Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json)
Hash identifier: d+ejQSjF+8M/HuiCoBA2eZw6Me+2wExHFhOrP0flpn0=
Subject key identifier: 57:2A:66:2B:4D:34:95:26:7E:0E:03:50:ED:12:FE:28:BD:4E:3C:E6
Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
Manifest number: 0743
Signing time: Thu 30 Jan 2025 21:35:02 +0000
Manifest this update: Thu 30 Jan 2025 21:35:01 +0000
Manifest next update: Thu 06 Feb 2025 21:35:01 +0000
Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: SJIgPdTPF1xNKYNj42qvXaGbVycZpTcwYWVFjupkxEM=)
2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: UHLbtcY+MssUReji2ZDnPxouuMqAchFNbY9lf4jGoV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Validity
Not Before: Jan 30 21:35:01 2025 GMT
Not After : Feb 6 21:35:01 2025 GMT
Subject: CN=679bf086-40fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:1f:28:70:18:2f:68:e9:57:3c:c0:15:b0:
dd:84:f3:91:0e:22:8e:23:cb:7c:38:32:03:1a:5a:
7a:ea:a4:44:b8:8a:bb:ec:96:aa:84:49:62:c2:8a:
c5:a1:d3:ff:d7:c7:cf:39:ed:4a:3e:d6:83:cf:eb:
1e:04:d8:ca:f2:90:80:10:66:98:50:a2:ca:fe:c7:
06:a4:d2:48:e1:d4:01:80:c3:c8:34:b6:9e:e2:41:
69:8c:d7:e4:9e:b5:17:a1:ae:7f:1f:7f:62:ab:d8:
c1:ea:c9:95:9c:33:23:40:af:63:d1:de:ac:94:82:
ba:2f:d5:01:77:0c:3f:02:da:e1:cf:fa:0e:7c:06:
70:97:22:0e:0a:92:17:eb:be:aa:82:5d:52:6b:ee:
7f:82:00:a2:2c:38:8e:45:d1:67:de:2d:90:46:5b:
ec:a3:14:9f:0d:df:83:33:41:c6:65:98:30:9b:f8:
61:31:c1:8c:66:8c:3f:59:c7:b9:0c:6f:95:33:18:
bc:e2:eb:bf:95:5a:12:23:e5:28:68:b6:0e:74:10:
2c:db:4f:09:60:b3:a9:e7:3f:6c:a4:1e:63:ab:a5:
c4:dd:96:d2:66:c8:9b:98:a7:5e:22:10:f6:52:d4:
61:b8:66:86:54:78:2e:cd:86:4b:0d:f4:e6:2b:66:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:66:2B:4D:34:95:26:7E:0E:03:50:ED:12:FE:28:BD:4E:3C:E6
X509v3 Authority Key Identifier:
keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:91:1d:6e:00:95:b1:c0:91:7d:44:a7:37:da:f0:9b:b2:
24:3d:c5:d2:cd:51:47:f0:a1:b0:5b:82:96:41:f3:78:56:58:
53:9f:2b:5e:ae:49:b3:51:f3:99:33:3f:0d:a8:d6:7f:44:41:
0d:a5:3f:c1:82:10:28:da:50:19:c4:b9:0d:82:55:7a:84:74:
57:55:ca:b1:59:74:cb:ff:04:c6:56:78:3b:ff:1c:a9:9f:60:
c7:b8:cf:bb:40:35:1c:d0:03:65:9c:c8:df:7d:1f:51:30:71:
8d:36:32:e2:7d:09:17:90:b4:15:f7:1d:3d:2e:92:45:dc:22:
5b:6b:44:fd:cd:76:56:50:26:67:58:20:69:0b:6f:5e:b1:0c:
73:90:18:69:6d:41:43:15:ba:9c:b4:84:74:89:ad:f2:56:c8:
f1:ab:70:68:e4:16:c8:87:71:0b:ae:5e:ec:2d:1a:f9:8d:5c:
1f:b1:4a:0a:07:64:d2:6b:02:db:9e:ae:04:02:e0:64:22:d4:
8e:a7:7a:23:51:68:48:83:3a:7e:87:e6:ae:e3:f8:7e:07:43:
16:5b:71:58:08:47:37:8c:5f:cf:a8:8d:52:f6:53:de:98:94:
81:8e:74:6f:1d:fe:37:f2:af:fd:3e:bf:73:77:0d:ae:06:b0:
cf:5e:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:01 2025 by rpki-client