Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier: lid4I5Ru/JSHfER49scq7etv/1paRZhyUJ2mrOIf5oM=
Subject key identifier: 10:86:23:5A:0A:33:5F:1D:04:D6:22:36:47:66:B2:5F:C1:E4:B1:92
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0A86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number: 0A76
Signing time: Thu 30 Jan 2025 19:45:04 +0000
Manifest this update: Thu 30 Jan 2025 19:45:02 +0000
Manifest next update: Thu 06 Feb 2025 19:45:02 +0000
Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: 0+g6wjlIfaJUuUOhfTsT72kw5ceoksrkh8lOWap1wJc=)
2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: jqqBqCZOKu2qIALXNmkWZIy2E6GEnPXSik4fgBrMrDA=)
3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: lxeOojn+XYimi3V1BZ9O9tBljDRntCvGVjoxX3VG+x8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: Jan 30 19:45:02 2025 GMT
Not After : Feb 6 19:45:02 2025 GMT
Subject: CN=679bd6bf-3a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:76:f0:44:b6:9e:05:49:9a:aa:33:07:60:
e6:ac:ea:4a:b4:ae:66:67:1b:79:2e:52:17:4a:52:
49:76:13:50:a1:fc:d5:10:c0:07:bc:99:ba:a0:45:
27:c1:b0:a3:06:93:94:0c:ed:a5:a9:a4:85:3b:1d:
5d:3b:0c:9b:32:a1:01:68:f2:bf:8e:9c:42:d8:ec:
6d:a0:b7:fd:4b:5e:98:66:6c:f0:f9:ad:44:81:66:
ae:30:9c:5c:e4:41:65:86:2c:c0:51:7a:a5:3d:3c:
b5:7a:66:2d:c1:3e:7a:31:66:b7:6f:86:e4:d2:53:
93:39:77:d5:e8:7f:d0:1b:71:38:c6:03:cc:26:6f:
9c:f4:4c:5e:6c:a9:1c:90:00:54:1b:e1:c6:88:85:
ff:cf:1c:bc:bb:2b:70:5b:0d:fe:fe:63:af:49:55:
56:03:19:c1:e4:7b:f0:6e:dd:30:83:96:c4:ef:f7:
ad:52:9b:cd:03:ae:40:4e:28:9f:c4:30:10:92:31:
fe:ac:b8:12:8f:54:d4:eb:eb:c7:5e:25:e0:1b:1c:
4f:d4:dd:8d:b0:9a:fa:5a:e2:39:af:d7:9d:d1:3f:
c4:e7:0c:4e:c2:49:e2:ab:4d:16:71:65:e7:b4:73:
26:61:09:53:f2:cf:e2:94:56:85:1c:10:6b:2a:b0:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:86:23:5A:0A:33:5F:1D:04:D6:22:36:47:66:B2:5F:C1:E4:B1:92
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:0f:8f:12:c8:1d:50:4a:cf:f0:b1:a3:7e:fd:ec:85:14:
64:d6:c9:71:19:1b:3a:ca:6d:11:26:53:44:35:20:70:e6:a0:
f6:f3:3f:ba:c7:4f:73:48:0e:d9:94:99:8e:2e:7c:6d:7c:86:
29:74:5d:2a:e5:11:28:ea:c5:24:79:42:62:ed:5d:fc:b6:76:
11:1d:13:f0:53:7b:3b:c7:fa:cd:e7:71:77:83:d7:66:81:87:
c6:4b:99:56:aa:df:47:1c:2d:43:fd:5b:20:6a:f8:16:84:7b:
4e:73:af:e7:fd:64:35:b2:38:a7:04:2b:17:fe:5f:81:e7:ba:
97:31:db:28:6e:ee:a4:60:06:a8:5b:7a:bf:2d:fb:e9:e0:ba:
ce:64:b2:d6:ca:3f:d9:f2:95:4f:e5:a1:75:2b:2b:81:96:96:
6f:98:cb:89:90:59:f4:13:6c:f1:c3:96:eb:70:e6:77:44:e1:
ea:fd:32:b1:0c:84:af:5a:17:1f:89:a3:09:06:e7:14:d4:86:
79:3d:41:2a:82:09:d7:dd:73:df:ad:4e:c7:fa:06:82:79:2a:
e9:a2:de:5b:1b:91:81:9c:c4:bf:46:12:4e:cd:53:c9:30:06:
9c:00:20:db:e8:49:c7:03:56:ff:12:18:14:bf:af:f4:90:6b:
bf:33:a8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:20 2025 by rpki-client