Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier: CS3CU4AEXTbZUNSNIhM1rSRDi1LrnG0K704obX4NA9w=
Subject key identifier: 86:58:8A:FD:F5:5C:42:CF:65:2F:95:D6:09:02:3C:71:E8:A0:A7:04
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number: 10
Signing time: Fri 31 Jan 2025 07:11:42 +0000
Manifest this update: Fri 31 Jan 2025 07:11:42 +0000
Manifest next update: Fri 07 Feb 2025 07:11:41 +0000
Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: 3CdvDCSUsmCmu7oV+Je8xe2LQpfQ8rbktaZl0rNWctM=)
2: 0B26C14AD26811EF95A1A65FC4F9AE02.roa (hash: mzhwSXkIHnHCYgyoyHvgE2YnfLZ33DeT+xQlrCYhgdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Validity
Not Before: Jan 31 07:11:42 2025 GMT
Not After : Feb 7 07:11:41 2025 GMT
Subject: CN=679c77ae-e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:8d:1a:8e:02:18:58:08:45:1a:c3:de:e2:
d4:2c:ab:76:ab:af:95:93:8f:6f:f4:20:53:c8:0a:
de:cb:b1:a0:fe:38:b7:f3:c4:a6:af:42:28:c2:f1:
6e:d6:b7:a7:3c:dd:5c:85:45:9b:ad:ff:a8:d0:8a:
7b:b0:31:8d:06:a7:fe:21:eb:ee:1e:9d:7a:bd:50:
d9:ba:7c:9e:50:dd:6a:c8:19:d9:6f:fe:b1:d7:aa:
e4:e0:87:60:b4:89:38:bc:4a:26:eb:a6:d7:9a:55:
7d:b0:72:77:47:4d:84:0f:45:42:0a:86:fb:03:cb:
c4:88:c5:36:86:93:a1:99:ba:86:10:6b:c2:de:eb:
9e:1a:ad:97:24:91:99:a4:bf:99:52:c7:74:0a:b9:
c3:f2:ea:64:d6:8f:72:c7:a7:c1:4e:0b:3e:78:b3:
3b:37:ac:92:0a:09:a2:0d:f6:0b:3a:48:35:fc:83:
db:ba:b9:e1:2e:c2:e2:e6:7a:c0:ca:7a:4f:f2:7a:
c1:f2:17:48:55:44:e7:f8:57:7e:38:89:b9:68:88:
83:1c:14:a2:78:27:42:49:f4:e7:21:4f:6e:35:1d:
ca:7f:a5:dc:d3:2e:15:78:01:9e:f8:a9:f3:3d:e9:
84:af:18:b7:9b:69:e6:3a:bb:2c:0b:f7:32:ba:16:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:58:8A:FD:F5:5C:42:CF:65:2F:95:D6:09:02:3C:71:E8:A0:A7:04
X509v3 Authority Key Identifier:
keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6f:0c:a3:0a:42:29:f6:26:57:76:26:ca:e3:c8:c6:e2:51:
45:58:cc:8f:d3:6d:4f:21:b5:14:ef:fa:b6:53:70:30:3a:b3:
f3:40:ec:79:15:5d:b0:ec:11:72:13:0b:f8:7d:37:43:25:2a:
c4:ef:48:e2:34:9a:99:02:75:c7:c0:6b:c1:ac:4b:f1:67:ba:
a7:e5:fa:a4:2c:3e:fb:89:8d:55:53:bc:be:25:0c:42:15:f6:
24:9b:9f:e8:da:07:06:3c:5f:f9:ea:b3:3f:85:f2:d9:56:4b:
18:e0:77:c5:8e:71:88:67:24:0d:09:96:c2:be:6f:8c:2b:6d:
7e:d7:6b:05:ea:a1:54:fb:96:47:a5:a1:b0:da:af:43:dd:a7:
a4:e5:7c:ce:06:b7:48:77:5b:25:9e:97:ff:e5:1c:4e:d9:af:
e4:05:58:35:5c:dd:3a:9c:f3:54:8f:b1:e2:d4:f9:53:7c:91:
c9:6b:7a:43:8b:6c:bd:30:21:29:3e:c7:75:f7:07:50:24:88:
6d:65:fe:f7:40:41:b1:33:ba:ee:c8:ca:44:96:f0:29:bc:95:
54:02:a9:04:ff:f9:05:b3:73:cc:1b:16:d9:73:f2:74:38:a0:
67:ca:b5:bc:61:15:74:b3:6b:65:2c:2d:e6:da:6a:04:69:e4:
d7:95:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:20 2025 by rpki-client