Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: a7qrkYrc//oASGCfYsBqfcPu4+voLTnDRmFYLpG5cGo=
Subject key identifier: CD:9A:0E:DD:2E:2E:7B:70:A3:20:77:C5:65:6C:4C:F9:48:1E:AE:F7
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: 1E
Signing time: Fri 31 Jan 2025 06:59:54 +0000
Manifest this update: Fri 31 Jan 2025 06:59:53 +0000
Manifest next update: Fri 07 Feb 2025 06:59:53 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: gbBPyM72zx5eNble9cYlkYbaIJPeSKzdAr2yOjefaWk=)
2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Jan 31 06:59:53 2025 GMT
Not After : Feb 7 06:59:53 2025 GMT
Subject: CN=679c74ea-14d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:8a:d4:38:ed:70:fb:af:bc:87:bd:80:29:
2a:61:d7:50:ae:0f:0c:0b:fd:09:f1:62:d4:56:60:
b1:25:ba:8a:d3:0e:2a:e0:d7:6d:b2:e1:93:77:b3:
50:96:23:58:5e:37:3c:47:ce:b6:04:b8:23:ca:29:
df:6f:07:14:fb:ec:9e:60:de:b0:c9:40:a0:5b:b9:
8b:53:8a:17:4c:5a:f8:b0:b0:02:b8:c6:7e:34:bf:
9e:df:b6:51:4c:ed:7a:59:83:04:ab:b0:c2:70:dc:
3b:e5:c7:e4:70:52:3f:4e:40:e9:b2:e4:c6:f7:5b:
71:ad:3a:ad:bc:e0:a1:f2:fe:fb:4b:77:92:33:a5:
c2:bd:12:19:18:a0:0b:86:27:4a:65:b9:23:6b:55:
b8:69:e6:d1:0a:2a:1b:38:86:5d:8f:52:27:1c:d6:
d4:c8:79:a8:d8:49:4f:f1:f2:7d:29:ca:b1:d0:07:
d2:d6:90:40:5e:7f:b5:ea:ae:e6:16:1c:f2:da:18:
93:e7:25:2b:a7:21:04:e7:3c:95:e3:d4:d8:5c:e9:
ec:fd:67:2c:a4:1d:c3:5f:2b:25:e9:e6:dd:79:22:
a4:ff:8f:d0:89:6d:04:5b:82:17:6b:fa:31:f8:7f:
ed:5b:e6:7a:47:1c:51:df:c0:89:bd:b7:19:59:03:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9A:0E:DD:2E:2E:7B:70:A3:20:77:C5:65:6C:4C:F9:48:1E:AE:F7
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:01:9b:e1:9c:2d:cc:e7:92:17:15:49:d6:48:ba:e7:d7:
66:e7:ec:9c:5b:24:03:98:ad:b5:26:d8:83:89:df:3d:fe:8c:
52:21:69:2f:aa:53:af:00:e2:69:90:ca:48:4f:f9:35:c5:4e:
2d:e3:da:b1:29:42:3b:6f:62:9f:72:72:6a:24:fd:a8:64:cc:
f7:15:af:3f:b9:32:a3:72:df:39:a3:f1:9f:26:78:b3:e6:4b:
40:a5:ef:dc:db:ed:ff:a6:3a:c7:ff:44:7a:67:2c:6f:3e:b5:
2f:4b:54:f4:37:5b:bf:f4:1e:3d:e2:66:9a:18:d2:29:5a:23:
1e:82:bb:8f:cc:33:f7:40:07:ab:88:b4:76:bb:c3:d4:5e:20:
61:88:a5:b4:03:56:9b:23:ae:2e:4b:1d:71:bc:7c:e9:10:95:
b0:c3:b5:1c:85:aa:59:19:e7:e2:af:b5:9d:86:28:69:a3:38:
1d:6b:72:92:59:09:20:ad:13:ea:2e:a8:16:2a:0f:1e:34:3e:
57:9d:cc:a3:7b:f7:3f:d9:86:36:1e:aa:da:05:a9:6f:8a:e5:
7c:e8:1f:0d:cd:fd:27:de:a6:33:06:6d:3c:47:76:8a:f9:5c:
df:3b:65:c0:fb:b2:5e:30:08:d7:c9:c0:12:0c:46:6b:04:06:
29:f4:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:40:59 2025 by rpki-client