Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier: Hki63woU3p/2iG6f8dAJ02R9Tr0kwIFyxfpZtCs1YtA=
Subject key identifier: E4:54:43:F8:26:56:C6:52:2E:A8:21:A1:2A:FC:D3:80:AF:A9:59:3B
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number: 02FE
Signing time: Fri 31 Jan 2025 01:20:19 +0000
Manifest this update: Fri 31 Jan 2025 01:20:19 +0000
Manifest next update: Fri 07 Feb 2025 01:20:19 +0000
Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: /hDetoOWmHKdmbqR4m64LYBt/ROO6O1lQUsmFyM39rY=)
2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: 3J77t/X4d8FbFqMziCtfhDxfCbOMGAItxZzB2H4f4P0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Validity
Not Before: Jan 31 01:20:19 2025 GMT
Not After : Feb 7 01:20:19 2025 GMT
Subject: CN=679c2553-4ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:2c:15:74:e9:2a:04:25:9f:c7:f1:ff:ac:
f2:28:09:6e:3e:4c:b5:c8:1f:2b:b1:e8:b6:4c:6c:
92:ff:d2:d8:75:aa:cd:32:6a:98:fe:4a:0b:34:c6:
c7:d1:28:c7:02:0b:71:26:ba:5e:a7:74:6e:79:d2:
60:d4:a3:99:82:89:e8:25:30:5a:5d:f3:a7:33:b6:
f5:eb:dd:fa:16:ca:e5:48:3f:5a:33:e5:55:bb:8e:
68:97:a7:de:17:a4:3c:7a:fb:cb:3e:05:b7:15:20:
ae:f9:c7:90:3f:05:f4:5c:08:39:fa:bb:b9:88:2d:
5c:07:bc:27:1f:14:56:c4:0a:a1:35:12:c3:87:b6:
7a:fd:88:27:90:6a:2d:40:c4:2e:35:f9:49:24:63:
ed:49:ae:be:c0:72:cc:1a:27:ca:68:4d:ef:7c:93:
11:ea:fd:01:e7:6e:72:92:1c:26:5d:8c:98:6f:1d:
d8:34:e1:93:f6:b3:2d:cb:c2:e1:d6:e9:3f:4a:c8:
1c:81:25:00:bb:a9:44:c6:45:87:5e:df:3b:53:c4:
47:52:68:0d:b8:c3:f9:7f:7a:ac:c8:da:34:91:54:
55:a1:a7:e9:81:4a:a9:06:2e:d4:a9:85:f0:08:84:
b8:a9:34:55:2e:d9:8b:9a:03:83:08:93:ac:c4:9b:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:43:F8:26:56:C6:52:2E:A8:21:A1:2A:FC:D3:80:AF:A9:59:3B
X509v3 Authority Key Identifier:
keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9e:a5:3d:fd:90:9f:a0:6e:28:e7:8f:04:3a:76:5f:4b:be:
f6:cf:88:ef:cf:a0:be:c5:ca:fd:28:ad:10:d3:41:e9:c7:49:
81:69:1f:c8:b9:11:3c:37:8d:51:94:c5:01:1d:e6:09:b5:cd:
a2:aa:ee:bf:53:2e:ce:2b:ba:67:b7:36:89:01:08:40:7c:aa:
3e:75:ad:ec:2f:54:5b:af:a3:62:19:f2:36:20:95:51:5a:20:
cb:1e:ef:67:aa:ba:2b:0b:d3:3c:5a:d9:1a:a7:b2:fb:18:a8:
56:6f:3e:58:04:21:69:f3:cc:17:cb:e7:70:eb:20:eb:b1:7d:
dd:df:98:ef:3e:52:d6:ad:37:ae:f0:b4:f5:8f:8a:0a:97:ab:
ce:77:a5:87:73:1d:3e:3d:55:53:79:cf:a4:11:78:7f:8d:dc:
e1:fd:95:e9:96:72:7b:bd:2e:4e:b6:d2:d3:f6:47:f7:8a:fd:
20:16:84:97:89:51:92:58:91:9a:3c:da:16:61:80:ce:d4:26:
39:8c:a7:bb:8d:e1:33:be:06:2d:53:80:ea:7b:a9:20:94:4b:
78:3d:f5:44:f7:57:55:b0:b5:b2:9f:c0:70:c6:67:82:13:96:
3b:32:a7:f6:57:29:84:37:77:d8:49:61:80:8c:40:9e:45:bf:
02:b4:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:36 2025 by rpki-client