Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier: fWilua4U+WLGJkmtrTaoPLjUcyexWGYTKLnr5N+Wxvg=
Subject key identifier: D2:D4:9F:43:DA:C9:5A:46:D5:63:77:BD:AB:FE:B1:3E:3B:28:1B:C4
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number: 84
Signing time: Fri 31 Jan 2025 05:53:14 +0000
Manifest this update: Fri 31 Jan 2025 05:53:14 +0000
Manifest next update: Fri 07 Feb 2025 05:53:14 +0000
Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: aKwkx9axi6iWJ5M0Xati31w93qd5DTKXuopLdUHmSro=)
2: 06398E92797611EFAD5DCD6DC4F9AE02.roa (hash: oB1KrOj+GDSyYCYs5T2AxtFqZGFct9w3bhi2QDabxU4=)
3: 057FD54C797611EFAD5DCD6DC4F9AE02.roa (hash: IIcRFMkWVb72LioRJMwB/nH0T6BzbBtQr1NPRFzqssc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Validity
Not Before: Jan 31 05:53:14 2025 GMT
Not After : Feb 7 05:53:14 2025 GMT
Subject: CN=679c654a-339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:26:e0:cc:e2:8e:e0:35:86:f6:a7:4e:87:
e1:b0:db:59:bd:5b:19:57:4a:14:3c:10:d7:e1:85:
ee:00:d0:66:04:68:f2:7e:ff:4e:54:34:83:56:ae:
4d:3c:c5:73:3c:5f:bc:56:78:15:3e:be:1e:e3:b7:
26:50:ff:48:94:3c:96:91:b2:61:3e:bd:a1:30:62:
d5:f8:d9:cd:c1:00:3b:77:fb:cd:6a:ce:5d:7b:44:
b7:1e:0e:b3:19:b2:a4:25:8f:70:31:1f:e0:25:fc:
2e:57:50:26:fc:3c:d3:6e:9e:c6:1e:36:ee:92:f4:
9a:c5:0e:b5:04:82:81:33:c6:2c:ff:d3:ff:8b:92:
b8:67:ce:a8:9f:1f:dd:2e:b6:f0:87:13:35:fe:9a:
69:a2:dc:e6:6f:61:c2:2c:b2:9c:ee:61:9c:49:de:
e1:a1:13:0d:90:e0:4c:f4:b1:9b:50:c2:3a:bb:4d:
fe:e8:b0:aa:65:01:09:8e:60:40:11:e9:e4:69:c6:
ad:af:58:da:66:8e:4e:30:f6:6c:b0:8d:eb:11:e7:
d2:e5:4d:e5:f1:19:a6:7e:8b:41:d2:e5:9f:8b:10:
71:b0:38:31:96:37:bb:5c:5c:5d:50:f0:a4:f9:20:
40:a6:b0:7a:42:94:d1:cc:ef:4b:13:a4:b2:47:c2:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:9F:43:DA:C9:5A:46:D5:63:77:BD:AB:FE:B1:3E:3B:28:1B:C4
X509v3 Authority Key Identifier:
keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:f5:0b:2c:d0:66:a4:29:5b:09:24:3c:b1:2c:a3:22:07:
87:a7:14:7e:ea:66:f6:89:02:d7:61:bf:93:1c:51:3f:b0:f0:
56:3b:36:73:ac:2d:cb:56:47:5e:d0:cb:57:7c:25:90:22:af:
05:7a:61:7f:9c:1d:32:b4:e8:e5:21:b4:b6:a3:cb:a2:85:0e:
4c:b5:d0:d5:58:31:9b:1a:e3:25:69:16:23:d2:df:61:d6:33:
0b:26:b7:e5:cd:d8:a2:ea:1c:c1:7c:8e:4e:a5:bd:db:39:42:
76:b6:97:04:2b:19:2f:42:76:37:b3:d7:d6:ca:e3:22:44:d4:
6a:49:75:72:a8:06:68:a7:45:39:a3:d9:c1:c2:0e:ea:0b:06:
1b:7b:a7:40:ad:0a:8a:a9:77:25:d7:0b:91:3b:cf:79:5e:87:
bd:1b:0b:fb:b4:e3:9f:da:e2:ff:21:49:39:28:02:42:c1:5c:
a6:0f:b6:fa:74:c8:5b:b4:8a:c4:99:31:62:9d:36:a7:6c:50:
8e:83:4f:f1:ce:2e:3b:1a:1c:bf:da:76:da:69:38:bd:ec:9c:
84:99:3d:6a:fe:d7:ea:57:35:15:e5:4b:84:63:81:7b:3a:a2:
19:3d:2a:c8:1c:f6:be:47:29:33:73:90:2b:8e:d3:2a:f7:4f:
e4:32:ae:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:29 2025 by rpki-client