Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/t9zhQRKgKYL1dXyrjTSRAyyOGPo.mft
File: t9zhQRKgKYL1dXyrjTSRAyyOGPo.mft (raw, json)
Hash identifier: 6JZuyQHTPoxR+2en1uD58n6KsdUZTBdYJ2F8lQcaPAM=
Subject key identifier: 9E:22:14:D1:60:B5:9C:37:4C:79:FA:23:A3:D7:7D:E1:86:AB:C3:8C
Authority key identifier: B7:DC:E1:41:12:A0:29:82:F5:75:7C:AB:8D:34:91:03:2C:8E:18:FA
Certificate issuer: /CN=A91F91EB/serialNumber=B7DCE14112A02982F5757CAB8D3491032C8E18FA
Certificate serial: 0C53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t9zhQRKgKYL1dXyrjTSRAyyOGPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/t9zhQRKgKYL1dXyrjTSRAyyOGPo.mft
Manifest number: 0C4D
Signing time: Fri 31 Jan 2025 18:14:22 +0000
Manifest this update: Fri 31 Jan 2025 18:14:22 +0000
Manifest next update: Fri 07 Feb 2025 18:14:22 +0000
Files and hashes: 1: t9zhQRKgKYL1dXyrjTSRAyyOGPo.crl (hash: erC8N6v2X+IbUHiTSzDXaN5NIRbiIIBHE6TsVr5WvvY=)
2: 8D243F849A6D11EA8674310DC4F9AE02.roa (hash: ZlxWP9id3BOwgT849Ql20JmEjoi9oTlH+F8ceOZ0tcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F91EB/serialNumber=B7DCE14112A02982F5757CAB8D3491032C8E18FA
Validity
Not Before: Jan 31 18:14:22 2025 GMT
Not After : Feb 7 18:14:22 2025 GMT
Subject: CN=679d12fe-ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:95:8a:c4:83:97:50:aa:c7:d1:ef:d6:a8:
93:18:c6:4d:fc:dc:ce:7b:a1:76:c1:2d:31:03:e9:
71:13:16:b5:8b:ed:9c:70:ae:85:b3:ab:92:d9:ac:
08:bc:46:95:ee:e7:f9:6d:bd:ee:7e:10:bd:4b:fb:
65:c9:f6:b2:54:d2:23:1d:64:0f:ea:a3:fa:4c:ef:
7d:95:9e:7e:90:7d:28:8a:6c:48:89:53:a5:14:89:
47:91:74:76:41:46:6e:20:6c:e1:79:06:1b:06:79:
8f:e9:24:dd:f1:6c:b0:c0:74:ce:b1:d2:6d:30:8f:
01:ed:5e:a5:0f:ca:ed:84:a4:22:cd:00:93:c7:85:
88:95:d5:19:07:20:1e:8b:f5:4f:ed:74:98:e6:63:
51:8f:55:c5:00:0d:c8:e9:87:c2:fd:c6:ed:cf:6a:
de:04:bd:5a:61:2b:d8:ba:dc:9b:71:27:9a:30:d4:
5e:d9:b1:91:aa:24:6b:ec:be:96:d8:5f:79:4d:f8:
f6:3a:91:ec:27:18:4d:96:d9:e3:a0:ef:6e:1d:86:
d5:8c:78:52:7d:06:95:58:d2:e7:3a:3d:44:69:59:
a2:ad:fa:07:a2:4a:bb:55:c2:92:f5:3b:a0:fd:4f:
50:07:c4:1e:f5:33:d6:10:e7:df:35:e9:10:88:7e:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:14:D1:60:B5:9C:37:4C:79:FA:23:A3:D7:7D:E1:86:AB:C3:8C
X509v3 Authority Key Identifier:
keyid:B7:DC:E1:41:12:A0:29:82:F5:75:7C:AB:8D:34:91:03:2C:8E:18:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/t9zhQRKgKYL1dXyrjTSRAyyOGPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t9zhQRKgKYL1dXyrjTSRAyyOGPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/t9zhQRKgKYL1dXyrjTSRAyyOGPo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:22:df:ab:70:cb:ac:e0:b1:ea:6e:8b:c8:b9:98:3e:fd:
94:d8:a9:4a:e7:40:5d:86:d9:24:fd:d6:90:2d:de:ee:d0:2c:
e6:5d:02:84:a1:d2:ce:e6:6f:a0:2b:3d:ad:94:f9:92:48:f9:
9c:17:b9:27:d4:32:a8:de:94:6e:06:fa:63:c3:1e:44:d2:8e:
73:c4:ba:39:c3:9f:18:3a:c9:5c:e8:37:50:75:5f:56:b5:c2:
30:ce:c6:00:ec:64:f8:cb:c8:7b:22:bf:d7:a9:e0:8d:70:9d:
e7:b5:8a:5a:45:05:75:90:d8:d1:97:cf:c6:3c:ba:d3:af:da:
68:44:c6:73:be:11:50:c8:47:b8:2c:ba:1f:3a:87:c6:f5:d2:
23:c9:ae:a4:42:d3:c7:8f:95:08:da:01:5b:86:21:5a:75:b3:
c4:b4:58:a1:58:6c:b0:54:ab:02:c8:b4:11:d8:4e:d5:b8:2d:
48:8f:73:bb:cc:dd:f8:16:ac:0c:18:f5:d2:d9:d9:10:df:15:
b5:3d:e6:2a:29:73:27:be:4b:ca:4d:e7:7b:77:50:a2:50:57:
09:af:5d:5a:6c:05:43:ee:30:52:77:0d:e1:07:b3:84:68:d8:
66:5f:97:61:75:80:f6:be:d3:2c:be:ef:7a:c0:5b:51:37:b9:
ab:c9:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:58 2025 by rpki-client