
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json)
Hash identifier: KbEVwYRs/uL/8tpPd9G+aTCGbXqLkWbtQD+DgmycLn8=
Subject key identifier: 8B:FF:EE:C5:2B:EB:2B:60:C3:AD:BF:F2:F5:75:27:E5:DC:52:3D:C5
Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Certificate serial: 0750
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
Manifest number: 074B
Signing time: Thu 30 Jan 2025 21:32:21 +0000
Manifest this update: Thu 30 Jan 2025 21:32:21 +0000
Manifest next update: Thu 06 Feb 2025 21:32:21 +0000
Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: XZQ1xrHG+pmHKA+Kn6RjxnsgXBG103uVLx4ZPuE9WFY=)
2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: 0a3iDH5bkO5J9nl1C2L0muZWxN/ekxHt+EqAXGCfnCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Validity
Not Before: Jan 30 21:32:21 2025 GMT
Not After : Feb 6 21:32:21 2025 GMT
Subject: CN=679befe5-9417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:e9:ea:ba:e5:b6:94:68:1f:6f:d7:d5:3f:
f4:b8:bf:73:cb:0f:4a:9c:12:a3:1c:36:f7:89:41:
a1:c4:e0:8d:7b:e1:41:bb:cb:bd:33:67:d1:f9:a0:
82:4d:27:26:93:b3:b2:13:89:35:e0:99:9e:7a:cb:
90:a7:58:1d:7e:7e:82:e8:b8:37:bd:42:fa:d1:46:
0e:b1:0a:3a:0e:ff:a1:cd:a2:66:11:df:47:1d:d5:
39:1a:dc:11:7f:5c:05:19:cc:ed:32:d9:d4:3c:1b:
18:70:d7:18:dc:72:1f:f0:e6:29:e9:8b:ac:a1:bc:
fa:1d:7e:c6:3e:39:7a:7d:83:21:c9:c8:5b:f9:b9:
85:e6:32:5a:79:12:00:5b:b2:43:11:af:f7:c7:c9:
e1:0c:d2:be:21:98:36:99:66:61:82:c6:49:05:e0:
23:0a:cd:02:62:38:0c:a4:29:e6:c1:09:af:43:66:
e4:a0:aa:51:c8:39:fb:40:7b:4c:d4:27:b7:e1:76:
75:70:4d:83:d3:f9:7a:4d:07:5c:b6:f4:3e:9f:2c:
f7:0a:13:49:e1:dc:14:85:cc:07:b3:a7:f7:03:9e:
06:5b:d6:54:8b:6b:d5:0a:fe:8a:3f:1f:02:9f:a9:
7b:51:76:67:2d:b3:36:d7:cc:88:dc:53:d1:2a:7d:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:EE:C5:2B:EB:2B:60:C3:AD:BF:F2:F5:75:27:E5:DC:52:3D:C5
X509v3 Authority Key Identifier:
keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:76:0b:b0:a7:e3:56:14:4d:fc:cd:b6:82:65:af:49:e1:2f:
4f:7c:3c:8b:d3:58:80:0a:9c:82:43:e3:8a:93:e9:dc:f9:de:
93:5d:75:43:07:ef:5f:85:18:d6:dd:73:1e:62:4e:88:0d:51:
0a:22:00:0f:0b:22:f1:bc:cd:07:8d:db:53:c5:3a:11:bc:52:
b2:ad:54:9b:02:da:d3:5c:c4:d8:8d:70:f0:cd:18:3c:af:07:
ed:7e:75:60:db:b3:e7:f2:b6:4f:74:70:a3:fe:78:f2:f2:91:
c4:62:65:e3:bc:b1:d3:f2:ae:29:39:79:92:22:4a:1b:b8:c0:
5b:f2:af:4b:a4:35:38:e3:df:cd:ac:5e:55:7f:2a:ff:ba:41:
78:47:bd:fa:66:4f:e4:04:b1:ce:80:dc:08:de:41:47:e7:f4:
ab:19:be:31:2f:c1:de:58:de:84:df:6e:0e:5d:75:e4:1a:71:
97:70:78:b0:0a:2d:42:3a:35:65:11:af:cb:b6:ef:9e:28:e3:
5e:fc:a2:a7:86:1c:eb:cb:66:94:74:ee:8f:87:87:69:c6:80:
0b:bd:03:f4:e9:a3:c1:13:91:13:19:86:d2:79:e1:03:3e:69:
19:c6:84:fe:92:1c:2c:a0:27:59:23:19:59:de:48:c9:54:92:
9d:95:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:37:30 2025 by rpki-client