Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File: h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier: jLOOJdFbUDo42135JGkGthULGtOqICkOnTv1MGDloi0=
Subject key identifier: E0:6A:FD:49:63:7A:26:7F:E5:FB:56:8E:6A:C1:1C:87:33:88:3C:63
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial: 07FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number: 07E1
Signing time: Thu 30 Jan 2025 21:03:21 +0000
Manifest this update: Thu 30 Jan 2025 21:03:20 +0000
Manifest next update: Thu 06 Feb 2025 21:03:20 +0000
Files and hashes: 1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: 0qP+nrJ0Wzk84+szG8xZl7NlncxpWjv/EgUJb8+ljQo=)
2: 0A7320284D4811EE86B7A71FC4F9AE02.roa (hash: SiDzLOasKO+XNvQ+goSOpdOQE3ZO4gyfhkgA7eX7eA0=)
3: 021F5D1E005F11EE9D6E2530C4F9AE02.roa (hash: D9Du1jxG8oE9wceHFEoY5Nl8COEasjJYKId8W2qCUf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Validity
Not Before: Jan 30 21:03:20 2025 GMT
Not After : Feb 6 21:03:20 2025 GMT
Subject: CN=679be918-db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:08:e5:ad:5c:40:ca:d2:55:94:23:59:13:
42:27:0e:2d:2d:85:d8:63:91:a0:99:17:58:6a:23:
11:03:bb:04:d9:27:2b:9b:ab:bd:f8:73:fd:97:0c:
03:e6:a0:d9:6f:12:5b:e0:fe:26:75:df:51:77:fd:
72:78:82:9f:39:04:80:18:9d:97:95:ea:60:cf:82:
b6:e4:70:53:9b:e5:76:d8:67:c7:fd:ad:cd:c2:04:
f5:43:e7:c1:12:68:a6:49:aa:44:a1:e0:54:5d:ca:
15:66:5c:58:6b:23:f3:51:a8:b9:64:6a:84:90:df:
c8:c2:a6:ae:2d:d3:ae:2b:df:2f:f5:b4:c0:67:e0:
91:e2:3c:9a:66:c0:74:df:fc:93:46:e1:99:71:1b:
9a:87:17:28:af:37:39:2e:7f:f6:64:7f:2c:d2:17:
92:fb:db:10:4e:62:48:30:ac:3f:0d:06:53:38:5b:
29:61:20:cf:34:ec:8c:fb:2b:81:28:25:2c:2d:38:
c7:31:20:af:2f:36:2a:52:e0:46:82:99:28:45:af:
9b:ee:41:19:af:46:fa:4d:77:28:ad:c3:f5:c3:a7:
3b:9c:87:f1:17:d0:2a:7a:82:db:5a:01:8c:2f:76:
5b:76:df:f2:01:1f:c9:f6:6c:54:54:bb:9d:71:79:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:FD:49:63:7A:26:7F:E5:FB:56:8E:6A:C1:1C:87:33:88:3C:63
X509v3 Authority Key Identifier:
keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:29:b8:7a:22:40:4b:ec:79:0c:54:76:1a:0e:6f:ca:97:
1e:28:5f:a1:85:9a:71:bd:e3:90:15:c8:ca:54:d1:1d:cb:a8:
ea:0a:80:af:59:b1:02:f1:c9:4e:11:66:d2:9b:6d:59:c4:b8:
d8:dd:ea:62:2a:4a:e4:7a:af:e1:93:c4:fd:65:7e:2a:5d:da:
a3:e5:ef:b2:50:dc:98:b8:8b:8b:c3:8c:04:00:a2:82:33:08:
bf:3a:d5:e1:78:02:3c:80:10:e2:2d:cc:42:cd:2a:11:f3:ab:
f4:fe:5a:dc:31:e4:d1:9e:d2:e6:1d:1d:57:01:41:d0:92:c7:
86:85:0f:cd:08:68:25:b4:f6:17:86:41:06:1f:e7:92:25:06:
ee:1c:d8:84:29:59:75:9e:d1:f2:7a:42:9d:f1:c0:33:c3:aa:
e5:1a:c9:45:6c:15:f4:d0:b0:e3:aa:d5:26:76:b7:83:64:6e:
ff:b4:06:2f:eb:46:9f:2e:95:40:cb:b3:ec:b8:8e:a9:ff:82:
0f:c8:ef:f2:1b:3e:1e:c4:ca:11:4c:09:5e:9a:7f:9f:cc:25:
53:ce:2b:be:99:18:3e:de:3e:f9:b3:96:5c:48:97:f1:65:aa:
f8:18:dd:3b:7f:d0:64:42:bd:fc:69:34:a1:ab:0c:45:92:86:
a1:ae:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:30 2025 by rpki-client