Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json)
Hash identifier: cnSIy+wIOBZs+yHDVHmQJZX8mcK0TFbTPo9cs9SDdl0=
Subject key identifier: 61:9B:15:4D:6F:DD:D1:6F:04:C4:51:6D:16:D8:C8:23:FF:0F:3D:86
Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Certificate serial: 06ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
Manifest number: 06E4
Signing time: Thu 30 Jan 2025 21:58:28 +0000
Manifest this update: Thu 30 Jan 2025 21:58:27 +0000
Manifest next update: Thu 06 Feb 2025 21:58:27 +0000
Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: gKXyzd+hkEMd98movnuY/Hn1myIPN2SD0gqnygDGYlo=)
2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: yTN9MP3cWtCOgKN18rXJLFQgow1VV1s7v1uBxUJ0Wk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Validity
Not Before: Jan 30 21:58:27 2025 GMT
Not After : Feb 6 21:58:27 2025 GMT
Subject: CN=679bf603-1889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:be:d6:ad:2e:cc:0c:f7:2e:7b:3a:3a:1c:
db:f2:0e:39:06:64:e7:99:02:77:4b:c1:a4:5a:f6:
80:a8:9b:55:2e:32:df:40:be:b8:98:bc:83:b8:a9:
1d:45:93:fa:0f:5f:dc:ff:95:75:1b:eb:c9:33:d3:
83:34:c2:c6:e2:50:ff:02:24:b0:5d:df:ae:58:15:
23:bc:93:cc:16:d9:41:0e:fc:03:88:16:50:a9:e0:
65:3f:60:a9:69:4f:ae:90:fe:58:c0:3b:30:29:d8:
f1:d0:52:fd:d2:21:29:ad:aa:4a:12:5c:13:65:e2:
99:7a:f8:44:cb:cd:db:de:21:cb:14:7d:35:90:d4:
45:e5:54:87:82:45:13:3d:d1:69:c8:1f:fa:ad:12:
5c:67:8f:b9:c3:50:41:6f:ef:b3:20:5b:7c:8f:24:
de:e9:27:aa:3c:f4:9f:5b:fd:d6:35:c8:ec:12:f3:
e4:0c:e3:0d:39:8e:d3:2f:76:72:77:56:14:0a:3c:
8b:04:e9:fd:36:f8:af:de:6a:59:bd:95:b7:2c:fe:
24:6d:71:3c:fb:a5:67:52:b2:44:f7:3f:2a:54:b1:
0d:75:f4:a3:bc:18:e1:e1:2b:6b:c1:ca:95:e5:49:
d5:37:e5:b0:bf:35:f8:60:55:4d:87:b8:46:0e:5e:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:15:4D:6F:DD:D1:6F:04:C4:51:6D:16:D8:C8:23:FF:0F:3D:86
X509v3 Authority Key Identifier:
keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:4b:24:e5:d7:3f:26:f4:20:8c:55:ad:05:5f:6a:ba:9b:
02:14:be:fc:b5:ee:ee:d8:16:3e:d7:b0:00:c2:24:4e:38:1c:
b6:5d:58:d2:73:f6:30:c7:5c:ed:b0:c0:4c:22:14:58:59:c2:
55:62:89:78:51:dd:75:a4:f0:3c:e2:86:ab:c5:65:ef:3b:3c:
67:4e:36:4e:71:f4:b8:11:a7:b6:ab:bd:13:2d:9f:b6:d6:10:
d1:e6:64:11:32:f8:61:37:c1:fb:bd:78:12:b9:53:ad:1a:73:
df:92:52:36:57:ff:60:ab:73:23:16:f3:fb:83:aa:43:00:4c:
44:66:a8:d3:7b:98:aa:56:a4:d8:3f:24:84:b6:f5:97:db:ab:
96:db:7b:04:a8:64:c2:f0:f7:e3:ba:88:fd:ff:b8:74:5a:b7:
71:7b:b4:21:bb:d2:af:ca:28:84:d5:f1:91:3d:0d:30:b5:c7:
f1:8a:ba:1d:f7:7b:fd:67:2c:e7:6c:0c:88:41:b0:fb:7c:54:
2d:32:a5:2e:fa:4b:a1:e3:78:a0:4f:44:44:ef:2f:89:43:ad:
d4:da:c8:60:04:fb:dc:5a:19:b5:03:58:6a:e3:50:8d:fd:36:
f1:d8:1a:8a:88:1b:c4:ac:1a:27:38:43:f3:b2:09:93:35:54:
96:29:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:41:58 2025 by rpki-client