Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: 1AVEV8Gs/XQZvCOOyK9D/rin9ccPBydBVyuXi7x/twk=
Subject key identifier: 57:BA:35:B1:3F:0F:17:D4:CF:3E:14:32:B5:CC:8A:0A:C5:46:4B:90
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0C0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0C01
Signing time: Fri 31 Jan 2025 18:31:32 +0000
Manifest this update: Fri 31 Jan 2025 18:31:32 +0000
Manifest next update: Fri 07 Feb 2025 18:31:32 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: 8JyhJZut1ol0xOTMnTJ4F93XMfxbL6PRR2kkuTyPB+o=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Validity
Not Before: Jan 31 18:31:32 2025 GMT
Not After : Feb 7 18:31:32 2025 GMT
Subject: CN=679d1704-cfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:24:d2:c8:37:ad:a9:fd:3d:28:bd:0b:fa:
cd:ec:14:8b:5d:54:64:a2:cd:3c:bf:13:c8:1e:66:
4a:7a:93:08:5c:f2:d6:e5:af:bd:55:4a:8d:6b:2c:
37:40:0a:c6:d8:70:e8:78:2d:d4:36:88:40:8a:91:
34:24:d2:5e:e5:ef:7d:a0:3f:21:c1:50:1a:a8:db:
ae:e5:fe:a7:ef:e4:04:f9:df:b9:7d:02:d5:52:d8:
aa:ee:88:6d:6f:f4:e3:a4:57:73:c9:5a:9a:8f:e8:
5d:0a:88:b7:d1:f6:ec:9d:c5:b0:e0:f3:98:65:fe:
e9:14:84:a3:05:f9:2f:13:d0:b9:e9:84:3d:d7:be:
44:6b:52:92:4b:1f:53:4c:dc:af:bb:fb:84:d7:e9:
d7:7c:12:4c:16:e1:69:bf:bc:8a:7d:6c:f4:06:5d:
bd:4e:c3:63:6b:8d:62:5f:88:eb:ef:b4:bd:36:a9:
60:e2:e9:fb:0f:b3:2d:92:d8:bf:5f:3e:9b:79:86:
fc:c8:a2:5c:b8:48:e9:8d:36:61:87:a4:01:f0:90:
98:f7:e2:e9:aa:7f:a5:20:46:9d:19:ba:7f:35:b5:
6e:b7:31:e3:20:f9:4f:95:19:a3:fa:59:ff:00:a7:
a6:f1:17:86:9d:2c:e7:21:7b:27:ca:3c:6a:99:b1:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:35:B1:3F:0F:17:D4:CF:3E:14:32:B5:CC:8A:0A:C5:46:4B:90
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d1:49:a8:ac:33:49:00:6f:9f:af:37:b4:2d:ac:9c:58:bf:
6f:6a:1f:d0:97:4b:4a:86:8d:00:29:bb:fd:53:57:20:71:4d:
91:f1:f6:46:3d:76:6a:8f:b8:52:30:83:65:46:46:7d:4a:b8:
dc:ec:03:5c:d4:74:c0:ec:6c:3d:f3:f9:28:39:9e:ad:cb:7f:
aa:0c:a5:5a:87:b8:6d:82:c1:dd:9f:c4:2b:7d:04:2b:3f:62:
28:b2:4a:24:ea:f5:e4:cc:cd:e9:a1:6c:88:11:51:99:87:12:
ce:0a:4b:29:f0:7c:c9:3a:35:25:bd:7d:a5:09:56:e2:57:1a:
4c:9c:44:5b:50:e0:f0:1c:f1:67:ca:cc:e0:a3:79:3d:11:44:
17:91:97:1b:2c:5a:f9:a1:a4:df:7b:a8:07:e2:db:30:12:7d:
5f:f0:58:53:a8:63:b1:e9:9b:16:2d:6c:d8:3e:3c:f4:a0:8f:
75:f1:16:f6:f1:d8:6f:bf:ad:f8:f9:68:62:71:60:99:23:3d:
bc:53:bd:6d:6a:43:f4:b7:7c:29:94:ad:11:a1:99:26:02:3b:
b7:79:24:34:52:63:ab:cb:bf:da:80:88:0a:9f:6b:6c:af:d0:
0e:31:99:bc:c9:a0:30:4f:fd:fc:da:d3:32:c5:ea:de:00:fe:
e0:90:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:40 2025 by rpki-client