Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json)
Hash identifier: hCWCoPMX4HS3hwkMZ/l3qc/fiHg75AyR45lDanRv5ew=
Subject key identifier: D3:A8:C9:87:82:F1:43:62:0A:79:7E:F0:6E:9D:32:3A:A6:D9:BA:E8
Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4
Certificate serial: 095C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
Manifest number: 0957
Signing time: Thu 30 Jan 2025 20:16:47 +0000
Manifest this update: Thu 30 Jan 2025 20:16:47 +0000
Manifest next update: Thu 06 Feb 2025 20:16:47 +0000
Files and hashes: 1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: AWdnciSgahfkDtiKNcsK6oGPxkrSJABSCYkGoeUnWqs=)
2: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (hash: bvB7GDHmnaarF1qMqlspjRavNLu6JF79ftbNTEveK8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396 (0x95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4
Validity
Not Before: Jan 30 20:16:47 2025 GMT
Not After : Feb 6 20:16:47 2025 GMT
Subject: CN=679bde2f-0967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:74:72:21:1e:ef:b2:08:ea:1a:85:46:51:
f7:a4:34:cc:47:41:ab:3c:30:a5:94:1e:dd:bd:ac:
b3:5d:b5:49:62:ed:ae:cf:a7:55:a0:12:5d:6a:74:
96:06:05:af:49:09:90:a6:52:29:40:fd:fc:10:ed:
a5:8d:e9:96:66:f3:50:d0:f6:ca:bc:69:15:01:81:
ca:2f:f3:6c:a9:2c:1f:0f:0c:ce:f8:4e:8c:e3:e4:
36:4c:58:d7:bd:70:3e:d2:8b:4c:93:33:2f:6b:dc:
eb:5a:48:a6:83:57:71:2b:05:4f:7d:fb:90:b1:25:
e6:9a:3b:e9:1e:fb:e6:da:f7:4e:f0:51:fc:a2:f2:
a2:ec:c9:c5:98:36:2a:e1:c6:35:da:b0:f5:a3:70:
17:d2:4b:a7:c3:5c:fe:1a:e1:5e:80:aa:1e:2c:34:
fb:3c:d4:29:5f:53:4c:f7:a8:55:4b:f8:25:4a:e9:
31:5b:82:1d:a4:6e:32:e3:27:55:ca:04:b2:5e:12:
26:25:cd:31:b8:5c:75:c1:95:27:7e:85:65:67:e0:
2b:43:9f:bb:4c:93:03:dc:6b:bb:cf:3a:be:2e:a3:
e9:08:06:b5:4f:24:99:16:79:77:62:0b:b6:47:b8:
0d:e4:51:68:3f:cf:c9:db:15:37:d6:45:e3:48:4a:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:C9:87:82:F1:43:62:0A:79:7E:F0:6E:9D:32:3A:A6:D9:BA:E8
X509v3 Authority Key Identifier:
keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:88:04:d1:34:19:fc:e8:bd:66:5e:ff:01:34:44:e4:24:
bf:92:2e:5d:0d:80:68:a9:7d:08:2a:1b:78:b7:cf:94:74:79:
d5:5f:e7:07:62:69:e7:44:0c:f4:04:98:b1:0f:4b:47:cd:69:
35:a0:89:9e:36:a5:f8:9b:1c:35:14:f6:e0:4d:cc:7f:f6:f8:
e1:0d:82:06:45:e6:96:82:84:75:55:8e:11:b5:6b:c0:84:20:
fb:28:90:02:15:e5:e2:0d:39:cd:d1:20:fb:6d:8f:c9:49:d8:
21:2f:5e:43:37:bb:fe:16:b4:ea:d2:8e:7b:bc:01:91:58:8c:
9f:6e:08:1c:54:9f:ea:b6:7f:a0:7c:c7:39:a5:45:58:a6:1d:
88:4d:bc:0e:4d:c6:53:7c:4f:11:2f:8c:55:e0:1b:8d:27:a5:
b9:bc:96:2f:93:09:57:6a:1a:98:dc:e2:4a:e6:0e:c7:06:5f:
3b:79:c4:12:c1:cc:4a:09:ed:14:d8:86:f1:d6:e5:e0:e6:f6:
30:ac:24:f2:42:7e:ba:9e:6c:d7:9d:6c:9c:a9:26:9b:73:71:
dd:7b:38:59:e7:2d:3b:90:be:07:76:e1:e1:7c:13:74:90:92:
c1:3e:f6:7a:30:72:42:da:8e:e2:d4:d6:a6:26:ab:94:95:10:
1e:43:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:44 2025 by rpki-client