Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json)
Hash identifier: i1RA226eSTfGbF8Y2gmdO2s2+tZ4wFQYMTljjgrHFJg=
Subject key identifier: 7A:EC:6E:B5:23:61:0D:A5:EB:DC:41:6F:A2:A5:0D:4C:E2:3C:12:89
Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 03:50:13 +0000
Manifest this update: Fri 31 Jan 2025 03:50:13 +0000
Manifest next update: Fri 07 Feb 2025 03:50:13 +0000
Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: a+lQFm4MEDjaVAF9RzePFHrAyf2z9EkBJwTqyD1p+7I=)
2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Validity
Not Before: Jan 31 03:50:13 2025 GMT
Not After : Feb 7 03:50:13 2025 GMT
Subject: CN=679c4875-4fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:3f:42:83:0b:dd:62:00:5d:00:32:24:5a:
47:3f:6f:ff:e6:5a:05:e6:d7:62:37:de:93:54:da:
c1:f2:e0:02:c6:34:49:ff:77:cf:21:28:92:6a:84:
6d:94:c5:f3:5b:2f:a4:30:7f:2c:12:84:fe:53:85:
ec:35:76:bf:90:e0:bc:2d:8e:ea:76:95:f8:c7:5d:
5e:80:dc:a4:12:ab:a2:a4:66:5e:80:85:2e:0d:35:
52:e8:97:42:23:16:6c:38:34:4a:16:1f:80:9b:41:
bf:ff:6c:cd:9d:9a:b1:b2:76:32:a2:9c:59:d2:f7:
48:ca:79:53:68:b4:a0:9f:63:7a:e4:cf:19:20:a2:
a6:1b:e7:e2:c4:2a:3d:19:78:3a:8c:87:63:82:b6:
05:63:47:01:cc:d7:d9:c2:2c:28:17:c3:88:a6:95:
f0:65:e7:84:ab:2c:d7:da:f8:a3:e7:22:f5:d8:3f:
b7:55:99:d3:3b:19:1a:29:54:dd:68:fb:02:5d:dd:
76:5b:d6:32:bd:25:43:af:a9:19:c6:ee:dc:af:72:
ac:32:84:a2:38:c2:31:64:4f:bb:f0:5a:fd:eb:dc:
7f:7b:15:0e:68:1d:7e:c6:a3:e5:cc:34:07:30:89:
5c:f9:bd:73:d6:75:05:6d:14:df:12:30:a2:23:68:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:6E:B5:23:61:0D:A5:EB:DC:41:6F:A2:A5:0D:4C:E2:3C:12:89
X509v3 Authority Key Identifier:
keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:6f:ab:99:d5:50:68:f1:58:43:04:4a:55:c2:b3:15:b3:
30:43:ee:3b:1b:e0:6d:bd:48:da:27:40:3e:cb:54:5f:52:2e:
0e:81:60:d4:ea:d7:7c:21:cc:90:00:3e:3b:ac:49:f9:78:e2:
2f:82:82:50:59:ec:10:7e:6a:3b:7a:1b:ed:a7:f1:da:fe:c9:
96:23:6c:f6:1e:4a:5e:0b:07:12:3a:7f:75:fd:22:b2:17:25:
72:c7:e8:cc:0c:20:69:f5:ec:1d:17:15:19:fc:e0:dd:4e:b7:
81:0b:37:71:31:27:fa:bb:33:2a:99:9f:40:d9:5c:93:02:7d:
14:dd:52:37:b4:fb:c4:08:92:d5:81:e3:6c:4c:41:d3:3e:46:
79:14:31:0f:04:f4:74:4c:da:dd:a0:0b:ae:c3:a6:39:c6:4c:
ea:31:d5:b6:45:04:e9:10:f4:93:69:b8:c4:03:c7:f3:a0:d6:
db:d0:5f:d8:a6:da:cc:4d:be:34:7c:4e:3d:19:ce:29:9b:32:
1b:cd:aa:c3:65:48:fa:ca:36:a2:5b:ca:a0:d6:5b:8a:15:39:
56:3e:94:d9:94:57:30:25:4d:35:16:44:cd:3b:e9:20:43:d3:
f8:60:66:50:10:f0:40:03:f0:04:a4:e2:9d:fa:9f:a0:36:28:
21:41:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:59 2025 by rpki-client