
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json)
Hash identifier: SAAyTGhjUSQBOlNa6b1kEXf7IOYdBpUL7Z6+ipQSvvo=
Subject key identifier: 93:4A:4C:DA:4B:58:54:C7:D3:66:96:EE:7F:78:C1:74:23:54:7C:7B
Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 03:07:22 +0000
Manifest this update: Fri 31 Jan 2025 03:07:22 +0000
Manifest next update: Fri 07 Feb 2025 03:07:22 +0000
Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: Pmrj7URsf0hsuHnYaJ00aVjGRcTYakT8xzKk+nn/bO0=)
2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 0N+/z4kTKX8NyMAex9FH+ekMrAx1yYCVrWXAZK9y2fI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Validity
Not Before: Jan 31 03:07:22 2025 GMT
Not After : Feb 7 03:07:22 2025 GMT
Subject: CN=679c3e6a-5e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:a0:a9:c4:63:b6:97:77:33:fe:88:60:40:
af:c9:91:81:49:50:6b:2f:1f:8f:c3:2f:76:bd:aa:
12:c2:95:07:7e:aa:52:ac:4d:0a:28:1f:db:14:cb:
f0:e0:ae:d7:07:6b:81:f7:cb:d1:21:5e:69:cd:e6:
0c:e3:45:dc:4e:48:f2:2e:97:43:46:71:2d:68:66:
89:86:da:1c:e3:89:07:03:ec:07:2d:ec:b5:ac:c8:
23:29:b0:9e:99:6c:01:52:25:0e:e9:79:4d:b5:d2:
c9:4c:ec:61:53:c4:65:2f:ae:22:52:03:03:cc:52:
a0:98:c0:33:0d:0f:81:4f:b7:40:3e:10:7f:83:d0:
a1:03:37:50:97:41:7c:e3:3d:1b:a4:f3:18:fe:3e:
57:f1:91:ae:3e:5d:1d:d5:fe:d3:bd:0c:61:99:fe:
33:d1:67:39:87:7b:64:6b:26:fc:e8:f9:2f:6c:ad:
97:ba:02:77:11:7e:58:a4:1a:c5:70:cb:89:ff:13:
b9:ee:3b:7a:88:5e:65:03:13:ff:98:48:ce:0c:2a:
69:c3:45:1b:6e:ed:8b:57:3b:00:f6:24:61:55:aa:
82:ae:43:fe:02:99:4e:2a:69:e8:6c:d8:df:17:74:
bf:70:6b:42:88:77:0e:0f:83:ff:42:5b:44:ff:46:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:4C:DA:4B:58:54:C7:D3:66:96:EE:7F:78:C1:74:23:54:7C:7B
X509v3 Authority Key Identifier:
keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:58:3f:12:c1:e9:d1:55:6a:a9:55:9d:99:6b:90:42:e4:
2e:da:43:92:d6:9c:20:af:7d:72:ad:88:f1:ba:7b:b1:93:9d:
52:05:9e:e6:0f:98:b9:34:4b:0a:77:b5:00:00:77:46:2d:f1:
c8:8a:26:e9:69:a1:5b:22:f4:f4:40:b8:37:4a:dc:26:3b:42:
45:d5:5d:73:b0:b6:25:ff:7c:67:70:6c:8a:c4:a6:ea:82:5e:
10:7b:d0:36:7c:56:fe:1c:82:fa:8d:92:78:ca:71:19:da:b3:
8f:46:23:b0:ad:34:bb:22:95:74:e1:5e:4d:85:0a:dd:78:46:
0e:e7:77:92:dd:58:dd:0f:ee:9c:8a:fe:1f:ef:34:27:25:16:
70:5d:b0:d5:5d:5f:bb:2b:b7:39:35:a2:08:ea:96:60:bc:24:
91:bb:de:47:61:2b:4e:6d:b5:ce:06:c3:00:03:ea:16:00:39:
52:43:bb:55:a6:73:4a:66:07:5d:de:ef:06:5d:53:1c:a5:c0:
ab:6d:d2:dd:f9:e2:d6:4a:dc:23:af:a2:89:b4:eb:22:c9:57:
a5:86:0a:a1:c3:3f:34:9f:84:a7:75:c3:95:20:d1:e8:0e:8b:
53:87:17:82:59:00:ee:07:81:97:33:61:ea:3a:24:d7:39:ff:
83:68:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:10:58 2025 by rpki-client