Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier: +zYoW9TFN82/ZN4kc0vOiDEys48tDiX68cTKFl9LyA0=
Subject key identifier: EE:F7:51:EA:D6:67:14:0B:18:DC:36:E0:04:F1:CB:AB:54:EF:0C:76
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number: 0725
Signing time: Thu 30 Jan 2025 21:43:03 +0000
Manifest this update: Thu 30 Jan 2025 21:43:03 +0000
Manifest next update: Thu 06 Feb 2025 21:43:03 +0000
Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: AVa/ftECgM3rD3AwteNwAmp0NIRtB4w6qslysx83RsE=)
2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 54RasFpInkk46NqANXGRnQQRyrIL2lzCqTjJuJoAKLM=)
3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: eITJ7zYLAhKWDtK1wNVCYFqUDK3lmpweT8MrA45hMHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Validity
Not Before: Jan 30 21:43:03 2025 GMT
Not After : Feb 6 21:43:03 2025 GMT
Subject: CN=679bf267-7121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:17:8f:20:0d:99:dd:ac:f2:53:21:b8:84:
52:33:bf:88:86:20:4c:cb:1c:6c:94:ff:91:07:7f:
6d:97:de:c7:4c:a8:ea:6e:d3:a3:5b:fa:47:93:e6:
a7:97:49:49:a7:11:be:bb:2a:7e:d7:a8:ca:58:88:
cb:77:00:15:98:43:60:b7:e4:54:cf:37:c5:fa:22:
2a:58:23:85:88:b4:85:c6:e9:15:9a:69:23:39:50:
48:5c:ec:4f:f1:9d:3a:2f:72:1c:46:1a:1c:f8:5d:
09:90:50:77:52:14:bc:27:e4:a4:24:ce:8a:1b:da:
7b:64:99:5b:0c:de:ea:3b:0a:c4:7e:d4:31:54:02:
a3:0a:cb:c9:04:fc:27:82:7c:37:8a:96:12:91:4c:
df:db:33:4d:e0:f7:9f:2b:e4:37:9d:96:8a:a3:ea:
24:cb:1a:43:7c:57:f8:32:39:b2:27:6f:7f:70:b7:
4f:24:42:68:cc:f8:8b:9a:15:ed:9e:0b:78:c8:90:
7d:aa:83:54:e4:4f:bc:31:fd:31:e2:31:70:92:c8:
24:36:fd:93:84:07:4f:f9:25:f5:e2:8b:85:c7:5e:
eb:83:47:70:20:bf:f2:6b:2c:1c:56:69:54:02:7f:
af:01:14:fa:de:b3:c9:5e:90:16:69:92:c7:bc:b1:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:51:EA:D6:67:14:0B:18:DC:36:E0:04:F1:CB:AB:54:EF:0C:76
X509v3 Authority Key Identifier:
keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:52:2c:19:06:5c:2b:a3:c9:1d:3f:ab:01:f0:ba:68:9e:
64:fe:b7:ff:ba:72:e6:b5:96:57:c9:26:27:a1:b4:04:23:68:
59:2c:67:98:07:13:9f:cd:4d:06:88:db:22:24:b0:69:5a:15:
a3:80:ee:b8:15:6a:e4:54:e1:d6:50:b7:06:de:36:15:44:45:
4c:d0:22:4e:15:50:3b:47:e4:f4:3d:8f:b0:ca:62:be:a3:cd:
bf:be:d9:68:72:bc:b7:13:bb:11:d8:31:e2:f0:9d:ef:f5:36:
4e:b4:08:d6:d4:8b:ad:86:26:e4:fe:a6:06:bb:3e:35:77:87:
3b:70:02:b3:b4:f5:19:57:5f:92:5e:a3:fa:f7:b0:99:76:72:
04:dc:e9:1b:6a:ad:48:8d:4e:c7:84:b7:7d:66:2a:a3:ee:f1:
77:28:a3:cd:e7:07:75:34:2b:9b:3b:b1:cc:63:76:c1:5d:17:
e4:c1:fd:62:cf:63:bf:d7:a4:06:b6:7a:67:03:6e:4e:3c:fb:
84:d4:f4:96:71:bb:a6:79:d9:97:74:30:5b:b7:0f:34:e4:81:
fa:85:55:e1:f6:8a:88:56:88:f3:b1:46:fd:0c:1a:89:b6:41:
29:ea:ef:1e:70:0f:21:f9:15:e3:41:54:13:11:5b:ee:25:51:
79:d2:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:08 2025 by rpki-client