Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json)
Hash identifier: jvOUMQ5juE5DrPzH0D3uCRiPf3TH7SRGeoLepnozui0=
Subject key identifier: 6C:7A:23:98:CD:36:E5:B4:D3:29:F9:5C:78:05:4F:32:CE:D1:12:FB
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
Manifest number: 0BFA
Signing time: Fri 31 Jan 2025 18:36:21 +0000
Manifest this update: Fri 31 Jan 2025 18:36:20 +0000
Manifest next update: Fri 07 Feb 2025 18:36:20 +0000
Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: QkJOeo90jMJuSnE+D3LoIWWX2Pw9zOLP4/qiST/D9Iw=)
2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: Tra2m9br+70DR7E4OQkNdt1e6QXjZmJJfqTvZfV9wL0=)
3: 3762D3A44BA311EEA33D4B34C4F9AE02.roa (hash: 7jGf0oL08kyRPkfbbjOTxtmf2H3WTL9jhNs8s/Yud9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Jan 31 18:36:20 2025 GMT
Not After : Feb 7 18:36:20 2025 GMT
Subject: CN=679d1825-d15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:74:16:aa:a5:fc:57:9f:0c:44:f2:c5:24:
d6:98:3b:42:25:c9:9c:4a:e5:11:98:5d:1e:85:81:
7b:1a:36:ac:b6:35:5e:ce:00:d7:2d:9a:55:28:7a:
14:95:d9:08:7f:d8:9b:89:7d:50:19:5b:bd:42:62:
d3:9c:a2:63:e5:f5:4b:fb:7e:85:87:ee:8a:58:b2:
8a:ac:06:ae:e6:02:f3:55:ce:87:ca:6a:ae:44:23:
78:9b:c3:5d:ee:54:e8:db:d3:e0:22:06:dc:03:91:
16:b7:a9:b9:bf:93:e2:5b:59:a3:ce:03:d4:76:46:
bd:d7:75:63:0b:2d:e7:91:e4:8c:c6:a2:77:73:8a:
94:56:45:85:fd:d9:4a:63:f5:d8:26:d3:23:fa:91:
c2:2a:ea:63:7d:ea:c1:ac:49:34:27:c0:f2:ff:b4:
ca:26:3a:6b:bd:9d:a3:9b:41:28:94:bb:8f:d9:98:
3c:31:64:e3:8c:60:91:ee:ad:d1:8e:e7:75:f9:03:
28:78:c3:8d:21:77:da:6c:68:4e:d1:ea:52:05:d7:
d6:87:77:f6:85:c1:72:50:b2:37:a4:49:4c:c4:b6:
f0:52:39:10:6a:0c:2f:d6:ad:5c:bb:2a:da:45:b7:
41:8f:40:14:0f:86:b8:81:66:00:ce:7c:f1:b4:03:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:23:98:CD:36:E5:B4:D3:29:F9:5C:78:05:4F:32:CE:D1:12:FB
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:db:ed:05:9b:fb:1c:90:9c:16:55:87:ec:91:f8:c6:33:
0d:09:1f:68:c2:31:ef:04:19:cf:cc:6f:b6:ae:fb:06:39:00:
d9:34:0a:ee:43:8c:96:f3:aa:a9:25:2e:4a:b0:61:f7:02:4e:
a2:3f:ca:10:2d:4d:25:3c:ed:82:8a:4b:2a:bc:e1:bd:fe:34:
7f:20:2a:4a:9b:2a:77:16:a1:06:18:cf:67:bf:d8:d7:92:1f:
36:9f:03:df:35:dd:52:53:a2:f5:18:f7:32:dd:45:80:0b:0d:
cd:59:72:96:9e:f0:bd:ee:d0:54:24:0d:a7:c5:d8:18:dd:b9:
e7:27:31:e9:d9:dd:10:f0:52:62:e4:fe:a7:09:51:70:5f:26:
59:3c:ae:21:a9:2e:51:2a:b1:83:60:8c:41:0f:a2:15:99:c6:
dd:d8:30:b8:7e:71:20:4d:f8:b8:08:dd:d7:a6:61:f9:0c:aa:
20:fd:5d:45:71:31:38:3d:47:e7:2c:69:c4:da:98:67:24:e1:
01:76:d3:30:46:b6:06:2d:b7:74:71:7b:df:fc:6b:d2:69:4a:
c5:f9:94:c2:4f:34:b2:de:05:2c:4c:31:5f:ff:21:86:57:16:
87:e0:0d:ab:56:32:a1:ff:53:bb:f6:d1:7f:09:a8:de:af:9b:
3f:3f:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:48 2025 by rpki-client