Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json)
Hash identifier: +eOY40pkDxzxeBvLPkolmi0CXgs+6VgVvAEJJKGneaQ=
Subject key identifier: 09:04:F9:83:24:2F:9F:1A:5B:BE:F5:96:1B:C3:15:1D:BF:D0:E7:E9
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial: 134B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
Manifest number: 1343
Signing time: Fri 31 Jan 2025 16:59:28 +0000
Manifest this update: Fri 31 Jan 2025 16:59:27 +0000
Manifest next update: Fri 07 Feb 2025 16:59:27 +0000
Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: ekZ7Zn307v9gatSR1UbDZ9N0WNB2SyDveeRXErutsuA=)
2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: YR3r/r5s57l7vc1QAVpusxxc4M0J/72ZS6UJiTG3pTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4939 (0x134b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Validity
Not Before: Jan 31 16:59:27 2025 GMT
Not After : Feb 7 16:59:27 2025 GMT
Subject: CN=679d0170-a286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:26:2e:16:f8:ca:33:4c:d1:30:2f:0e:2f:
58:5e:9a:1f:29:e8:0c:4e:1b:66:80:d7:55:76:f3:
bd:8d:60:b1:fa:f6:11:a0:5c:d5:33:49:bb:a7:fe:
ea:b7:2e:7d:a9:3c:e5:9b:20:0e:54:54:e3:91:b4:
7b:0c:98:3f:a7:96:af:37:99:e8:d4:46:26:dc:8c:
15:95:69:e6:9e:f9:98:d0:ad:69:30:6d:35:79:2a:
9c:f8:2d:0c:5e:96:6f:27:3e:7e:39:a6:3d:d8:9f:
8e:d9:70:d9:6f:84:e6:48:25:1d:db:ca:54:d4:1e:
af:63:e7:ae:17:74:e6:a8:d6:21:6e:90:c0:18:aa:
35:75:1a:6c:27:cf:03:a2:21:f6:ae:c2:4e:c7:9d:
f7:75:8e:b9:f0:24:82:0e:cb:8f:b6:7b:53:80:8f:
7c:b3:df:55:65:5a:d7:09:ad:04:ae:07:1f:f9:75:
9f:33:c2:f3:ef:5d:af:4a:ff:c6:ac:28:a9:57:8a:
47:d5:a7:a2:11:11:55:10:6f:42:b7:60:7c:a0:bf:
c6:9c:82:d1:84:19:53:0c:7c:6e:0f:08:d6:5b:bd:
bf:21:ff:c7:04:52:72:94:62:7c:a5:55:f9:5f:c7:
17:06:61:b2:63:4e:05:ab:e5:fc:eb:c0:21:0f:61:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:F9:83:24:2F:9F:1A:5B:BE:F5:96:1B:C3:15:1D:BF:D0:E7:E9
X509v3 Authority Key Identifier:
keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:26:9b:14:bd:75:47:34:d6:5d:c4:76:b3:b8:8f:a8:b2:dc:
e8:f0:b3:3b:5f:42:41:2f:de:4a:33:17:1e:10:f6:4e:50:50:
25:65:0f:4d:d6:98:95:a8:5a:70:82:1d:0a:35:99:1b:18:14:
05:db:5f:64:c0:b6:33:ee:f8:76:23:5b:5c:a4:0a:fc:75:1e:
ec:6d:fd:31:10:a1:eb:2c:78:02:32:ae:f4:bc:a2:31:ce:ae:
33:ed:4e:f3:28:a9:e8:1c:8c:5b:f0:a2:3b:5f:e9:ab:85:af:
43:67:45:91:1d:cf:56:69:0d:11:19:d2:58:e1:f1:f6:fe:02:
4c:ff:8c:a5:01:70:07:64:ac:66:79:34:26:91:8c:d4:e6:1f:
3d:1c:bc:75:14:37:a1:57:f8:18:56:ba:e6:6e:ad:d0:7e:de:
5d:36:6d:54:53:44:33:46:28:e2:7e:02:4c:3d:57:c7:82:7a:
90:ea:29:3f:ef:83:94:ea:b3:91:75:d5:24:ea:7e:f4:40:44:
bf:08:74:d0:0d:44:b2:d3:7e:f7:a0:2c:7d:e7:88:2c:ab:24:
93:39:f8:0f:66:d9:90:14:4f:62:3b:fc:b6:e1:fa:28:ea:69:
0b:32:87:03:fd:6d:20:6f:e9:ed:24:ef:7f:34:82:e6:a8:e3:
d4:2f:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:30 2025 by rpki-client