Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
File: mqU9J74bthSVPDedOeC7xfHBJKc.mft (raw, json)
Hash identifier: Vzz1LW0TYYbAsJ2XxoPbCGfGxxbsoMzqer1mtVYs98E=
Subject key identifier: 05:3D:A6:59:2F:82:B7:C7:54:73:C0:81:6B:44:DF:40:5A:F5:D4:DF
Authority key identifier: 9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7
Certificate issuer: /CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7
Certificate serial: 0BA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
Manifest number: 0B96
Signing time: Thu 30 Jan 2025 19:02:48 +0000
Manifest this update: Thu 30 Jan 2025 19:02:48 +0000
Manifest next update: Thu 06 Feb 2025 19:02:48 +0000
Files and hashes: 1: mqU9J74bthSVPDedOeC7xfHBJKc.crl (hash: KlgkLuWrcDUBzUDIcyE211hHtI4K2nscrQFMFHgMfTY=)
2: F4F827D6BB6C11EF80151572C4F9AE02.roa (hash: 25pluhiPmnAm9YwUWup9o5G24MQf1uEQRknQIFNX3KA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2978 (0xba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7
Validity
Not Before: Jan 30 19:02:48 2025 GMT
Not After : Feb 6 19:02:48 2025 GMT
Subject: CN=679bccd8-b457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:c2:98:14:f7:58:80:65:6d:8b:a1:73:37:
65:df:e6:ee:63:c6:1c:6d:6e:b0:c2:5d:c3:91:70:
dd:73:fd:0b:8c:b1:15:41:f8:0d:ff:62:73:d5:8f:
af:e9:02:ee:90:c0:0f:65:07:68:ac:b2:5e:bf:b0:
f3:e8:28:91:2e:d5:86:55:8f:60:b0:3b:c9:ee:f9:
8f:d0:b5:df:0f:ba:7c:37:cf:73:04:41:dc:a0:da:
1d:24:21:16:f1:32:05:34:56:6f:88:bb:56:87:9c:
fd:ce:a7:1d:32:4c:63:fc:cb:cc:c5:f5:50:95:1a:
a9:4c:44:39:58:2d:71:86:bf:9f:64:83:a8:35:15:
66:96:d0:3d:0d:a8:d3:e5:ca:16:a0:42:1e:d5:06:
50:59:6f:ac:e0:07:11:f4:8a:d3:1b:f3:dc:78:1b:
72:51:89:af:05:c0:23:ce:33:f3:c8:bc:7c:28:f4:
e7:1e:a3:4e:7a:89:1b:5b:ba:3e:1b:07:a9:50:6a:
da:86:c9:86:d1:5f:1e:61:f3:4e:2d:33:85:ff:d9:
a1:f3:75:36:18:7e:40:13:fe:62:a2:f3:f5:8a:a1:
1f:95:30:02:6e:db:03:cd:90:17:6a:ac:99:05:0c:
8a:c7:f2:78:15:92:98:f8:92:4a:3c:8e:0d:26:20:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:A6:59:2F:82:B7:C7:54:73:C0:81:6B:44:DF:40:5A:F5:D4:DF
X509v3 Authority Key Identifier:
keyid:9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:14:15:9c:c3:d3:c7:23:b7:55:03:d6:24:24:27:44:32:28:
8b:53:43:ec:e4:c9:0e:a4:eb:f1:57:ca:30:d1:86:58:3a:9d:
7a:4b:70:8d:21:8c:26:2a:23:8c:29:26:a8:b6:10:39:22:4f:
19:e7:48:30:67:42:f3:03:c4:88:5e:7e:30:10:11:2d:83:83:
11:6b:d0:27:68:f6:54:4a:3b:6f:fb:76:8b:ac:c7:80:97:ef:
6f:a4:e4:a3:e8:df:67:3a:8d:a8:0a:94:87:2f:dd:b4:9e:13:
90:33:f3:b3:82:45:23:26:5b:c2:56:c4:2c:19:50:13:ae:fb:
0c:66:0d:3a:d2:7c:43:64:d2:2d:bb:a5:ec:12:f2:be:97:b0:
04:ea:5a:d3:e9:38:98:9d:0c:20:70:37:71:f8:af:06:c7:91:
00:98:ca:43:a4:b3:74:79:d0:4c:96:3c:8d:15:94:c7:87:ab:
32:52:2c:21:3c:d6:41:5f:88:f9:d3:6c:a8:49:e1:8f:22:c6:
e7:5a:bf:93:7e:1d:9f:ea:ca:b4:69:d8:12:4d:91:1a:c0:ae:
38:0f:59:ae:93:26:4b:ad:99:16:a8:2f:77:2c:17:64:85:e7:
cd:8f:10:1b:50:18:cf:d8:27:5a:cb:8d:5a:b3:d4:35:56:8f:
82:9b:b9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:21 2025 by rpki-client