Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json)
Hash identifier: aeH+nQNwHMtrTHWfHEkf3tEu1Jcui3QBQjUcVKJ2rJk=
Subject key identifier: 9B:D6:2F:69:36:19:23:92:F6:1F:51:B7:7A:86:ED:6E:79:2A:FB:5F
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
Manifest number: 9D
Signing time: Fri 31 Jan 2025 05:40:30 +0000
Manifest this update: Fri 31 Jan 2025 05:40:29 +0000
Manifest next update: Fri 07 Feb 2025 05:40:29 +0000
Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: WMXUeOYuuLsN26GX9muv/K5zrk7DyOD321C+XBy6jRM=)
2: 78841A1EC45111EF9D399128C4F9AE02.roa (hash: hmET98jSbY84HWw1Ff069kemOUaLOUc6xLuKVO1YIE4=)
3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: kZrd3mAtaTduvChHj54cupYMhDS7pTsrXNeCRQqiQrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Validity
Not Before: Jan 31 05:40:29 2025 GMT
Not After : Feb 7 05:40:29 2025 GMT
Subject: CN=679c624e-9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:29:91:34:90:ac:67:2a:e8:96:9c:74:4c:
c9:1c:40:58:c1:6f:bb:81:6d:87:2f:6a:36:2d:15:
67:97:e6:bb:23:9c:38:f8:6c:c9:5d:15:2e:81:35:
cb:b9:41:53:0b:31:51:fa:49:bc:70:14:f0:02:a2:
da:47:d7:44:67:4a:a3:eb:ac:b7:a4:54:d4:bb:a9:
84:99:e7:59:cd:2b:51:75:17:1f:ed:d4:51:e3:03:
8f:bb:81:a3:fa:50:9c:10:5d:df:8c:e6:a0:1f:b0:
73:18:c2:a3:c4:3f:3c:78:07:49:9e:17:df:5f:19:
3c:f5:95:1a:e3:ad:43:a3:bd:5a:9a:70:2d:0a:de:
61:a5:aa:c8:a1:ee:62:b5:f4:5a:3a:ed:88:ac:92:
30:fb:d7:f6:63:5b:fe:5d:d7:74:8c:a9:ef:75:9d:
60:f3:4e:95:a4:2d:de:19:82:ea:92:eb:55:71:84:
99:6e:1f:ed:0b:b2:5a:93:84:79:a5:5f:aa:e5:cb:
9b:75:2d:de:80:f6:2b:b7:80:aa:0b:1c:31:f6:6d:
25:f0:1e:ea:b3:fc:89:c6:bd:66:dd:9b:87:e6:0b:
74:36:d5:b6:63:fc:09:1f:a0:25:68:c1:86:35:43:
ff:4e:fa:27:f5:c2:83:81:74:8f:09:9c:df:42:22:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:2F:69:36:19:23:92:F6:1F:51:B7:7A:86:ED:6E:79:2A:FB:5F
X509v3 Authority Key Identifier:
keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:8d:de:08:d0:b5:47:66:d9:b2:c2:63:e0:b0:7f:d5:09:34:
73:6a:85:fa:3d:c8:40:8c:d9:50:e4:d6:ac:92:53:3d:3e:1f:
18:ea:07:6f:85:96:91:be:23:de:89:93:c0:5f:aa:c5:7f:92:
2f:04:61:76:ed:b7:84:41:b2:cf:46:74:05:60:63:0a:38:98:
6f:3c:86:a5:d0:11:af:95:f8:2b:8f:02:76:d6:57:0c:1e:20:
ee:c6:53:b2:e0:88:6b:d8:2e:55:89:53:aa:f0:46:1c:2f:01:
99:49:29:5a:d3:d9:5b:41:12:9f:2b:4e:66:59:85:bf:8b:58:
81:a2:ee:40:8c:de:af:99:4c:7b:a1:22:a0:92:37:16:7e:06:
a8:8c:82:86:e2:c9:38:eb:72:1d:17:06:14:b2:cf:de:a6:bd:
47:1a:1b:c0:78:ba:2e:98:f4:5e:19:06:f3:5c:86:80:2d:1c:
55:3e:46:22:c5:94:0d:e9:c0:0c:39:3c:81:2e:c3:97:88:8e:
a2:de:eb:01:d2:ca:c1:18:3d:19:e9:c2:bc:c5:20:71:dc:c2:
fb:ae:89:62:b7:7b:9c:1b:d9:70:d2:17:a7:9e:5f:74:22:37:
17:5b:9f:a8:e6:a2:61:83:69:ce:93:67:ec:71:80:05:04:aa:
7c:e9:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:04 2025 by rpki-client