Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
File: NyCB99vi7xGkQRvU5q-G8yaYyvo.mft (raw, json)
Hash identifier: AS84vC69rhcA8NYG4w83fvc3aItjjfFzbUjEsaQ8Hmg=
Subject key identifier: 41:7C:9D:3F:DC:FE:FB:62:36:8D:C5:31:8F:26:AA:32:88:4B:76:1D
Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 05:39:04 +0000
Manifest this update: Fri 31 Jan 2025 05:39:04 +0000
Manifest next update: Fri 07 Feb 2025 05:39:04 +0000
Files and hashes: 1: NyCB99vi7xGkQRvU5q-G8yaYyvo.crl (hash: pnH+4PNzCC7LA35lMiQSuM6O+CbxWeX4FKElP46vjkU=)
2: 680CA022140F11EF99D47F17C4F9AE02.roa (hash: 04UnpmnSMr4KxT7I14Z6Z4RlxSd1PflOoSJyZd1LDaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Validity
Not Before: Jan 31 05:39:04 2025 GMT
Not After : Feb 7 05:39:04 2025 GMT
Subject: CN=679c61f8-b5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:a4:fb:2e:79:ac:c5:61:4e:c8:ef:92:dd:
e1:29:9d:07:b8:d7:b3:f6:0e:36:b7:9f:9d:d5:06:
7d:d4:da:7b:6c:f2:d5:86:08:f1:81:eb:1a:fa:b6:
ae:f7:67:a0:8e:db:f6:66:74:2d:04:64:b0:b3:cf:
a2:c9:ea:e9:8a:0d:6e:35:8c:ad:8f:0b:8c:5a:c2:
32:e0:c3:b8:ba:0a:8e:d4:f0:69:ad:eb:6e:ca:86:
cd:38:4a:25:84:6c:c2:dd:d5:d7:83:97:0a:b1:fc:
64:60:91:0f:1c:b1:a5:05:2d:1f:69:42:85:51:d7:
b4:3f:da:8d:89:9d:01:19:70:2a:5e:e2:3c:88:df:
0f:a6:06:da:30:f4:3e:eb:c7:2a:38:a0:0d:19:d1:
67:5f:0a:93:4e:31:36:1c:01:6b:90:d0:16:9c:56:
b4:ab:c0:4b:73:c4:ae:7c:29:31:f6:8c:75:38:29:
c7:4f:78:95:de:70:b3:5a:65:9e:7b:58:6a:56:71:
a6:32:b9:d9:b1:49:6a:b5:3b:e3:b9:85:86:87:5d:
f7:d3:15:95:17:03:bd:3d:b6:ad:ea:2d:8c:d4:6d:
3e:1b:ea:fa:9b:40:28:a5:4e:7f:6a:94:01:33:a0:
96:0e:8e:cd:b2:d3:2f:a1:53:92:9d:7f:72:1f:df:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:9D:3F:DC:FE:FB:62:36:8D:C5:31:8F:26:AA:32:88:4B:76:1D
X509v3 Authority Key Identifier:
keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ff:bb:6b:cc:f3:03:e5:46:7f:0b:90:3b:52:2e:fb:be:44:
12:16:d7:f4:bc:e5:e8:1a:94:b1:07:fa:f9:23:8b:7e:c9:95:
f3:c9:90:1a:cc:f9:fa:ff:bd:d9:8c:86:b1:00:16:09:a0:7b:
8e:2b:e5:1b:a2:19:75:77:30:7f:5c:17:8c:f6:70:b5:06:0f:
c2:80:71:13:d4:5f:11:ac:2f:d4:f7:63:f6:96:15:85:94:db:
e6:2b:59:83:d1:65:96:22:ca:a7:a1:ed:f6:ce:8d:35:aa:9b:
34:e4:2e:ca:c5:99:f4:c7:a3:05:04:2c:41:a3:a8:60:1e:9f:
8c:0b:f4:6d:26:f3:69:cb:c7:44:4b:be:ce:86:54:4e:2a:2d:
0e:f7:fc:6a:44:f5:e4:ee:b2:63:69:58:16:51:19:0b:07:15:
c6:f5:26:6f:a5:f3:d6:0c:8f:28:8c:7f:b9:74:28:b0:94:96:
d1:f3:90:a8:7e:19:e4:b1:32:cb:af:be:63:ca:6d:88:d7:5d:
8c:cc:bb:9f:c8:ff:62:88:2d:28:53:c0:47:2f:c0:11:ef:e4:
7a:80:07:c0:b2:04:ec:de:15:8f:b9:a8:0d:e6:fc:dd:7c:ca:
18:c5:9b:7a:78:5d:17:9b:72:35:34:39:de:04:92:82:a7:ca:
58:21:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:08 2025 by rpki-client