Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json)
Hash identifier: oJKWEHNBtSxOsur6KpyKrA9NfWehEihndBiqH9BaJPI=
Subject key identifier: 8A:92:23:F2:D9:D1:68:0F:C8:27:CA:23:9C:11:02:58:1C:45:52:B0
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial: 0CF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
Manifest number: 0CE3
Signing time: Fri 31 Jan 2025 18:03:25 +0000
Manifest this update: Fri 31 Jan 2025 18:03:25 +0000
Manifest next update: Fri 07 Feb 2025 18:03:25 +0000
Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: EZ+nyhnYl6jG0XpL6cMDMsBlWS8wf9uIj43Waex2LuE=)
2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: 6Rm16lqV7D8ogEdcWjZlICaxyf3FBMg+FZuEOmrvZ+E=)
3: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: Kvq9xzCrVcc/vYKOgXHbGDUWHenbRQHuJZ7CogmXIPc=)
4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: 7Q5TQ0GutKyzM0PazgyPbgCiIYVuSp/HifdYRSL6/UE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Validity
Not Before: Jan 31 18:03:25 2025 GMT
Not After : Feb 7 18:03:25 2025 GMT
Subject: CN=679d106d-5978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:ec:12:b9:50:fa:fa:5f:c3:81:d3:6d:b3:
c7:5c:92:e2:5e:f8:f6:59:03:f5:96:d6:e3:e0:dc:
62:84:1b:34:51:0a:62:f1:34:f4:40:fd:c1:46:e1:
87:a0:89:83:87:51:17:77:08:09:9e:3b:2b:09:a6:
7a:38:51:21:7b:24:e3:dc:9e:e9:96:41:2b:59:10:
bb:d5:e6:e1:e5:c4:2b:5f:4e:d7:60:fe:95:1c:27:
5e:c4:50:c9:87:86:98:d7:4f:b3:70:9e:42:91:6f:
bd:96:c6:24:ae:89:1c:b6:09:1b:9c:a1:c6:85:6d:
1a:97:17:7c:23:4b:b8:0d:60:45:80:3d:5c:54:a6:
9f:ed:d0:e1:53:cf:21:a1:b4:b2:f6:40:0e:85:89:
db:49:9b:78:97:f6:ee:ad:0a:5a:81:ce:b4:81:bf:
9b:70:41:37:ae:60:e5:8c:29:4c:28:29:17:fc:b1:
6b:55:f8:bf:81:cd:28:80:1a:b7:77:87:93:0b:60:
df:0c:e8:a6:ef:c3:bc:29:cd:76:3b:ea:5c:c7:d3:
f3:ed:e2:84:d8:14:8f:d1:9f:d1:65:e9:ca:b8:95:
b7:a3:26:d2:78:80:b0:2c:d7:a5:5e:35:10:d4:70:
17:d2:28:42:73:79:db:e4:f3:6a:c1:ea:6d:44:85:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:23:F2:D9:D1:68:0F:C8:27:CA:23:9C:11:02:58:1C:45:52:B0
X509v3 Authority Key Identifier:
keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4f:9d:a9:24:c7:2a:cd:a9:a7:96:f0:09:f7:bd:62:fa:59:
4f:85:af:16:d7:f9:53:63:19:70:e4:db:7d:7d:5e:ed:a7:3e:
60:5a:26:91:27:dc:15:41:15:98:85:f4:8a:12:26:9d:32:a3:
68:43:3f:a5:5c:a5:8f:2e:d4:cf:51:7c:27:c5:5f:cd:7d:19:
c6:c9:e3:ac:bd:9c:2a:7d:a1:10:4c:c6:e4:e0:d1:f2:d6:fe:
c5:b5:fc:db:e8:40:a8:9b:3e:9d:16:e4:f7:d3:e0:fa:e0:cc:
f2:5e:02:bb:cd:1b:67:95:a0:c1:e6:3d:59:33:98:24:86:0d:
8d:72:96:24:c5:f7:6a:cd:a4:ae:f1:6e:09:50:45:fa:7b:d1:
cd:d5:5e:82:50:d8:3b:2e:d3:41:3f:f4:b9:54:0e:be:86:1c:
2c:4a:75:49:f6:97:b0:ab:c5:7c:d1:b5:6d:b4:e2:71:86:99:
c4:9f:aa:63:71:ef:cb:90:29:3d:ae:31:89:92:a8:da:43:0a:
ab:9b:fc:78:76:87:94:9b:5f:95:0c:48:2b:b5:55:cd:33:90:
09:c0:d6:da:e5:79:29:fa:d0:7a:5c:5c:48:a4:cb:ea:d5:cf:
bd:e2:c3:9e:64:94:00:bd:e9:45:01:c6:4f:55:6d:7b:12:2a:
b8:09:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:50:08 2025 by rpki-client