Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
File: nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json)
Hash identifier: W/aPFkOZ7zwlIyVX1QPaq8/mmaMoK3IiIZe3GCSk9+k=
Subject key identifier: 8D:88:7B:FF:6E:24:9A:E9:BA:60:8E:86:82:A8:49:70:FC:D7:14:BD
Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA
Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
Certificate serial: 0830
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
Manifest number: 082B
Signing time: Thu 30 Jan 2025 20:49:48 +0000
Manifest this update: Thu 30 Jan 2025 20:49:48 +0000
Manifest next update: Thu 06 Feb 2025 20:49:48 +0000
Files and hashes: 1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: vmO/fU5i5IpDTL/Qj7hl9azcYqugvvlbwpTDOlWcWec=)
2: FE60ECB0879311EB84047577C4F9AE02.roa (hash: 7JqfyMrbJ4CL7Io5TdtHAHWsu8lXWZvGXH4eXClkDWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
Validity
Not Before: Jan 30 20:49:48 2025 GMT
Not After : Feb 6 20:49:48 2025 GMT
Subject: CN=679be5ec-f16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:40:db:90:4e:b8:2b:9c:fd:94:95:72:a1:
71:fd:d4:62:09:11:d4:4c:40:3d:fe:e3:93:01:87:
51:89:fe:a4:65:cf:c3:3d:f6:84:9b:9c:8a:26:26:
f0:1e:04:ac:0a:3a:45:85:ef:dc:e2:96:16:d8:9c:
c0:ae:b0:94:9e:54:c2:54:e2:2c:f6:59:e4:72:76:
e2:78:65:2e:e7:85:1d:c8:17:58:0b:d2:c5:67:2a:
e3:0a:5e:9e:37:4e:a6:3d:19:79:3e:3c:de:fe:2e:
21:e1:91:45:60:63:39:1f:be:90:a3:c2:50:1f:4e:
21:89:ce:65:ee:d1:2f:de:20:3a:78:f4:09:18:f4:
47:03:b4:29:a0:8f:f7:aa:6e:4f:8c:c2:26:1f:a7:
9a:46:fa:75:fd:cf:23:16:7a:bf:65:48:8f:8a:28:
69:3c:f7:e6:d5:47:0e:f7:66:28:dc:b9:2a:37:7b:
37:24:5c:d3:13:28:5f:f4:78:26:98:c3:49:12:7b:
5f:2f:b4:fa:29:e2:d1:15:56:e8:86:2e:92:f5:27:
63:e7:6e:c7:1e:28:15:ff:4c:e5:82:63:80:cf:aa:
9a:48:77:63:db:b5:92:1f:11:fb:08:97:6a:1d:f1:
be:71:83:89:bf:8a:bc:e7:e5:df:53:c6:2c:07:66:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:7B:FF:6E:24:9A:E9:BA:60:8E:86:82:A8:49:70:FC:D7:14:BD
X509v3 Authority Key Identifier:
keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:92:ef:ec:12:5f:e4:7c:f2:07:fe:1a:14:7a:e5:18:74:48:
3d:8a:c0:ce:d6:52:9b:b7:2a:7a:f7:a1:98:18:50:ed:eb:ea:
dd:93:0b:49:79:86:de:bc:1f:49:96:ec:79:70:a8:5c:dd:ca:
63:9c:b9:c9:88:3f:f5:da:22:a3:d3:aa:b3:0e:78:e1:8d:41:
9d:f1:41:96:ed:7b:4d:48:6b:3a:af:6d:a3:48:44:8f:c9:07:
4a:16:3c:ce:6b:4b:b5:5f:27:17:19:54:8c:5c:92:d8:eb:c3:
96:b2:1d:31:8a:a1:63:d3:6d:fd:16:8f:ae:d4:db:04:e5:f7:
46:f9:b2:7a:1a:8e:41:e8:d4:11:a8:75:5a:0a:55:d4:83:d4:
ee:5e:0a:2d:95:0a:f2:ed:e5:44:89:6d:26:9a:9f:6c:13:56:
b8:44:40:f3:fd:73:3b:4c:af:ea:d7:62:47:4e:a6:c1:81:57:
53:50:08:11:a0:1b:69:cd:63:31:a8:c3:65:0b:04:04:5f:c4:
3e:5b:5e:c1:cf:93:ce:8c:3a:97:08:f6:36:f9:4f:3f:12:2d:
ea:84:a0:c7:5b:7c:ec:c4:8b:27:a8:26:92:62:18:71:ed:19:
b1:71:38:f0:2c:20:d3:fa:fa:28:1e:03:6b:02:a3:80:c1:3c:
d2:a9:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:04:02 2025 by rpki-client