Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json)
Hash identifier: GizJVDTV3Qf4bDE1y6hmeY8z/9epIzmOUEZ2ve7cQ+I=
Subject key identifier: F6:59:22:C2:10:13:C1:9C:06:7D:08:BD:50:B8:9B:3A:0E:16:5B:6D
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0C74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
Manifest number: 0C5C
Signing time: Fri 31 Jan 2025 18:13:48 +0000
Manifest this update: Fri 31 Jan 2025 18:13:47 +0000
Manifest next update: Fri 07 Feb 2025 18:13:47 +0000
Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: KKKXtWN4L6bO6p8ITlWLSML9nZelWAlhBaq3zPS/66k=)
2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: uH0p9W6gyErJqwQXUobMQ4l4IHk3TpFXVC4lxSYw/yc=)
3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: aWVyhl403G+qwJ6jO2cb4Y7Az8v/lQUgKxECmfe73fI=)
4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: u+aZe6lXhjFNUVJNVlssesIeVBxkNnY96Z5bKTISH7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Jan 31 18:13:47 2025 GMT
Not After : Feb 7 18:13:47 2025 GMT
Subject: CN=679d12db-fdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:49:a3:8c:89:0f:cb:f4:e6:a4:d0:9c:c6:
f2:7d:40:2b:d8:01:a8:a0:28:f5:6b:6a:af:1c:3c:
25:db:52:f8:2b:21:c7:a2:10:96:14:57:2a:8a:2b:
ef:f7:a3:67:4b:d6:b7:ce:a8:89:49:9e:a2:53:cd:
06:7e:39:63:06:e9:2e:80:c2:fa:87:f9:3b:ce:dc:
46:70:b5:e0:38:ce:b8:9c:0b:0d:7d:79:6a:00:f1:
9f:49:f6:ed:0c:e5:3a:3e:d9:ee:aa:b5:b1:7f:08:
f2:e2:29:f6:a1:9c:a5:4d:b3:0d:9d:96:5a:9d:b8:
f8:1d:94:20:17:3e:1f:a0:03:37:f7:bf:8e:20:d5:
1f:0a:70:b5:7d:cf:0a:40:55:b1:b7:00:56:80:dc:
e7:ea:f3:7e:05:28:8a:95:0f:08:86:60:cc:d6:4a:
3a:28:aa:60:18:bd:f7:27:d1:47:d4:1e:3d:6a:e5:
8b:8a:6c:3c:18:6f:c3:a0:d8:4d:1e:fe:85:e4:fb:
0b:cd:1e:7c:88:cd:a3:43:44:af:9d:d7:d4:99:d4:
e1:b8:1e:97:b0:6a:ca:4d:6f:90:c4:d6:9e:0f:e6:
d2:4a:67:c5:96:9c:30:27:72:62:32:ba:92:a6:ca:
13:41:b4:0b:d1:0e:26:1c:e5:52:74:3a:57:6d:4e:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:59:22:C2:10:13:C1:9C:06:7D:08:BD:50:B8:9B:3A:0E:16:5B:6D
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:6c:ea:44:e3:9b:70:db:08:de:f7:35:5b:4a:fa:94:6d:
25:2c:08:9d:2a:8d:7f:81:b2:57:ce:f7:8e:25:05:f2:25:a5:
77:45:94:61:2e:e6:50:ac:c0:7f:44:ce:97:7b:17:56:55:f5:
62:43:5e:89:bb:31:21:00:d2:fd:9d:82:68:81:0c:82:03:3e:
cf:27:79:30:8e:c8:cc:b5:c0:77:64:a3:21:7e:f5:65:95:5f:
32:87:f4:02:ae:4e:95:e5:d4:c1:16:e1:03:ed:4f:84:4b:74:
77:3e:98:d8:60:e7:dd:67:f7:af:65:16:24:c0:bf:16:54:89:
2d:56:c1:83:36:f3:60:4b:2d:43:e7:ba:66:70:e2:8b:93:29:
19:9a:4d:f5:9d:8e:81:3e:95:77:c9:c9:be:9a:37:ed:36:eb:
f0:78:f3:ad:d9:0c:01:99:f8:17:49:90:db:c0:d4:4f:d8:79:
eb:43:61:b2:65:15:30:a1:9c:1f:3a:23:f7:36:19:d2:06:d8:
db:39:6f:2e:c5:91:9a:14:66:e9:89:7e:7d:73:87:68:05:bf:
7f:2a:33:16:93:72:2f:4e:5f:82:15:39:ca:a0:29:57:84:ac:
7d:20:91:4d:9d:7b:eb:77:b5:9a:2b:89:3b:fa:3b:31:d2:03:
84:87:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:04 2025 by rpki-client