Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json)
Hash identifier: Izl8UIJe5raBRySG4HfsP4AzBDrijLdQeR3xlk60MPI=
Subject key identifier: 15:20:C0:1B:A7:41:FA:2F:97:9C:4C:BC:C9:87:AD:EF:6E:DF:32:B3
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial: 0813
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
Manifest number: 1994
Signing time: Fri 31 Jan 2025 17:12:27 +0000
Manifest this update: Fri 31 Jan 2025 17:12:27 +0000
Manifest next update: Fri 07 Feb 2025 17:12:27 +0000
Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: RLM3WvkN7fo+DXfYBOUvgMa/tZ+6VQgdu3TmBRyd2KE=)
2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: k9wHhpt8UiUsBAqNUER2NNEPeQj08b6887cRTKa39g0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Validity
Not Before: Jan 31 17:12:27 2025 GMT
Not After : Feb 7 17:12:27 2025 GMT
Subject: CN=679d047b-7186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:d0:62:e7:49:40:ed:ca:19:02:76:a3:22:
ac:5f:30:9e:57:91:46:ad:1d:20:85:40:48:49:27:
b0:00:5d:da:b8:50:91:31:fe:28:15:f6:ec:4c:03:
33:e5:28:ab:99:22:7f:7d:65:cb:a2:0c:ee:8a:ce:
22:b9:4d:11:1f:bb:c1:41:3f:d7:a4:e4:51:c3:c5:
4b:ec:e9:87:c7:8a:39:7b:9c:e0:dc:bd:f9:24:d9:
9b:04:f6:5f:10:af:63:ee:7c:c3:1b:d9:20:ca:2c:
59:1b:8c:9f:82:41:35:64:32:dc:54:c5:2f:c6:55:
3c:8c:8c:c2:b5:99:0c:93:5c:45:1c:05:bb:84:c5:
72:ef:59:de:c7:4d:d3:46:56:79:68:35:cb:87:7d:
f3:a6:61:ce:c3:79:99:93:29:a3:2a:d2:61:8b:16:
b5:c3:ea:78:86:a0:6f:46:e5:0b:df:45:1f:30:50:
1a:f5:13:df:c3:73:79:5a:16:4f:5e:7b:e9:e3:44:
bb:0f:78:a8:39:70:10:1d:21:23:b1:5b:94:23:7c:
36:69:d7:d8:f8:57:c8:3a:be:1f:f2:7e:74:62:13:
6b:84:fb:16:8b:96:61:b2:b5:69:7a:7c:d6:73:d7:
a7:6b:f7:b0:c5:32:7b:23:9e:c7:7b:7c:7e:29:c8:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:C0:1B:A7:41:FA:2F:97:9C:4C:BC:C9:87:AD:EF:6E:DF:32:B3
X509v3 Authority Key Identifier:
keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c0:ac:13:ea:7f:66:ba:21:d7:0c:3e:d5:16:d1:45:f4:42:
38:b3:00:dc:37:31:be:34:37:78:c7:7f:00:11:ae:da:2a:a3:
77:b9:71:c2:bd:84:f5:3f:f6:f1:32:28:13:e0:1b:2b:c4:03:
fa:6f:78:27:73:96:ed:06:ab:d2:03:0d:a8:e6:ac:26:36:4e:
10:89:db:51:96:da:4a:0f:46:7c:12:28:13:8d:6b:9d:36:f1:
a5:08:60:f6:a6:4a:46:ea:12:42:9e:d4:02:7f:3b:05:b6:e6:
d2:ae:8f:e2:a0:00:45:81:92:73:05:c1:75:3a:97:76:d5:89:
2b:2a:b0:e8:49:74:05:e3:66:1f:13:5f:57:b8:be:e6:21:f2:
17:79:c5:36:25:81:b1:ef:cf:3d:30:3b:68:a2:0b:2c:17:14:
3c:1f:96:c3:56:1c:08:a9:b4:1c:35:9f:ac:10:a6:5f:fd:3b:
46:93:e4:e2:66:03:6e:e9:d2:0a:c0:ea:bd:a4:9c:af:dd:73:
26:62:b4:8e:41:86:a1:96:69:db:17:74:89:74:d2:02:53:ad:
18:56:87:06:b1:87:a1:87:e9:1b:17:f5:ce:1a:db:59:11:92:
37:3e:11:0e:d0:87:39:93:60:2c:69:82:50:7e:1c:0f:19:6d:
55:04:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:18 2025 by rpki-client