Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier: Oxcvq8aoa3XxqxjjpSfVfOxFkr1R0px/xz5bEBy4PPs=
Subject key identifier: F9:4C:F9:82:67:1F:66:DE:DF:80:F8:32:12:79:7E:24:7C:71:73:41
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 1011
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number: 1009
Signing time: Fri 31 Jan 2025 17:25:34 +0000
Manifest this update: Fri 31 Jan 2025 17:25:33 +0000
Manifest next update: Fri 07 Feb 2025 17:25:33 +0000
Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: lyaXnXZ5f3MUQKxapAJDaw41RQGJjYn1rDq72iOrvwU=)
2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4113 (0x1011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Validity
Not Before: Jan 31 17:25:33 2025 GMT
Not After : Feb 7 17:25:33 2025 GMT
Subject: CN=679d078d-3e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:2d:f8:a4:8e:c7:c0:24:f1:c4:aa:0a:42:
20:fb:69:49:9c:b6:d6:22:0c:62:92:88:ca:d0:61:
66:7e:92:d8:b4:01:7a:a3:d4:f4:fc:d8:27:3f:a4:
6b:b6:4b:79:9e:93:14:94:5d:50:fe:ea:6a:11:dc:
f7:66:8b:78:68:22:bc:62:f0:d9:ba:48:1f:d1:66:
da:d1:83:41:c6:13:3c:75:c0:55:8d:04:6e:56:07:
db:b5:97:2c:0a:5d:0b:be:a1:d2:07:8f:9c:b5:fd:
dc:4f:af:1f:f1:96:15:5d:76:d8:e4:74:65:40:39:
7f:d3:53:fa:aa:89:62:88:49:62:e3:68:69:ac:5b:
be:4b:e6:e9:d0:2d:df:2a:19:5d:f8:bb:48:84:cc:
72:1b:ae:79:68:fa:34:c6:2e:18:8c:85:a8:74:bd:
28:73:2a:6d:1a:8d:07:30:45:cd:86:80:b6:7b:5f:
17:1e:d0:93:23:74:36:cc:dd:fa:ef:ee:2f:79:bf:
3f:6b:61:d0:44:ad:56:22:c6:d4:40:6a:ba:0d:e9:
3f:0d:6c:5c:89:2e:7a:7c:74:93:3b:6a:cc:b7:8a:
3e:8c:a3:be:47:1d:ab:fe:ca:40:35:97:74:b4:3e:
b4:94:b4:18:18:5e:fd:2a:f6:17:f3:2c:71:3f:58:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:F9:82:67:1F:66:DE:DF:80:F8:32:12:79:7E:24:7C:71:73:41
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:54:50:30:95:a9:c0:39:de:90:a0:11:a1:72:5e:dd:e0:
94:b5:da:89:38:a4:70:42:a5:f2:8f:a1:12:87:6f:4b:cf:fc:
af:79:91:48:01:0a:46:c3:3c:8a:ab:ec:e4:ad:98:81:16:8e:
81:85:bd:06:d7:71:d6:af:3f:a5:0f:ec:67:45:72:7a:6c:77:
3a:bf:15:cb:55:5b:05:fd:49:b3:b7:d4:86:df:38:5e:c9:00:
1f:34:5d:4c:05:af:85:cc:8f:57:07:cf:93:c7:ce:3a:07:80:
34:8f:83:02:95:dc:c4:b3:72:62:c3:3e:93:86:f7:b2:39:d0:
5b:ef:ad:68:d2:c3:f9:48:93:fd:30:5e:9d:57:70:1e:9c:5c:
a6:bd:00:08:41:5a:35:b7:e4:55:ef:07:ab:06:26:14:30:64:
18:87:f9:72:c2:b1:a5:b5:bf:64:d4:da:00:a1:00:ca:56:89:
e9:ac:ac:c6:27:75:d0:92:a0:e7:05:57:55:f6:7b:d0:e6:f3:
36:75:2f:46:7c:87:6e:e4:51:83:fc:ab:1f:a4:67:ae:ce:8c:
e1:e9:26:45:21:fe:fd:45:d4:1f:dd:e0:1f:94:31:a2:62:98:
a8:3e:e4:54:4c:6d:eb:d2:be:19:d5:e4:af:9f:4b:32:5d:f6:
7f:f5:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:09 2025 by rpki-client