Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json)
Hash identifier: G8D2iijWsTEfPP5eTgCdFFv5Wo1/of3Fx3f2fxMiZ/4=
Subject key identifier: 2C:7B:BD:FE:0E:25:15:19:EB:AD:23:F8:72:1E:DF:76:BF:AB:83:4C
Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Certificate serial: 0D20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
Manifest number: 0D1A
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Fri 07 Feb 2025 18:00:23 +0000
Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: t5tcvZGvkjhi2a89sFzUn2JjoFOsQIhs4Poyg1icHHs=)
2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: kI5JnSJu06qgqTZp/9lZiT474okX7X5b01wQ0iP2l+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 7 18:00:23 2025 GMT
Subject: CN=679d0fb7-c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:d2:f7:c6:0f:4f:ee:bd:27:78:11:24:38:
54:1c:db:99:15:cd:35:9d:f0:b0:d5:56:ef:86:2a:
c3:c8:7a:5b:42:89:e1:19:63:ff:b7:c3:55:e9:bb:
c2:be:8a:ac:83:da:8a:dd:20:2f:91:8f:2a:e6:4c:
9f:1c:01:89:c4:09:23:07:87:a9:5b:5f:03:c5:77:
3b:56:62:92:e6:5f:4b:f5:8c:d6:af:ad:ae:31:12:
24:cc:6a:82:a6:38:dc:6f:27:b5:fe:82:2c:3e:f2:
1b:5e:dc:17:49:cc:bf:55:e8:27:49:a7:19:90:d7:
d6:05:11:29:e4:25:4b:94:00:94:53:24:10:8e:c3:
fc:75:83:a8:ef:d0:c6:e0:1e:52:91:19:b5:3c:79:
aa:ce:96:9a:c7:96:b0:99:15:4b:09:7b:ec:68:3a:
1c:0b:1e:88:13:f6:f1:de:f5:fb:fb:77:c1:78:6b:
66:c7:be:72:46:99:92:42:a2:cd:fc:60:ba:0d:0c:
25:7b:62:d3:cf:3c:5d:c9:19:b8:54:7b:b5:be:c7:
ce:5e:87:2b:50:a8:37:18:64:9f:89:95:2f:4d:02:
1a:7f:ff:62:4b:04:e1:78:90:9d:99:2a:2d:df:ec:
ab:6c:73:e8:cd:14:b9:91:a2:06:b2:ff:88:4c:8f:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:BD:FE:0E:25:15:19:EB:AD:23:F8:72:1E:DF:76:BF:AB:83:4C
X509v3 Authority Key Identifier:
keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:91:47:f7:16:54:4e:3a:04:a2:b3:30:35:8e:9a:93:6e:c8:
7e:7e:e1:ec:95:4c:70:26:19:af:b0:86:ba:d2:53:ca:ce:e3:
52:d7:71:08:f3:58:8c:01:40:97:b8:6c:30:92:d3:95:40:28:
c2:83:81:40:ff:b8:72:cf:b2:39:26:46:fb:41:af:e6:72:ae:
58:d2:14:e7:c7:ff:fc:66:66:31:95:07:05:10:1a:74:d8:9f:
d3:73:1d:8c:10:08:95:a4:85:91:4c:c3:3f:43:eb:d5:f6:69:
e9:72:01:24:9d:59:fe:50:13:4a:e6:fd:87:dd:08:02:4e:9c:
cf:11:1c:18:08:a3:ec:8b:77:54:e6:bf:07:55:e6:cc:6e:3d:
4e:e6:4c:c5:a4:1e:c3:33:df:1e:6d:50:69:7a:0e:6d:5d:cf:
0c:4d:35:b6:bf:b9:1f:94:c9:ae:b3:8f:6e:59:08:d7:c7:02:
14:26:ed:db:4d:30:41:4f:20:c9:26:7d:99:5a:15:0b:8e:9c:
0e:52:b8:c3:7c:9b:0b:52:4e:fd:76:ae:fd:30:59:66:dd:c1:
84:2d:a8:c2:d9:07:25:0a:1f:3b:85:e0:4b:3f:fa:e7:d9:b5:
d9:1f:df:df:94:91:71:a5:d4:09:36:94:94:d3:63:13:de:85:
9b:f9:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:00 2025 by rpki-client