Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier: jXw2YA09hHqxljRrVHDfYa8PcUYe3CZK9f8rXkmWInw=
Subject key identifier: 20:93:1E:A1:17:65:4E:FF:95:BC:68:45:72:EB:A5:A2:AB:23:9B:53
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial: 2036
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number: 202F
Signing time: Fri 31 Jan 2025 15:59:10 +0000
Manifest this update: Fri 31 Jan 2025 15:59:10 +0000
Manifest next update: Fri 07 Feb 2025 15:59:10 +0000
Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: G6/nFWsj1jYu7EdlmA2MiOB/38svGC1ohNXJ9cLnSSA=)
2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: hFvoTK4OtAWXeUzfRY08E0R6vhbINiOuVhDEOiD6rEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8246 (0x2036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Validity
Not Before: Jan 31 15:59:10 2025 GMT
Not After : Feb 7 15:59:10 2025 GMT
Subject: CN=679cf34e-453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:43:fa:52:f4:73:77:18:bf:f1:22:74:b6:
bc:31:4d:0f:ee:ae:42:f8:3d:dc:c1:fc:d8:74:5f:
38:00:fc:ed:a2:9e:a5:3e:e8:88:12:cd:bc:bb:2b:
e6:b9:0a:fc:cb:01:99:99:d3:b5:88:dd:39:f3:da:
12:f8:13:48:15:b6:85:53:42:01:17:f8:c9:85:41:
06:5f:1d:ee:e0:3e:52:c4:dd:f1:42:e2:c0:a2:86:
43:83:b4:98:1e:70:bb:a4:5d:27:af:7b:94:7c:39:
48:cb:a4:13:a0:53:71:ff:e8:5f:f6:af:ab:e0:5f:
1f:20:ea:8a:bf:b9:6d:98:c9:57:60:9e:4d:7a:a2:
01:83:f0:6a:65:b2:03:12:71:24:b0:bd:a8:92:4d:
3a:74:9c:c4:5f:d3:71:e3:9a:5e:82:91:c1:15:b9:
8d:b5:d7:be:c0:6d:0c:89:15:a9:ad:ea:b7:d5:f2:
59:bc:85:4c:e4:8f:07:a5:a3:55:1c:e3:b4:4b:28:
ad:67:38:70:10:f1:de:71:20:65:ff:f2:ed:31:00:
c7:ee:98:c4:60:cf:aa:da:14:0e:62:2b:fb:70:de:
93:f2:69:e3:3b:94:0b:39:1c:8d:04:28:dd:c6:9a:
5c:1f:73:aa:59:05:7f:c1:e3:cd:a5:ee:c7:11:d4:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:1E:A1:17:65:4E:FF:95:BC:68:45:72:EB:A5:A2:AB:23:9B:53
X509v3 Authority Key Identifier:
keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8f:3d:3b:52:2d:f2:7e:a3:e1:27:71:b5:9a:15:33:3d:d1:
d8:84:34:75:0d:33:9d:d7:0e:fb:38:f3:1b:07:fd:b2:39:7e:
09:57:75:b8:30:53:65:b3:f0:cd:35:c4:19:8a:11:52:53:12:
81:be:7c:d1:7d:4d:5c:e5:01:26:54:b0:51:79:52:ed:ad:bf:
5d:8b:e6:a3:9f:47:58:ad:ea:dd:b2:71:5c:07:77:d3:97:11:
10:af:ce:1c:93:ca:fa:ec:68:96:ac:54:39:f6:0f:c3:a1:7a:
ae:8d:15:37:43:69:c9:1c:b4:bc:37:d1:17:0b:75:3a:c0:49:
ba:0d:8f:28:ef:99:29:fb:c1:96:47:8b:b6:78:d2:ff:cc:ec:
56:8c:8d:7d:f8:b8:d5:99:5a:bd:53:95:49:89:05:08:49:95:
a6:f3:c5:19:e8:e2:73:ad:cb:31:0e:3a:a5:4a:28:f8:e5:84:
5c:7d:0e:98:9b:1a:c8:e8:8a:29:e8:50:f6:17:3c:9a:ac:8e:
c4:b5:5d:25:17:98:c0:bc:78:df:96:7a:81:ef:5b:38:a5:38:
ee:af:a8:fe:99:b3:5b:57:da:cd:b0:c0:78:b1:59:51:88:7f:
12:ad:f5:c4:48:78:94:e8:6e:be:0a:75:b1:c2:a5:11:60:56:
a5:7c:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:05 2025 by rpki-client