Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json)
Hash identifier: ALcXb97oFdOMZP8QewNyQC+Tf/WShc9kndItusPuuws=
Subject key identifier: 8C:19:62:96:CC:73:5C:1F:31:A2:35:26:94:36:85:BB:52:A3:E5:9E
Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Certificate serial: 09D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
Manifest number: 09C1
Signing time: Thu 30 Jan 2025 20:05:02 +0000
Manifest this update: Thu 30 Jan 2025 20:05:02 +0000
Manifest next update: Thu 06 Feb 2025 20:05:02 +0000
Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: FRAe5sHRohfeeKydtjD45VRUjuevEceeYG+b6lKvcM0=)
2: C886095278C311EAA3BED75BC4F9AE02.roa (hash: 5ZUfJ/DmgqRpIsn2EL1trFIXyZWZYhkSJfMnijLCwE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Validity
Not Before: Jan 30 20:05:02 2025 GMT
Not After : Feb 6 20:05:02 2025 GMT
Subject: CN=679bdb6e-d8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:0f:90:72:f7:37:b0:06:32:30:28:e2:d8:
0f:9d:54:6a:4c:98:e4:41:cb:1a:57:c8:f7:ce:3e:
77:9d:9f:2f:ae:9b:aa:2c:8b:04:21:66:85:46:52:
7a:c5:13:8f:30:d2:ff:2c:a9:8b:03:a9:a8:59:d6:
a2:84:c6:58:e0:8d:a9:24:9f:83:f3:4d:b7:72:46:
a2:8f:8e:fa:a6:77:ba:eb:ba:d1:94:a3:d2:71:2b:
53:35:11:8e:70:25:c9:f9:bd:c1:2d:50:a8:36:db:
88:6f:e4:3c:b1:48:e3:d3:55:e8:a2:cb:a1:4c:0e:
af:e1:fe:86:f2:a3:8c:ff:95:de:8b:4f:56:2e:8c:
bf:fe:fc:a9:5b:1b:8e:cf:f7:03:8d:bd:d9:65:1d:
f3:e4:0b:15:32:08:d2:b1:d3:a5:30:2f:4b:1b:ae:
21:00:81:b9:40:e9:77:5a:11:47:78:7d:04:09:a5:
54:2b:37:27:38:73:99:18:5c:74:3e:c4:3c:83:e0:
3e:56:79:24:d9:9c:37:48:6e:2f:d6:c5:2e:4e:01:
14:d8:ff:6a:c3:17:6b:64:d2:62:68:d1:96:d6:3d:
41:35:c7:3d:01:d1:40:20:fc:d9:98:8d:b0:c2:c3:
12:36:4e:db:da:fd:41:43:b0:fb:3c:ca:f7:7c:35:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:62:96:CC:73:5C:1F:31:A2:35:26:94:36:85:BB:52:A3:E5:9E
X509v3 Authority Key Identifier:
keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3d:ec:21:3a:1a:e8:26:03:bb:e9:d0:e7:1f:35:c2:47:bd:
bc:0c:48:07:80:4f:06:e3:e9:67:8b:72:a7:55:9a:98:ed:64:
d6:9c:5e:a5:50:63:16:bc:fb:73:cf:40:0f:1c:42:b4:0f:2e:
66:f5:cd:ec:8d:fa:b2:1a:45:ef:21:0a:68:40:d7:35:7a:fb:
e5:e7:d7:f2:40:d9:ca:a2:03:71:dd:b4:dd:4b:98:88:95:99:
04:c3:1e:c1:cb:ab:4c:aa:9a:62:32:52:a1:94:d4:0f:0c:67:
c5:06:7a:5c:24:b0:67:ca:b9:c3:33:52:17:12:a7:ea:16:ba:
61:9a:89:4b:e0:a8:64:b6:02:69:0d:c6:5b:2b:19:df:e7:e8:
08:f2:43:2a:29:af:81:6d:93:95:66:fc:a2:50:22:dc:d8:c4:
5b:3e:ea:15:10:95:50:e3:28:a8:dc:5a:2e:8b:ce:38:96:b2:
a5:d2:f1:55:9f:a6:69:8a:b7:0e:4e:c2:31:bf:fb:95:96:bb:
2d:ed:c7:e5:c4:8e:bf:7f:1e:05:d1:ce:2c:5f:5b:62:7b:10:
71:e8:3f:8a:02:84:1c:25:40:70:8d:43:87:17:21:16:12:81:
34:cb:8a:ef:73:f8:a4:56:51:30:c1:0a:bb:c4:cb:2e:43:34:
a6:ae:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:57 2025 by rpki-client