Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier: 9hdfiAlbvJwi9xnywW2xQ63pDA9TMnGCUMnvEoUnkbk=
Subject key identifier: 69:ED:48:A9:0A:D6:11:55:FA:3B:19:40:77:7E:33:06:A8:51:E4:F1
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number: 0137
Signing time: Fri 31 Jan 2025 03:37:01 +0000
Manifest this update: Fri 31 Jan 2025 03:37:00 +0000
Manifest next update: Fri 07 Feb 2025 03:37:00 +0000
Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: 1re1fHqu2vAJ7bzQWl/K2ilKT9Br4eK156R7KtbiItM=)
2: 0FB9EB64042F11EEB364B741C4F9AE02.roa (hash: n6Qf/JiR4rtaPvENLh8Bod7Vpff68SamyHvj1NNpSA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Validity
Not Before: Jan 31 03:37:00 2025 GMT
Not After : Feb 7 03:37:00 2025 GMT
Subject: CN=679c455c-8417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:3f:c5:53:e1:19:11:b9:3e:f3:b0:85:e4:
5e:5b:82:84:fa:88:bb:b3:65:38:25:62:c8:09:bc:
42:b4:58:27:75:d8:65:a9:00:50:77:0a:ed:f4:8f:
c6:c9:d2:56:cf:ca:0a:d0:16:85:d3:3b:12:a2:10:
23:f6:67:e0:ae:7d:1b:8a:94:2f:2e:b8:ff:db:9f:
c9:c0:0a:29:02:99:cc:3d:81:d6:f5:a3:9c:d8:88:
f3:ff:b4:22:60:0f:c3:17:4f:6b:c1:b9:ae:c0:38:
1e:90:21:b2:21:15:c5:1a:d6:c1:12:c4:b2:ee:5e:
73:2a:d1:a2:d4:5f:2c:6e:4f:ca:47:d2:83:5f:11:
a7:87:89:4d:27:57:90:9e:c7:82:b3:05:38:df:15:
1d:78:c9:73:d7:a9:e2:8b:ba:8b:5b:54:6e:b3:0d:
72:3d:b0:88:86:f3:ce:c5:0d:8b:08:b3:ef:b6:b6:
58:8b:80:3d:d6:2b:78:64:b2:de:55:44:9a:8b:a1:
f4:84:36:b2:e0:87:35:dc:c3:d5:1a:d2:e1:07:ff:
2a:ec:03:9b:34:af:66:23:2a:22:af:a1:d1:fc:88:
9f:f7:08:0c:5f:1b:54:2a:f2:08:5a:01:51:fc:0a:
48:82:b1:10:cf:79:91:80:6a:24:3c:6b:1f:2e:8a:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:48:A9:0A:D6:11:55:FA:3B:19:40:77:7E:33:06:A8:51:E4:F1
X509v3 Authority Key Identifier:
keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:8e:98:35:a8:b3:33:95:17:f0:4c:c4:a9:e3:46:fa:9f:60:
79:9d:e1:82:bb:9d:f3:88:1b:6d:fc:75:4d:81:1e:db:ce:49:
99:f0:01:64:83:86:e8:3b:27:5f:f7:94:9a:e1:86:6f:61:3a:
27:a1:79:2a:2d:b3:3c:69:e9:9c:c2:cd:92:50:ff:7b:ee:5b:
14:cd:77:37:70:ba:a9:fb:8d:00:d9:92:0c:00:aa:b5:25:3b:
f6:4a:bc:53:10:63:2e:9a:b7:83:a7:e0:ae:6b:61:5f:2e:7c:
a4:a1:c0:bc:7f:e3:fb:8e:72:70:9e:f4:36:a8:69:2a:16:16:
77:99:fe:46:3f:c9:3f:38:fd:f3:e2:ee:de:f1:6b:9a:e1:13:
1e:8f:f1:da:66:62:16:9f:f1:43:99:b1:d5:06:7e:1c:05:8c:
4f:a4:4e:91:73:21:1c:29:fe:55:34:95:ef:89:f2:fc:e1:9f:
19:47:97:66:a6:b9:50:48:cb:0f:83:9c:1a:fd:e1:0c:0f:b3:
48:3a:68:4b:a6:5a:18:c6:f6:ef:a3:dc:3c:03:0e:ed:d4:6c:
e2:7f:9c:e5:26:1d:08:a6:02:86:1e:9a:88:04:a5:c6:c4:51:
bb:2d:e6:d0:f7:9c:86:23:e2:9f:e7:b5:d7:c1:8c:23:29:76:
92:2f:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:32 2025 by rpki-client