Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json)
Hash identifier: CD+zm63lMY6ZDwb+RloGlMcqEag4X/fu9FrFPLwOvv8=
Subject key identifier: 22:F9:B4:36:CF:7A:CB:7B:FA:AB:29:5B:BD:59:C0:5F:A1:1A:08:F5
Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
Manifest number: 9F
Signing time: Fri 31 Jan 2025 05:32:57 +0000
Manifest this update: Fri 31 Jan 2025 05:32:56 +0000
Manifest next update: Fri 07 Feb 2025 05:32:56 +0000
Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: LiERDakCtkg0JPXCnZF81O/216r+2xqxNNDfSGxzsKU=)
2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: 31H5Vhs+f/h3u06zcfDWH9AwqpcXpDRyJ5vXA17DcEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Validity
Not Before: Jan 31 05:32:56 2025 GMT
Not After : Feb 7 05:32:56 2025 GMT
Subject: CN=679c6089-8f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:98:08:1a:8a:e8:c2:77:c2:3b:38:4d:84:
84:76:ea:99:9f:a8:df:8f:4c:38:26:43:04:51:0a:
b0:1c:48:eb:42:9e:6f:eb:73:e4:28:ac:d6:59:3e:
c8:de:bc:95:cb:d9:7e:03:ad:8a:66:46:a2:b7:99:
82:5a:ee:06:4d:ee:9a:c1:a1:af:f0:ab:30:3d:b3:
48:7a:09:e8:8b:b0:f5:c0:a6:20:6e:54:0f:c9:b0:
79:bb:f6:9d:29:19:58:b1:6f:05:b2:90:ed:cc:b8:
af:a4:70:bb:81:b5:33:62:25:36:e0:58:66:96:aa:
81:3f:47:59:b7:b3:01:c4:f0:31:5d:92:fe:a0:aa:
38:02:56:63:35:f3:1a:e6:0b:9b:5b:80:73:4f:fa:
95:95:fd:0a:bb:14:96:d3:7e:b6:19:10:dc:c1:05:
b7:59:b3:06:90:e1:4f:6a:41:5b:64:b0:6f:88:9c:
2d:af:f4:e6:10:24:4a:d0:d6:09:19:5d:f2:69:ea:
91:73:26:ac:d0:3a:f3:3b:ff:07:8d:ea:a2:89:31:
08:7e:66:0f:54:00:a8:b4:cb:af:53:cc:8b:fa:68:
e3:c5:a0:57:79:4e:8c:65:8b:13:5e:85:76:6f:ec:
02:65:28:e8:fe:fb:d3:99:99:41:dd:99:38:0e:70:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:B4:36:CF:7A:CB:7B:FA:AB:29:5B:BD:59:C0:5F:A1:1A:08:F5
X509v3 Authority Key Identifier:
keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:80:c5:f7:be:27:25:28:ec:d1:71:0d:42:dd:4c:5f:bb:79:
0b:9e:8e:f6:6f:c4:12:07:76:8a:a8:4d:32:49:ed:41:62:d6:
55:f9:b5:e9:19:6b:a0:2b:1c:f9:36:43:17:71:40:71:45:57:
9b:7b:49:bc:68:0f:5c:ce:ec:67:27:48:4f:62:92:37:12:8e:
69:98:43:04:ec:36:ed:bd:28:c1:30:18:99:2d:d8:84:ed:d2:
fc:2f:f4:08:36:ca:3e:16:f0:d5:8d:28:f2:95:6b:83:e9:00:
f4:4b:4a:b4:b8:23:b8:c5:a4:7c:ca:d4:06:ab:f0:73:f6:bc:
47:bc:02:13:1a:f7:76:c8:92:86:4f:ba:c6:d7:8c:68:f4:b0:
6b:89:d8:39:88:a3:78:4b:c2:f4:b3:59:f2:c9:e2:17:ae:e9:
97:fd:1f:8b:31:89:82:99:f7:0c:f2:2d:02:aa:ba:4f:83:f2:
19:78:ed:43:01:9c:02:b6:63:73:e7:46:d5:0a:a8:15:b7:87:
c3:2f:40:b8:0a:a3:a2:83:85:b6:1b:8d:6e:73:f5:63:73:7b:
a2:cd:6e:93:45:ce:69:32:6a:20:23:5c:24:d5:7d:a7:70:66:
99:cb:8a:c1:33:d9:fd:e1:6b:35:77:69:f6:df:ba:29:f1:34:
4e:b7:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:16 2025 by rpki-client