Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json)
Hash identifier: 5hBn75pMMHiZnWIDwxDcuMaccHKAIMvEaOoQhUbvEPQ=
Subject key identifier: C8:B7:EF:C9:9E:8F:5C:FC:0B:F0:6A:68:0A:40:86:43:9F:7A:36:0E
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial: 2129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
Manifest number: 2121
Signing time: Fri 31 Jan 2025 15:56:11 +0000
Manifest this update: Fri 31 Jan 2025 15:56:11 +0000
Manifest next update: Fri 07 Feb 2025 15:56:11 +0000
Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: Z3oOG1nYrRZItD54KSgzaKMOZwXAzJ/P9t6d4lVXYos=)
2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: nL0Z119WnXgRu2rtcMKUBxI4xbIxjYpGKvjnrU4cw64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8489 (0x2129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Validity
Not Before: Jan 31 15:56:11 2025 GMT
Not After : Feb 7 15:56:11 2025 GMT
Subject: CN=679cf29b-f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:22:6e:87:e8:56:43:88:45:fa:ed:76:b1:
1e:11:24:9e:d6:8d:26:c6:d3:00:b3:04:95:57:3a:
b8:77:74:10:6f:b9:4e:37:57:40:a6:5a:0c:14:cc:
92:d4:98:1e:c9:d7:e2:f8:ba:11:67:26:60:94:9f:
a0:0c:7d:52:5d:a5:24:30:8b:08:bc:b5:61:a9:7d:
13:98:28:3d:a2:fd:b9:ce:98:b9:60:c8:7d:ef:0b:
51:94:89:e5:4e:f2:4b:34:25:94:6d:0e:eb:57:6b:
00:08:82:c8:ad:ad:31:23:3e:37:8a:5c:2a:f5:2f:
a7:39:71:de:92:81:68:9f:ee:3c:6d:b9:c6:b9:e0:
15:13:3a:16:5e:37:0b:01:7a:76:4b:7d:92:62:45:
45:2e:49:eb:f5:2a:b2:81:cf:fe:67:ea:2a:04:96:
02:bf:84:fd:39:1e:7d:1a:2b:89:50:43:92:00:a4:
af:12:43:ed:79:2b:95:ae:dd:e2:62:31:47:de:20:
d8:87:83:99:60:cc:05:87:a1:ed:38:5e:d4:7d:c7:
c7:32:9a:67:12:3e:7e:51:98:62:fa:42:b3:9f:91:
36:0a:54:38:42:21:b9:eb:ef:15:c7:93:2b:c4:e9:
5c:fa:08:8d:48:fe:e8:d7:ec:ea:06:5d:3c:d8:3f:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:EF:C9:9E:8F:5C:FC:0B:F0:6A:68:0A:40:86:43:9F:7A:36:0E
X509v3 Authority Key Identifier:
keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:5b:9e:ed:93:e8:42:1a:fe:73:4e:3b:de:25:5a:3c:25:80:
64:23:9e:f0:9e:ab:ab:95:8c:f6:19:91:a6:77:5c:d4:29:d2:
11:3c:72:d2:c9:e0:b2:c8:ec:21:ca:81:01:5a:0e:f6:0e:82:
b2:aa:34:6d:80:bc:7c:34:6f:60:b9:aa:0d:55:47:d9:89:fd:
2b:f3:42:ae:c4:a7:01:25:ef:7d:5e:0a:b7:cd:7f:6c:ea:e0:
26:7d:88:9b:c5:b7:31:87:25:00:95:73:e3:bd:6c:94:6e:c9:
6d:ad:fe:34:6d:81:f9:6c:ad:6a:6e:23:cb:22:19:7b:10:6e:
1c:be:71:32:23:dd:3c:21:9b:cd:ac:53:d0:5c:c3:f4:ef:d8:
a0:a2:d9:06:5f:b0:37:eb:a2:d2:d4:1d:dd:61:29:9e:c9:e9:
46:ba:7c:47:df:e2:f6:c3:c0:88:4e:f5:6d:ec:27:31:5b:74:
bd:eb:6b:b6:d0:fb:01:18:48:c2:2c:ed:23:d8:1d:17:8b:48:
88:78:ed:0d:9c:b8:6d:76:ba:77:57:70:a0:33:1b:38:53:78:
6d:95:a0:11:7b:99:6c:e5:35:4b:68:d7:eb:ae:b6:e0:ca:1e:
a2:44:31:97:28:2b:29:5e:81:06:ac:d7:43:63:14:33:70:10:
62:44:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:24 2025 by rpki-client