:40:8c:fd:07:1a:33:04:
e6:6e:05:76:a8:f8:41:c9:96:86:85:cb:66:b1:21:
30:f0:c8:db:63:4d:39:2a:27:e1:45:08:db:83:99:
1b:24:a6:09:25:ec:b6:c8:97:94:70:73:35:3e:f5:
3b:de:b6:d3:ab:5a:57:4b:9f:02:be:20:5f:e5:12:
c9:49:8b:fe:17:91:80:ba:f7:0c:6f:ad:c8:99:d2:
df:3e:c5:90:33:57:51:28:28:ee:e1:fa:b7:1e:ef:
c3:a3:4b:ad:98:b3:59:1e:9c:87:c4:e9:52:b6:66:
34:aa:37:7f:c2:a1:b8:4f:8e:df:2e:a4:3f:a5:9f:
e0:f4:34:b6:24:a9:f9:55:d7:bc:f2:8a:89:ef:5c:
6b:19:ad:81:b6:08:73:a4:de:f2:a0:ec:59:da:0d:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:43:0A:42:9D:C0:83:F3:9D:40:45:B2:18:AA:12:C2:41:34:DA
X509v3 Authority Key Identifier:
keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c8:f4:c6:19:82:1e:4a:37:e1:9a:36:47:12:91:14:d3:95:
6e:1d:6a:16:1c:6b:9b:4a:be:b9:69:06:d2:03:80:dc:7a:59:
3b:5e:89:76:5c:90:b4:d5:c7:20:35:25:c0:b2:6d:d7:a3:e8:
1c:9c:7e:1d:79:2f:39:ae:5c:5b:79:4f:f9:03:f8:8c:6b:22:
41:d8:9f:b0:e6:9f:ca:4d:94:f5:cc:70:12:e9:b5:6b:c9:6e:
91:70:c7:e5:f8:7b:4e:7a:09:f4:d6:82:1f:f1:e8:0b:0c:4d:
7d:e7:1f:94:bb:fa:da:00:52:92:45:78:f4:8e:23:b6:13:c9:
d3:78:69:fe:d7:a0:9b:57:da:9d:ea:e6:5d:50:4e:47:5e:53:
3d:b8:ca:a7:7f:c2:23:53:11:f4:6a:80:7b:e0:ae:f7:66:1f:
81:b3:1e:1a:ce:fe:7f:c6:06:fa:ae:1e:34:62:38:94:3e:c9:
03:f9:a8:75:68:5b:21:f7:91:76:5e:99:77:37:80:ec:5e:b5:
1d:d9:67:48:4d:7a:db:10:19:a1:1e:a8:a7:1a:8d:67:fb:0e:
37:2f:fd:d4:c1:18:a2:1a:c3:21:45:a7:f0:57:be:7e:ca:6c:
c0:29:55:fd:19:8d:15:8d:7f:cb:f1:ac:91:32:36:f6:ec:d9:
a1:ac:cb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:43:42 2025 by rpki-client