Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier: YWBQ1+nHXfZduqfHNP4/xNpQhIlIYBAQkQ+V5mz6L18=
Subject key identifier: 96:14:D5:B8:A9:EE:6A:EC:54:B4:3F:FE:AF:6D:FD:21:93:9B:3C:43
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number: 9C
Signing time: Fri 31 Jan 2025 05:25:42 +0000
Manifest this update: Fri 31 Jan 2025 05:25:41 +0000
Manifest next update: Fri 07 Feb 2025 05:25:41 +0000
Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: 2uxV/CORWB5B+6dH6QOaXvRYX98uZpOXj24MLXMwa7s=)
2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Validity
Not Before: Jan 31 05:25:41 2025 GMT
Not After : Feb 7 05:25:41 2025 GMT
Subject: CN=679c5ed6-21d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:e6:83:3d:e9:9d:02:41:19:4e:95:01:9b:
60:46:da:cd:73:06:27:1e:2e:3d:a5:3f:c6:b8:ec:
c2:14:f0:36:33:ce:1e:eb:f6:21:31:31:57:65:96:
24:bb:a7:c3:d4:a3:c1:66:d1:42:97:2c:75:f5:a4:
9e:c4:4e:36:19:6d:8f:30:e8:ce:49:29:2b:f0:5c:
73:2c:17:67:68:e5:d5:3b:fa:fe:74:ef:03:e4:b9:
1d:c8:36:61:c4:bf:13:2a:a0:cf:d4:0d:ed:c0:87:
55:c7:db:5d:c2:87:c2:99:36:1e:dc:b0:a8:fd:b0:
05:d3:37:67:8a:97:09:7c:ca:56:59:5c:55:68:c4:
a7:b9:2c:2c:12:3d:26:d8:09:b8:68:78:e4:3d:cc:
30:11:c6:6f:8e:02:f2:0d:5f:fe:b3:f2:9e:b6:a9:
4b:fa:cd:48:e9:f8:c7:5e:f8:ad:e4:ed:8a:8b:41:
16:18:0f:8e:70:b4:a5:a1:11:d7:2d:fd:f7:9a:9d:
03:9e:d9:b8:71:3e:7f:79:ec:be:99:a8:66:b7:4a:
61:4b:ab:e8:bb:3d:6a:6a:09:83:f2:22:f7:12:7d:
f0:3d:36:c8:02:80:c2:be:de:d7:e1:8e:0d:4f:26:
99:68:65:ba:89:86:14:fb:31:92:bd:80:e8:ee:0e:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:D5:B8:A9:EE:6A:EC:54:B4:3F:FE:AF:6D:FD:21:93:9B:3C:43
X509v3 Authority Key Identifier:
keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2f:1d:9a:19:98:80:0a:20:b7:16:94:93:ca:db:81:dd:ac:
e8:0f:83:84:4c:e9:b1:1a:ab:18:97:4e:44:ff:4b:96:60:6c:
90:35:e5:f2:0e:d3:f4:8a:68:2b:1b:4f:37:db:0b:13:78:ee:
a1:e8:f0:be:88:3e:fd:56:5e:f4:2e:e1:3b:ae:a4:cd:c6:fd:
ad:27:ff:53:8a:5d:93:3d:96:d7:ed:ac:cf:9d:98:20:43:6d:
13:69:91:ef:a9:63:8d:e2:b4:81:eb:03:c9:52:dc:84:7e:ae:
40:5b:b0:b4:34:85:e8:70:84:25:8e:96:42:3a:82:01:dd:69:
62:52:26:b6:ff:df:b0:c1:33:29:d5:79:30:8c:9e:13:ac:94:
b0:52:73:59:97:68:f8:57:aa:09:41:01:22:c5:1b:64:21:0b:
31:fa:81:af:02:f8:2e:a6:93:0a:d1:c0:4f:80:8e:58:6c:af:
dd:f3:aa:88:41:d6:3b:b9:66:cc:d6:c3:a7:e3:10:fa:a6:22:
06:c5:07:eb:ae:09:ec:33:19:e3:f5:e5:9c:ff:30:12:da:10:
93:bb:1c:4e:dd:f4:f5:25:ef:72:52:bd:a8:03:9f:05:15:f3:
a2:53:63:cf:82:db:a0:6d:73:3a:55:cf:11:9a:8f:e6:7b:50:
24:fe:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:39 2025 by rpki-client