Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
File: 8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft (raw, json)
Hash identifier: ICMEaXZl7T/JrM0+9FCFpk055XTxlksg9/pjCOM9ubY=
Subject key identifier: F0:BC:8C:75:FB:D3:84:D4:B7:7D:5D:19:5F:CB:D7:88:E9:88:D0:80
Authority key identifier: F0:EF:61:C9:6F:D6:9D:1A:F1:4E:80:0C:7C:16:C7:A6:5D:58:E2:5C
Certificate issuer: /CN=A91E7C52/serialNumber=F0EF61C96FD69D1AF14E800C7C16C7A65D58E25C
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O9hyW_WnRrxToAMfBbHpl1Y4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
Manifest number: 02BE
Signing time: Wed 21 Jun 2023 02:42:57 +0000
Manifest this update: Wed 21 Jun 2023 02:42:56 +0000
Manifest next update: Wed 28 Jun 2023 02:42:56 +0000
Files and hashes: 1: 8O9hyW_WnRrxToAMfBbHpl1Y4lw.crl (hash: N3MUbAjARPhlde+gQqonGbPuhy0epCDmAvM71ZoDvh8=)
2: 43C84A6663B011ECA27BD40DC4F9AE02.roa (hash: 3cITMQz5nMgk9w2sT0CEgL55sCI3K6JU+5blYDr2iLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7C52, serialNumber=F0EF61C96FD69D1AF14E800C7C16C7A65D58E25C
Validity
Not Before: Jun 21 02:42:56 2023 GMT
Not After : Jun 28 02:42:56 2023 GMT
Subject: CN=649263b0-a9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:0a:60:01:2a:d7:3c:66:97:b9:5a:f5:f3:
30:b0:83:2e:b7:71:22:88:fa:ce:a0:d8:55:13:48:
da:f2:69:01:94:4c:b5:b9:46:0e:d7:80:a2:de:62:
25:21:f8:c1:bd:09:10:14:d1:9b:9d:c5:d7:e0:18:
e4:79:6c:ed:0c:81:71:fe:8d:18:19:30:79:96:5f:
10:9d:f7:ef:11:d7:df:b0:0a:5a:02:6b:8f:a1:3b:
11:a1:51:47:cd:d8:4f:21:b8:87:18:36:ac:af:2e:
56:c3:56:16:c4:d1:d0:f6:d5:ef:06:25:d0:95:c4:
2c:fa:11:56:73:3a:82:ed:08:9d:7e:eb:4b:6a:94:
66:27:a1:f0:8a:19:b7:ff:05:b8:0c:84:a8:bf:8b:
46:c7:d3:22:ba:16:65:12:ab:a8:78:59:91:31:d9:
47:f6:e4:83:e0:89:7f:4c:32:f2:de:37:a8:b5:3a:
80:28:50:60:a9:7c:9e:c5:1d:db:e1:e1:e2:23:31:
b2:15:cd:fd:0c:cc:10:03:ad:b7:20:f9:48:52:92:
e9:e5:c2:d1:7a:2e:ad:2a:f7:6a:10:2c:8b:cd:88:
e4:10:37:b5:bf:37:17:2b:8c:2a:11:c2:4f:bc:7d:
2e:58:a9:fa:bd:d1:ce:cc:bb:64:41:55:57:31:ac:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:8C:75:FB:D3:84:D4:B7:7D:5D:19:5F:CB:D7:88:E9:88:D0:80
X509v3 Authority Key Identifier:
keyid:F0:EF:61:C9:6F:D6:9D:1A:F1:4E:80:0C:7C:16:C7:A6:5D:58:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O9hyW_WnRrxToAMfBbHpl1Y4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:39:04:b5:7a:1f:d7:ba:9d:e5:56:0d:fd:e8:fa:58:4a:
6d:31:05:59:9d:eb:f6:78:f0:bd:22:04:f5:c9:a4:78:8b:dd:
df:57:fa:14:f7:e9:9d:6b:8b:b3:33:45:d4:07:90:7a:f8:31:
c4:7f:16:a4:8e:81:54:b0:9d:7d:25:35:0e:2e:27:be:64:29:
b1:01:c3:99:b9:f2:15:5a:9e:87:71:a0:1b:77:4f:e2:46:33:
fe:3e:54:5a:08:30:b2:0a:7a:4f:b3:49:64:f0:8d:b6:e7:f9:
a3:df:3b:98:a6:98:40:4e:53:4c:8d:c9:84:ff:6e:0b:fb:64:
83:b2:37:cb:d9:69:86:c9:f5:21:d5:26:14:f9:1a:b1:39:bf:
40:66:a6:bd:23:2d:4c:4b:14:20:04:36:ea:fd:e0:af:4f:fe:
7f:5f:61:f7:84:db:c5:46:49:de:15:00:4a:32:31:91:8f:ad:
ba:9f:fb:0d:bb:e1:e8:60:ad:4b:12:48:9c:0a:cb:05:bf:2a:
5e:2d:47:63:c6:93:7e:7d:0c:50:c5:20:44:3a:e4:6a:51:29:
6e:21:d4:8e:f3:27:ec:30:1d:6c:c7:be:4d:08:a3:fc:0c:75:
fe:63:4c:d1:aa:53:00:f6:3e:15:82:6e:a4:3d:bc:14:a9:e4:
27:fd:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:47 2025 by rpki-client