Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier: emsQsIPHIqpgfdOZrXyLRFsjtz4f2qVgaybUSwACSU8=
Subject key identifier: CE:8C:E3:EC:5B:DD:BE:87:B2:E4:D3:F0:A3:5C:D7:35:03:31:5F:14
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number: 0197
Signing time: Fri 31 Jan 2025 02:41:00 +0000
Manifest this update: Fri 31 Jan 2025 02:40:59 +0000
Manifest next update: Fri 07 Feb 2025 02:40:59 +0000
Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: 9ZPPY0E7ZUJXGaJrlDxhLOasVTgeAbtIkHxlQIq0dWA=)
2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: hZSxXZVfZSsmj8u7ow4R04+VcNOuennA8/ZnNIfiPmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Validity
Not Before: Jan 31 02:40:59 2025 GMT
Not After : Feb 7 02:40:59 2025 GMT
Subject: CN=679c383b-fad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:ca:a8:f7:00:cc:24:db:b7:3a:08:42:1a:
3b:16:0e:3a:ac:29:f2:1a:97:6d:77:eb:cd:61:bd:
bf:28:66:a9:9d:34:82:3b:cb:1a:77:2b:a1:25:53:
16:18:e1:10:f2:f3:d0:69:33:44:4e:ab:bf:eb:9a:
00:5a:7a:03:36:68:81:1f:5a:77:70:2a:c6:5b:96:
64:77:5b:42:7e:d9:c8:7f:6a:d6:f2:63:13:fb:bc:
d6:cf:2c:a5:99:cc:32:de:fd:82:3a:0b:8e:f3:83:
21:c9:e3:54:30:47:10:63:da:94:05:69:0d:cd:cb:
04:f6:e7:66:56:d0:36:a4:64:78:d3:19:4f:55:7f:
e7:eb:71:2f:2d:74:70:9c:9c:2d:c7:70:ae:aa:e6:
2f:ad:98:3e:33:b3:6c:7a:90:cc:8f:4c:38:b4:34:
6d:da:10:4c:95:30:c5:49:09:a8:3b:86:b2:c7:64:
65:36:94:28:c5:81:ae:8d:87:be:5e:92:45:ff:a7:
6b:63:cc:9b:91:1c:b0:f2:f4:46:87:45:6e:0e:fa:
57:6d:61:eb:ae:c5:45:93:38:9f:0e:9b:f1:86:22:
28:73:2b:a9:92:fc:af:77:7a:33:e6:9f:a7:33:92:
95:07:cb:d2:1c:94:91:82:c4:7a:13:85:f6:4e:11:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:E3:EC:5B:DD:BE:87:B2:E4:D3:F0:A3:5C:D7:35:03:31:5F:14
X509v3 Authority Key Identifier:
keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:08:a5:b4:27:15:e6:38:e3:5a:ba:a3:af:55:0b:f3:5a:
f9:eb:0d:73:f3:8b:c1:2f:6e:e7:76:9f:2e:ec:20:19:7b:1c:
86:18:ce:80:02:5a:da:e5:bd:3d:5d:e0:d9:e2:15:bb:66:da:
82:1d:11:24:ee:d3:50:f8:04:74:33:30:e3:e0:a5:24:04:6f:
83:81:3d:4b:51:51:2b:a4:8e:31:8a:22:4f:19:0d:9a:50:14:
e1:45:19:b2:7c:d2:19:2c:81:5e:a3:13:f9:6f:32:2b:10:c0:
6d:09:17:25:14:00:bf:d4:4d:b7:8a:04:59:d8:9a:94:b2:e0:
e8:96:2e:0b:be:e5:f1:83:7c:1e:13:f4:8f:13:fc:83:3a:79:
17:45:13:34:08:01:64:c2:3a:06:cc:ac:be:77:ee:d2:ce:0a:
f9:77:ec:d7:aa:d3:10:26:29:46:5f:19:15:a9:e8:ad:f9:46:
2a:a3:cd:70:c7:da:c2:f4:e3:6d:62:73:21:20:84:a9:d7:fe:
cc:7b:5e:56:01:8a:d9:52:b9:da:ad:6a:25:de:16:a0:e1:b6:
24:2a:ce:79:4a:49:75:ac:bb:55:6e:18:c9:8d:5d:eb:29:55:
82:ea:42:e3:c0:56:e8:2b:2a:38:9e:38:77:73:e9:b2:dc:e6:
96:7e:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:03 2025 by rpki-client