Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier: XUUPORv1B5HRdFgnVvjVrDQTjorDE1qWqWufKVICiKA=
Subject key identifier: 8D:DB:DD:11:EF:0F:02:5A:AD:F7:14:8B:EF:F1:90:F9:A0:38:51:14
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial: 0BBA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number: 0BB0
Signing time: Thu 30 Jan 2025 18:54:32 +0000
Manifest this update: Thu 30 Jan 2025 18:54:31 +0000
Manifest next update: Thu 06 Feb 2025 18:54:31 +0000
Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: p242oJli40KszXqIhdWumsq2CbC+ZOXZ6A/Me6OIZbE=)
2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: 4j1+qtyMWN0dqgm2cyGCSaGaYzA8FF/mpgBxorKl3nQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Validity
Not Before: Jan 30 18:54:31 2025 GMT
Not After : Feb 6 18:54:31 2025 GMT
Subject: CN=679bcae8-730f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:eb:80:db:a7:e3:0e:70:53:04:2b:2a:5c:
02:d6:56:fd:d4:63:e6:ef:eb:a6:56:5c:5f:98:bf:
b4:0b:7b:98:26:1f:70:92:39:7c:d5:62:40:c2:b2:
5d:79:63:97:19:e7:2d:b9:de:42:47:73:7e:37:d0:
53:11:cf:8e:14:2c:ba:35:d9:81:ba:d5:0b:86:08:
d3:eb:36:45:a8:15:8e:4e:28:9d:26:18:8d:ce:c5:
ba:63:52:7b:ad:6a:50:ed:ef:d1:e9:84:7c:84:d6:
b9:d0:39:6e:a4:e9:90:52:01:aa:0e:3a:15:1f:5e:
86:29:0f:fa:21:a2:1f:f2:7f:8b:06:e7:17:19:15:
3f:9b:cd:24:ad:38:65:ae:14:3f:34:bf:6a:15:66:
65:30:82:b9:6f:02:c6:0b:11:f8:d7:58:ef:60:3b:
3f:40:cc:a0:8e:76:02:b1:9b:65:63:6a:2e:4d:ee:
77:53:f9:75:11:72:d9:63:26:05:3b:1a:4a:c8:0f:
c8:30:ac:4c:a6:89:84:26:fc:d7:80:43:9e:d9:70:
43:f0:0b:e5:2e:a4:e0:47:02:5b:84:9d:28:d3:97:
47:1a:de:bc:b1:9e:a5:30:80:c3:92:aa:27:05:ef:
1e:38:e4:92:d4:ac:45:ee:c2:a2:35:9b:9d:20:01:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:DD:11:EF:0F:02:5A:AD:F7:14:8B:EF:F1:90:F9:A0:38:51:14
X509v3 Authority Key Identifier:
keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:ef:1b:2e:9d:5a:24:e5:eb:97:8e:8c:13:b9:ce:98:d1:
69:8a:60:ad:7b:f2:83:60:2d:26:a9:4e:51:aa:3c:68:3b:ba:
52:c2:80:a6:cb:bc:fa:5f:b8:d2:99:3e:3a:fb:e9:f9:d5:40:
eb:be:33:be:52:f4:62:7b:a9:74:99:ec:51:e5:20:fa:4a:2d:
d7:d2:e5:ab:97:27:46:24:f3:d2:5a:f1:15:08:b3:82:c8:04:
df:d7:9c:25:54:39:f3:31:23:07:43:58:0c:4e:5b:b7:bb:e4:
4f:b0:09:db:98:cc:4e:22:59:ab:89:22:73:01:c5:1a:dd:8e:
9d:42:98:0f:f6:88:ad:71:5a:99:77:e1:17:fb:90:bd:d6:9e:
e9:06:b0:b3:23:a1:a8:66:94:db:85:da:8e:b5:c5:74:d1:41:
62:8b:6d:0b:68:58:40:cd:42:cf:0e:df:20:5c:ba:08:6c:52:
bf:a4:e3:d2:42:1c:0d:9c:c3:68:92:ba:c2:95:e9:c3:94:05:
54:ea:57:21:5c:06:c4:f3:19:a5:83:19:17:9b:6e:73:09:8e:
51:26:79:e0:a9:26:37:25:8b:af:29:4d:61:e4:fc:25:f0:0f:
fd:9c:14:39:b9:17:5f:1a:0c:7c:61:27:34:d2:bd:aa:4e:2c:
ed:a5:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:51 2025 by rpki-client