Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json)
Hash identifier: p4vTGrMi+djiypUPPkZ9X3ZltENAS4eN4FfZQio4MJc=
Subject key identifier: C0:EB:3E:1A:2A:08:D3:D7:ED:32:26:6D:37:A0:6A:4A:F6:C3:B5:F0
Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA
Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 04:54:35 +0000
Manifest this update: Fri 31 Jan 2025 04:54:35 +0000
Manifest next update: Fri 07 Feb 2025 04:54:35 +0000
Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: TLj+jky90jHhgpmR7MImnEaVx5In+/l/FMBoDoAkSHk=)
2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: sbXLUP+ySv876OX4drz/OH3VKKGNMGx7S1G0hlILvsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
Validity
Not Before: Jan 31 04:54:35 2025 GMT
Not After : Feb 7 04:54:35 2025 GMT
Subject: CN=679c578b-6c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:78:05:ef:0b:e9:69:a3:76:9c:10:0b:71:
d2:fd:cd:78:49:8e:2e:a5:02:49:08:70:38:0c:ac:
38:f5:1d:61:30:82:a7:fa:33:b3:73:02:90:6f:30:
b2:ce:9e:b0:5d:3a:db:33:87:6b:e4:7f:fc:3f:c0:
a8:74:7c:2e:36:9d:3c:06:96:3f:63:ee:62:b3:fd:
d8:37:d5:a9:8a:38:5f:44:07:04:1a:fe:52:e0:18:
e0:d1:dc:92:2e:5a:0d:08:2e:e1:22:f7:c9:6c:70:
fd:2e:19:c1:cb:d1:02:84:46:17:51:14:f2:7b:ef:
6e:24:cb:26:fe:bc:3f:43:92:62:1d:18:ef:44:2b:
f8:3b:8d:3a:5b:47:2e:c3:e6:11:cb:8e:0e:2b:ee:
1b:32:52:93:b4:53:c6:ce:53:8f:15:7b:12:02:a8:
2b:8f:a1:1e:63:20:c7:0d:34:08:42:2e:b5:e4:51:
4b:17:38:50:54:db:0b:8f:4c:99:2e:06:a8:e0:3a:
95:f6:8e:93:a9:0e:79:9b:53:e1:7c:3c:90:52:48:
16:6a:af:af:52:35:e5:a4:72:b5:58:79:cb:a8:71:
b9:6f:ce:06:0c:84:ab:c2:64:02:4a:b3:1e:c4:ff:
67:9e:61:c1:87:ea:75:bc:2e:aa:b7:28:bd:75:ad:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:3E:1A:2A:08:D3:D7:ED:32:26:6D:37:A0:6A:4A:F6:C3:B5:F0
X509v3 Authority Key Identifier:
keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:3a:b9:ad:6d:e8:7a:d6:6e:d6:53:ae:09:88:4d:47:bb:71:
58:20:1f:66:17:a9:52:62:c5:64:ad:95:ef:55:57:f3:a6:47:
50:5f:e4:6d:44:82:27:dd:82:8c:ff:54:5b:88:a2:a4:1e:15:
fd:93:c6:9c:2f:62:ff:a2:ee:c4:91:3b:3b:b8:ec:e3:a0:16:
32:5d:12:2b:82:4e:ae:ad:23:4e:9b:fe:a6:a5:00:72:5a:3d:
9f:f9:2b:35:df:e3:65:a9:34:16:6e:73:a2:3e:38:7a:3b:e1:
ca:0a:c2:0a:02:8b:04:2d:18:a1:32:fc:65:05:17:dd:cc:9f:
5b:75:35:6b:6f:30:f5:4e:68:dd:cd:6f:47:cd:00:e4:b0:54:
6e:01:58:fd:6d:0b:34:cf:6b:2f:ae:7c:81:20:f5:94:ff:0e:
4b:1d:84:0e:6b:23:44:57:df:93:4b:2f:df:a7:06:90:b6:f0:
1e:27:67:a5:45:e2:9d:60:22:16:4f:26:75:26:26:80:e8:78:
33:42:34:f1:62:71:14:cb:f4:d5:82:be:8d:75:ed:44:31:6c:
54:49:a4:fb:73:9b:cc:1a:13:b3:08:b7:b9:b5:2f:b4:c7:7a:
7b:36:27:e1:51:08:75:a6:94:4c:f6:52:e8:f1:da:cc:f3:e7:
49:65:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:29:52 2025 by rpki-client