Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
File: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft (raw, json)
Hash identifier: dNV2smq9dykeckDa1BydDlObQQ7s0dxpT6f4/ZQFMEg=
Subject key identifier: 8E:03:C2:81:F7:F2:93:C0:59:E3:51:A6:F7:12:B9:69:E1:C9:EA:34
Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Certificate serial: 05B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
Manifest number: 05A3
Signing time: Thu 30 Jan 2025 23:11:22 +0000
Manifest this update: Thu 30 Jan 2025 23:11:21 +0000
Manifest next update: Thu 06 Feb 2025 23:11:21 +0000
Files and hashes: 1: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl (hash: uFdPT1tW1qpDX693hhQe8Xonew3wDsDA+MOL3v4Qh+Q=)
2: E8C597A6CAC311EC910B8C20C4F9AE02.roa (hash: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=)
3: DB5A14DED46911ECBA5B5F41C4F9AE02.roa (hash: AUr7V0EIgEALueuFSq5XM/MsO85yQ02h1CJnq/h0usU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1460 (0x5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Validity
Not Before: Jan 30 23:11:21 2025 GMT
Not After : Feb 6 23:11:21 2025 GMT
Subject: CN=679c0719-d04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:e9:39:4b:5b:8b:31:55:7f:37:f4:f8:92:
5b:4d:e0:19:3a:53:a7:2c:00:9d:63:03:92:73:2f:
f1:30:cd:e4:cd:e2:8f:b7:d6:0b:b0:8d:73:d9:8d:
ab:f7:18:1b:32:95:48:63:86:7f:15:f6:eb:a2:44:
80:f7:0a:9e:bc:76:58:27:93:2d:48:39:e1:79:8c:
ad:d7:ad:25:31:76:97:1f:f5:cc:61:f1:d8:48:60:
13:78:e0:f7:a1:85:1e:14:98:4b:4d:08:e5:e9:82:
7c:ff:3c:f5:3a:9e:84:00:de:b0:0d:91:31:0f:25:
92:4f:ce:a4:31:cf:98:0f:ac:64:f9:39:30:cf:bd:
fd:c7:2b:3c:43:a4:63:17:80:e0:d5:8e:24:85:71:
5f:fa:40:8f:b1:42:6c:1a:e7:d5:ba:0e:90:bb:82:
cd:4b:fb:f6:c2:e2:fc:0e:e9:29:ec:6f:70:d3:d0:
1e:b8:6e:c9:d2:06:34:c4:e8:60:64:c1:7a:cb:97:
93:bf:97:f1:7c:b8:7a:f2:9a:09:bb:80:68:15:3b:
76:7c:01:1c:f2:9a:3b:84:87:bd:36:50:e6:57:f6:
43:95:89:d5:33:91:cb:70:f5:c2:e7:89:54:59:2e:
63:67:6d:78:86:25:65:5e:9c:41:26:ef:2e:d1:4c:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:C2:81:F7:F2:93:C0:59:E3:51:A6:F7:12:B9:69:E1:C9:EA:34
X509v3 Authority Key Identifier:
keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2b:90:b2:18:ff:ce:4b:07:44:d9:24:1d:c7:18:80:f6:39:
91:24:73:c7:8c:c9:ca:86:12:ef:bb:20:cc:d8:5d:10:8c:49:
ba:f2:1f:c9:00:9e:2a:80:33:42:86:84:c4:46:38:80:aa:6e:
f0:50:67:2d:16:33:88:c9:2b:fa:1e:54:f9:54:c4:51:c9:de:
76:d1:e9:5e:74:71:ef:24:1e:19:f4:15:57:99:d9:63:cc:32:
07:ff:1b:3a:45:26:0d:09:6e:04:a8:b7:73:8d:7b:1d:3c:f2:
f8:e1:ff:e5:07:02:7f:28:6c:e9:72:15:76:09:f2:c8:dd:8c:
da:10:97:13:90:c4:87:75:d3:70:40:a5:d3:1a:a4:7b:66:90:
27:81:e4:2e:14:a2:33:7a:f7:a7:95:88:f9:67:72:65:f8:f5:
e2:0d:57:96:93:98:18:bd:b0:a6:18:ae:70:fe:46:43:24:5d:
ef:9a:8f:63:0c:1d:88:64:52:88:98:e5:6f:99:28:08:1a:c7:
0f:94:d1:b2:c4:5d:a4:5c:31:35:65:7b:91:10:5e:45:17:d0:
6c:53:e4:6f:6b:49:3e:ad:e9:3e:1f:9a:87:d6:16:0e:5f:a8:
e1:3c:ee:c8:cd:aa:8b:6d:a1:f6:b6:36:b1:53:8d:de:1d:cc:
50:d1:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:28 2025 by rpki-client