Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json)
Hash identifier: +KwNHBGTx9fLsrlAocXytIKF3RQ+2NNRpO2RzvHv3/U=
Subject key identifier: 02:BE:8F:51:5C:37:D4:58:C7:16:91:4C:B0:E4:7C:F2:02:AC:FC:58
Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Certificate serial: 09B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
Manifest number: 09A5
Signing time: Thu 30 Jan 2025 20:09:10 +0000
Manifest this update: Thu 30 Jan 2025 20:09:10 +0000
Manifest next update: Thu 06 Feb 2025 20:09:10 +0000
Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: Y1792PYYk/1FcMRKyeO2D8neUqRiIrkYyjwzvy+PfZc=)
2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: PN8KDNG+lfB8OMD8c5W9WAaHU3MIVkDLw5J7GhvF+L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Validity
Not Before: Jan 30 20:09:10 2025 GMT
Not After : Feb 6 20:09:10 2025 GMT
Subject: CN=679bdc66-fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:f5:05:f6:7a:30:5a:da:bd:78:47:7f:2f:
98:40:71:cd:14:f0:a8:14:7d:70:d0:00:96:b6:43:
f2:c0:21:18:d0:1b:9a:49:96:66:27:46:4a:52:c8:
39:9f:bd:1e:0a:b1:3f:c5:25:82:6b:f1:9a:40:ba:
4f:5d:39:ec:dd:36:c1:19:48:0d:26:81:11:fc:e0:
08:be:7b:ee:99:10:20:cd:ec:7a:1a:4e:76:e9:f6:
d9:02:09:3d:6a:23:a9:6c:c7:2b:ab:6f:33:43:ac:
10:01:37:73:2b:0e:bc:65:3d:4a:d1:3d:8e:52:0c:
b4:34:51:81:0c:2a:dd:49:7d:aa:72:92:c0:65:b6:
5c:05:79:c1:6a:4f:15:5b:b2:b4:cc:09:0f:9c:52:
7c:a9:f1:2b:cf:95:14:77:25:aa:56:27:e0:1c:4c:
e2:79:05:a2:2f:66:c5:d0:a6:58:83:24:04:07:a0:
5d:d6:de:76:c6:1c:ee:cd:86:a0:cc:46:3e:69:51:
f6:83:8c:d0:f7:6d:5f:ed:d4:e2:cf:67:93:bb:7e:
da:f7:6c:38:cb:42:68:18:df:40:93:8f:d8:c6:a8:
d4:45:c6:52:97:17:c8:b1:04:01:7c:24:d4:cc:6d:
88:d1:52:33:8f:de:b5:ee:ce:66:f8:e9:8c:dd:78:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BE:8F:51:5C:37:D4:58:C7:16:91:4C:B0:E4:7C:F2:02:AC:FC:58
X509v3 Authority Key Identifier:
keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:60:aa:f7:45:28:53:1a:e0:27:91:eb:c8:26:60:d8:cc:e8:
c5:43:75:f5:64:53:bc:98:99:2a:6d:60:7b:f1:55:b0:4b:ac:
75:f2:60:3b:de:64:6e:e1:0a:92:3e:08:7b:6e:70:42:4b:40:
3f:7e:46:aa:d9:87:38:5a:81:98:ca:6c:29:3f:08:10:b3:ed:
c0:ee:e2:89:5f:b6:08:99:61:e8:a9:95:3f:a9:4d:5a:08:a6:
e7:8d:ab:16:e5:b1:9d:c2:ab:f4:f0:c8:35:c4:43:37:7f:96:
d6:88:d7:45:52:84:56:e1:9f:1f:ad:f0:73:15:5f:76:61:1a:
3c:69:3d:0d:f9:9c:b9:22:ed:41:c6:9c:d3:9b:49:bf:06:b9:
7d:01:e0:48:82:3c:87:8d:f5:ba:b4:81:26:2c:f6:15:2a:03:
a0:f2:6e:11:8b:fe:75:62:2a:5b:64:27:86:67:02:fe:95:fd:
90:c2:8a:c2:89:12:69:7a:5d:6a:59:9b:65:60:56:50:21:c1:
36:ae:2e:02:01:48:ae:25:41:1c:6e:0c:45:d2:89:aa:bf:e5:
93:01:14:bc:4b:b9:59:d6:93:b9:53:a5:f0:1b:6d:52:97:14:
ff:fa:9b:93:64:db:fa:c6:2b:a4:e0:92:55:a1:7e:cd:4e:4c:
63:4b:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:30:47 2025 by rpki-client