Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json)
Hash identifier: ISC7OsphkxIWgBygejTpol276ckaThJEReXaBwxZtik=
Subject key identifier: 07:FC:05:98:C0:F8:58:C1:AD:A4:BD:FB:D0:61:35:2F:87:B2:AA:DA
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial: 0F0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
Manifest number: 0F02
Signing time: Fri 31 Jan 2025 17:37:01 +0000
Manifest this update: Fri 31 Jan 2025 17:37:00 +0000
Manifest next update: Fri 07 Feb 2025 17:37:00 +0000
Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: 9vq1ppglT1BrvIUO3q7pEawtxh/PWUvtR4OxrQISvRc=)
2: D193920E709411E99F95933EC4F9AE02.roa (hash: 0Os8j4kYKwSeqmj5yGoBBZfTw2aGD2KOY509iiv178E=)
3: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (hash: seqCKD6Db6uHjZMFtslvwJ+ELyFHvSU96+t1eEuQ2I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3854 (0xf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Validity
Not Before: Jan 31 17:37:00 2025 GMT
Not After : Feb 7 17:37:00 2025 GMT
Subject: CN=679d0a3c-feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:ac:18:7f:ef:ca:d9:21:e0:68:b0:05:26:
9a:f5:cc:f2:85:de:68:ff:72:99:bb:54:72:a3:17:
53:44:5b:2b:a3:7d:07:4f:e0:64:82:93:9f:11:21:
6d:b9:4f:6c:9a:d0:cb:8a:2b:7b:d4:b8:e4:84:42:
ef:f7:71:ed:55:49:1e:58:ba:0f:87:0c:74:26:a6:
13:2c:bd:03:9f:f2:4d:63:f1:fa:7f:94:45:5e:db:
29:71:78:75:78:3d:9f:fd:81:e1:4e:dc:49:05:55:
63:01:ab:76:e3:7a:82:52:50:12:e2:e0:ea:10:b7:
23:89:37:10:c5:2e:c7:d8:fe:ae:d9:62:bb:16:08:
a6:2e:02:c7:33:b2:9b:4f:13:3e:6e:cd:00:cd:53:
6a:ba:ab:e6:a6:41:fa:d4:d6:2e:b3:04:26:93:2b:
62:58:96:19:50:65:0f:64:49:c5:4d:7c:af:33:a8:
39:fb:3e:25:53:6a:bc:9e:52:ca:9a:d0:97:6a:2a:
21:e9:28:9c:14:07:a7:c1:08:44:91:ad:68:b9:f0:
6e:d9:e0:a0:23:26:0a:40:e3:43:21:9b:80:ad:89:
10:fe:1e:9c:79:49:91:61:7a:ad:c1:dc:6f:2f:a4:
2f:50:db:c3:63:27:57:da:d7:b8:09:e6:d9:51:9f:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:05:98:C0:F8:58:C1:AD:A4:BD:FB:D0:61:35:2F:87:B2:AA:DA
X509v3 Authority Key Identifier:
keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:41:35:b5:8a:e3:88:4a:c1:59:5f:8a:6d:0e:a2:2d:bb:9e:
bc:6c:a7:2f:5c:c2:ad:7e:27:06:3a:ff:e0:37:52:66:c0:de:
1a:d6:ac:4d:24:34:51:ff:67:c8:89:d2:67:54:2d:6f:0f:75:
04:1c:01:3e:be:b0:1c:50:df:b4:08:dd:88:d3:6e:0c:b0:8e:
70:e1:67:a6:14:b0:1d:9b:31:6d:76:5a:7a:8b:eb:59:e2:c0:
3e:f1:09:b4:55:00:2d:c3:25:9e:7e:e3:8d:10:ac:86:aa:1a:
6a:65:5d:a5:d0:d5:29:5e:70:da:1e:3d:d6:d6:46:2c:ca:5a:
93:a5:cf:9c:55:99:20:44:dc:79:83:72:fb:d0:c8:43:95:80:
8d:73:a2:87:9f:3d:d7:a6:56:88:af:73:94:c3:89:7a:27:ff:
35:83:80:c0:eb:80:4b:a1:82:3d:6f:b2:23:bf:32:b6:9d:71:
3e:60:b4:19:67:88:fe:1e:e7:b9:a4:1a:29:1f:10:2a:19:55:
f5:e2:40:19:f5:fa:f7:2b:18:bb:eb:44:c4:86:fa:08:6c:c9:
f0:2e:e5:f7:f1:84:9e:9d:eb:b7:67:bd:4c:49:80:f6:9b:0c:
f9:5c:57:38:c1:e0:ef:ba:9f:e5:0f:52:87:30:e7:9c:91:77:
54:ac:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:27:44 2025 by rpki-client