Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json)
Hash identifier: OWADbxWMEhCgb6kq8kHoyeKw7UjYEymJeZMhEJ2URs4=
Subject key identifier: 39:FA:86:8C:DF:FB:03:C5:A0:18:8D:65:2E:CF:23:B9:9D:CB:38:28
Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Certificate serial: 07D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
Manifest number: 07C4
Signing time: Thu 30 Jan 2025 21:07:06 +0000
Manifest this update: Thu 30 Jan 2025 21:07:05 +0000
Manifest next update: Thu 06 Feb 2025 21:07:05 +0000
Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: 9oSy09JxwfREWy609mWENYRhXf3DtIBb36ghtgyQJGU=)
2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: vN/dANQFbTJxxRHMI9ZludqJZ1NmcGlANCvolM21fwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Validity
Not Before: Jan 30 21:07:05 2025 GMT
Not After : Feb 6 21:07:05 2025 GMT
Subject: CN=679be9fa-1339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7a:18:5d:16:06:95:aa:f6:1b:25:88:ba:74:
d2:0b:d9:88:f6:83:d7:85:50:fd:9d:89:d2:0c:97:
71:94:4d:03:f5:d4:8d:f4:2f:20:b1:d9:3f:62:a6:
25:ed:4b:22:23:9c:46:70:d5:bd:fb:32:c6:ae:80:
1d:14:3b:8b:51:b0:54:96:9c:ea:df:c4:fb:5b:ff:
9f:a8:f4:c3:08:03:95:34:0d:57:7d:0c:31:f5:b0:
df:5f:ea:b3:a6:51:ea:02:b3:dd:62:87:cf:37:c4:
e2:5a:5f:57:5b:90:67:d0:f8:99:e7:3d:c1:1e:76:
17:68:9c:86:ce:a7:fe:c0:4a:60:6d:ff:71:4b:1a:
26:98:4c:19:83:ba:23:07:3c:27:78:c9:26:3f:2e:
77:c6:63:f3:1a:1e:63:77:04:a4:f8:6f:a1:ac:a2:
91:e9:30:c0:a2:e1:79:c9:a2:07:5c:de:47:4f:bf:
ca:48:22:e2:28:88:c6:1b:1e:98:45:17:08:3b:6e:
f5:e7:b3:ce:13:f5:54:37:32:7f:31:89:3f:de:99:
b3:6a:85:9b:90:78:1b:41:70:4e:92:53:07:a5:25:
c8:45:09:5e:2d:b7:34:59:03:6c:51:1a:6d:6a:f3:
08:ce:61:8a:1f:39:c8:98:c7:8b:a7:d2:6b:b6:5e:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:86:8C:DF:FB:03:C5:A0:18:8D:65:2E:CF:23:B9:9D:CB:38:28
X509v3 Authority Key Identifier:
keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:a5:81:30:a1:67:2f:50:d7:79:ae:a7:fa:83:6b:c1:46:9d:
d6:2b:25:d0:44:7e:2d:fc:89:e9:d5:45:55:4e:f9:34:82:93:
60:ca:76:36:8e:df:b7:a7:e1:ad:f7:b6:d9:6d:cf:1b:2d:e2:
83:a0:14:c7:83:cd:4b:75:6a:e2:3b:f3:7c:11:2c:dd:d0:f2:
a9:38:03:f2:50:d1:21:55:26:8d:fc:76:4a:c7:d2:77:b7:47:
dc:34:73:76:6a:37:77:e3:36:49:a2:cc:b8:7a:d5:4d:84:ff:
72:05:f1:43:90:11:4d:78:c8:21:ec:d3:f2:3d:cd:83:40:6a:
12:3b:5e:73:5f:63:4f:d0:6a:ff:cd:c3:bc:77:63:89:31:97:
f2:bd:68:13:be:09:5a:a7:9a:da:92:63:40:a9:40:f3:79:35:
14:ec:8b:9a:46:65:5b:f1:25:b1:60:fc:21:f6:b2:a4:70:c9:
ef:31:e3:ed:d1:a7:d4:1e:c6:59:ea:f2:8a:1c:8d:c0:f0:7b:
f4:58:f7:33:49:0c:6c:91:2e:84:d8:d1:23:44:00:4e:57:16:
c4:5a:cf:54:6a:07:bb:9e:6e:89:d3:04:f0:4f:f5:34:62:0e:
e0:f6:e5:a4:f1:1f:15:12:63:24:ba:9d:d1:2e:d5:ee:70:7a:
cc:bd:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:18 2025 by rpki-client