Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
File: rNBOSci3K74B41N1Wc9MlHMO1d8.mft (raw, json)
Hash identifier: e9frScH4UeU685md7a2aObdBbBL6OMJ2XLmctfeuExg=
Subject key identifier: AE:60:65:E7:46:3B:7D:22:8C:C3:E2:5B:85:BC:9A:09:27:78:88:10
Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF
Certificate serial: 0BE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
Manifest number: 0BC9
Signing time: Wed 12 Feb 2025 02:07:18 +0000
Manifest this update: Wed 12 Feb 2025 02:07:17 +0000
Manifest next update: Wed 19 Feb 2025 02:07:17 +0000
Files and hashes: 1: rNBOSci3K74B41N1Wc9MlHMO1d8.crl (hash: VVwn9F0XiAadool+NkqaQQfYSWtgeqglJwmC5Gux1VQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411B3, serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF
Validity
Not Before: Feb 12 02:07:17 2025 GMT
Not After : Feb 19 02:07:17 2025 GMT
Subject: CN=67ac0256-7959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:11:8c:a0:78:28:03:b9:fa:ec:90:5d:e8:
a6:28:d7:16:20:5b:c3:19:d8:6a:78:7a:5e:2b:e3:
cf:d4:76:65:97:67:c9:25:ab:65:52:2c:43:de:73:
d3:c4:08:7f:f6:b9:58:bd:06:0f:f5:4a:26:26:f3:
8e:02:82:d4:70:e9:bd:6f:20:12:b5:87:53:7a:65:
02:ab:65:b3:1c:85:35:4f:22:23:da:20:69:9f:0d:
e7:f7:07:31:a1:79:ab:e1:52:f5:b7:69:f4:61:56:
e9:1e:77:2a:4b:03:ec:4a:74:6e:73:d2:b1:32:6e:
8b:87:a8:a1:1b:1d:9a:7d:d1:3e:d9:90:15:cb:02:
d3:22:88:ee:0a:5d:eb:d2:1a:48:92:bd:aa:4c:7a:
8f:2c:09:59:23:3e:94:8b:26:9f:75:e3:d1:a1:b8:
5d:85:3d:ab:0d:94:3b:f6:59:fd:c7:50:0c:85:f5:
12:e3:ac:fb:41:06:d6:b2:d3:05:24:79:b0:76:9f:
61:f2:6d:4b:86:e8:f5:d6:25:aa:cb:16:46:58:1c:
b7:b5:0d:cc:a1:ae:cf:f8:8c:08:8a:36:37:f5:03:
fa:81:85:f0:f3:41:79:16:85:23:e6:f8:e6:91:5a:
6f:d7:1e:1b:c2:2f:b3:79:7b:3c:a7:00:3a:38:1f:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:60:65:E7:46:3B:7D:22:8C:C3:E2:5B:85:BC:9A:09:27:78:88:10
X509v3 Authority Key Identifier:
keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:78:1d:e7:ee:54:56:b9:91:e2:2b:c7:1d:9e:d3:c8:f6:d4:
a9:e3:c2:e0:5a:93:28:50:1c:d8:f5:44:52:c7:33:d4:3b:3d:
20:94:44:f5:c4:b4:53:3d:b5:4a:e0:de:43:1d:97:01:e5:0a:
94:b7:a8:23:06:5f:4e:08:a6:53:ca:df:22:ac:40:49:13:3e:
7e:d5:a4:76:66:ba:ad:be:24:75:c2:ea:2d:66:35:a4:9c:a3:
ce:b7:5d:fb:8d:64:95:ea:0a:be:8a:22:75:75:a2:d6:7d:6e:
b0:21:db:28:c8:e6:ff:0d:e1:97:16:a2:2b:a7:ca:06:38:35:
95:6d:0c:9f:65:ef:cb:91:c1:3d:1b:74:1e:26:db:d8:46:74:
e7:ff:8d:2e:c1:1e:c7:11:60:95:13:ee:ff:d9:55:60:b8:71:
de:71:7e:ea:18:5b:8f:f2:ef:10:f1:8b:35:9c:41:3b:d7:f5:
5f:e8:28:d3:7c:d2:28:6e:af:c7:06:a3:ac:eb:e0:80:03:d4:
e0:76:ad:86:7a:94:8a:70:00:c7:68:60:8d:17:d0:33:c1:54:
06:71:06:77:6a:7c:40:f1:29:77:11:26:64:b2:1e:bb:63:3d:
da:fd:5c:07:0b:8f:df:6f:4f:dc:bf:41:91:e8:c2:42:4b:9c:
a7:90:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:38:19 2025 by rpki-client