Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier: IK1/b90oF6y/nTrs92QQwhKUh/Ccg4ALSrMnz/wF7ak=
Subject key identifier: F6:83:77:1D:FD:21:48:EC:F7:F4:AE:53:AB:2A:70:FA:9B:14:CE:7A
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial: 0948
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number: 0941
Signing time: Thu 30 Jan 2025 20:20:08 +0000
Manifest this update: Thu 30 Jan 2025 20:20:08 +0000
Manifest next update: Thu 06 Feb 2025 20:20:08 +0000
Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: sAABNoFLWsnnk8mGmK+hzitsSn5ZOyJsBSrfjQDq2oA=)
2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Validity
Not Before: Jan 30 20:20:08 2025 GMT
Not After : Feb 6 20:20:08 2025 GMT
Subject: CN=679bdef8-74ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:cf:fe:c8:7d:95:ef:8c:ea:d1:c5:2d:80:
32:d1:64:12:cf:fd:95:bf:11:19:de:83:7b:c2:96:
53:33:37:2e:01:9e:88:27:43:89:ed:78:fc:2f:11:
95:7f:74:4e:a9:0e:49:37:bd:57:4a:e8:86:dc:1c:
bf:90:26:7e:26:6f:a4:5e:0d:54:8a:51:32:13:0b:
f8:02:a0:77:76:bf:d8:28:4e:92:5c:05:75:35:4d:
8f:f1:94:46:67:5d:e0:81:6e:3e:c8:c7:5b:17:a8:
1e:ff:38:39:14:65:d0:5a:e1:ca:0c:07:6d:6c:7d:
ec:06:cf:ab:62:4d:ec:25:38:f0:58:04:02:97:1c:
fa:b2:ca:86:ca:b6:71:d6:e4:cc:e4:7a:77:5e:23:
76:75:8d:c7:18:1b:6f:a8:d5:05:68:ff:1d:f5:12:
eb:44:99:d0:d3:55:df:5e:f3:1b:ae:7b:c0:2a:8f:
9f:4f:8e:af:99:4a:6e:7d:91:53:8a:bb:8e:14:f0:
a6:50:a0:d1:2f:99:5e:85:73:14:17:4c:61:6d:2e:
30:65:a5:04:03:e1:58:c2:30:ef:af:15:4c:8a:b6:
ac:04:d2:7e:5e:03:4f:0b:44:fe:5d:f2:a9:35:6d:
95:d5:f3:8e:fa:bf:a7:3a:a8:94:7a:a4:f4:a9:18:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:77:1D:FD:21:48:EC:F7:F4:AE:53:AB:2A:70:FA:9B:14:CE:7A
X509v3 Authority Key Identifier:
keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a2:51:af:ad:a3:09:40:df:ff:7e:fa:bc:1d:fc:ee:a6:a7:
12:97:97:59:ad:cf:cb:03:2c:4f:13:d4:2f:75:82:db:a6:97:
6c:36:e1:c2:ef:7b:43:0b:2b:84:41:af:37:9c:71:51:27:cd:
f9:6e:64:bf:89:b0:09:1a:7b:5d:ec:d6:f1:20:f7:56:ff:d4:
c1:ec:bd:4e:be:20:b6:0b:79:1e:03:a1:ae:78:e7:b8:83:45:
5a:bf:e4:d4:d6:10:37:fc:b8:1e:59:ce:24:4e:ee:19:ec:27:
8a:ae:de:38:80:da:2f:b5:86:e3:21:08:e5:e8:2f:16:e2:c6:
a5:b0:e8:99:aa:e4:b4:85:6e:55:3e:a5:79:13:8c:fe:09:a8:
db:47:70:b9:fc:1f:e5:71:33:dc:e2:50:14:49:af:00:d7:d2:
b6:da:52:71:49:39:65:63:ba:08:63:ce:4e:35:fa:70:67:12:
f3:1c:24:ef:6d:db:5a:eb:d3:59:bd:85:28:0f:c6:fd:a3:c2:
6c:b3:f4:ee:16:f0:81:a8:4a:72:84:ae:19:43:d8:60:e7:09:
7e:a7:c6:71:b3:0c:b8:2e:30:40:0c:07:0c:3d:14:c4:31:bd:
50:42:cb:56:aa:a5:1b:b8:76:40:07:17:f4:93:fb:ff:3d:12:
99:a2:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:12:44 2025 by rpki-client