Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier: gk4F/o1y7/6OxRDWsscXZWNWB0bBo1A+HAMC2wRWDbU=
Subject key identifier: 44:2A:2E:5C:50:E9:1C:AE:3E:45:43:30:1A:E5:B9:AF:A4:AE:52:B2
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number: 014E
Signing time: Fri 31 Jan 2025 03:26:16 +0000
Manifest this update: Fri 31 Jan 2025 03:26:15 +0000
Manifest next update: Fri 07 Feb 2025 03:26:15 +0000
Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: WHf4U1D0o5P+xgaeQulPdGcP/5o6edNn95N9ZEm5Ds0=)
2: BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa (hash: XvPpK73yQ7IRxyPallfmcFZ9RhrXsoC3LQs+zpaUSLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Jan 31 03:26:15 2025 GMT
Not After : Feb 7 03:26:15 2025 GMT
Subject: CN=679c42d7-265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:50:ef:cf:66:4c:97:11:34:ff:de:80:9b:
57:86:d9:12:0f:69:64:80:7e:9c:53:be:e0:b1:11:
28:d8:f1:dc:72:b0:05:96:bb:e5:77:c8:75:33:59:
cd:30:21:a0:a1:57:b4:de:65:d5:11:93:36:fb:1a:
ed:64:7d:3b:2f:1a:18:7b:67:67:ae:14:59:94:8b:
2a:e9:90:80:c5:35:06:ec:9e:ff:54:49:10:e3:67:
d6:5d:f3:bd:7b:4d:63:0f:c8:f2:a8:7f:5a:d5:ba:
4f:fa:11:39:33:e2:ee:5b:93:db:60:c4:d9:ce:c6:
69:c3:09:01:b4:fd:3e:46:57:d1:f1:5a:6a:e3:e5:
36:49:20:f2:8e:b5:fa:55:a0:9f:f8:cd:58:bb:23:
3d:b7:62:e6:d5:da:2c:df:ec:42:31:87:9c:59:7b:
fe:7c:a8:fb:b7:d7:a7:e4:9b:14:bb:f3:c0:f0:60:
31:c4:e9:c5:b8:1b:53:63:6e:d9:c8:75:75:c1:6d:
38:ae:c3:03:ff:91:5a:30:47:0b:12:a7:17:1f:ca:
e0:95:93:03:73:94:2d:0e:83:a5:ad:29:c5:53:11:
64:37:3b:3b:5f:e4:49:c2:7f:f9:23:2a:ef:9a:1f:
0a:e7:bf:dd:9a:40:24:e2:2a:91:70:74:e4:48:47:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:2E:5C:50:E9:1C:AE:3E:45:43:30:1A:E5:B9:AF:A4:AE:52:B2
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:03:d0:e6:80:12:56:6e:ab:b0:28:1c:fe:53:78:d0:3a:9b:
db:5c:9e:3c:61:44:1f:3f:95:b1:58:c4:fa:cd:f6:00:80:5c:
c0:25:d0:b9:c1:31:68:87:af:3c:73:b5:9d:54:84:c3:46:9e:
cd:b7:81:13:e3:07:b2:a1:92:da:42:61:f6:9f:2f:3b:15:ae:
8f:12:2d:f1:c9:dc:90:63:46:4c:60:01:dd:46:42:0b:77:68:
61:3d:0d:53:19:dc:b0:93:fe:38:a2:05:2f:32:58:54:ab:4f:
45:08:46:1b:06:5d:9b:3c:f4:56:5f:ee:ec:b1:f5:5c:91:05:
8a:1c:24:fe:cb:dc:06:84:8a:41:91:a0:e0:f0:74:f3:ab:90:
8c:74:4f:c7:69:51:75:94:08:62:2c:9d:a7:0e:44:f0:75:54:
3d:18:2e:92:74:6d:e4:6b:4e:3f:53:f3:7a:9e:f8:ab:97:d3:
c2:24:9a:ad:4b:53:24:b6:e0:a6:2f:e8:43:23:e1:c4:04:77:
8a:9b:b5:9d:55:cb:e6:ab:6c:d5:b4:49:17:3b:f2:d4:42:3a:
32:33:e6:ab:ba:07:33:39:1c:32:61:7c:19:6f:b0:a0:e2:07:
d2:e4:ab:a4:57:5b:25:c6:ba:c1:8b:cc:f0:1d:d4:14:fc:47:
cf:52:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:41 2025 by rpki-client