Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft
File: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft (raw, json)
Hash identifier: zH1C1jlXcpSeqODVjiNkox5ATVp9Tt0maQXRPHN7qGc=
Subject key identifier: 48:36:55:0E:BC:CB:1B:9E:69:51:E4:F8:65:FB:FD:90:11:A5:D5:F3
Authority key identifier: ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73
Certificate issuer: /CN=A9127AE0/serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673
Certificate serial: 0BDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft
Manifest number: 0BD4
Signing time: Fri 31 Jan 2025 18:40:24 +0000
Manifest this update: Fri 31 Jan 2025 18:40:23 +0000
Manifest next update: Fri 07 Feb 2025 18:40:23 +0000
Files and hashes: 1: 7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl (hash: 3iEKONI7b2fg9aDhYO+/KTibgTXjRo7Aj7eICHYH6wA=)
2: 6DB16BB40F4D11EAA6E7A17BC4F9AE02.roa (hash: OAnDbpXpqj53nUK26ywgZEPTuuA4/o8QEENllBabbSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127AE0/serialNumber=ED55DFA0EC69D964B85B86D78B40051DEA129673
Validity
Not Before: Jan 31 18:40:23 2025 GMT
Not After : Feb 7 18:40:23 2025 GMT
Subject: CN=679d1918-725d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:ef:9b:1a:4a:63:03:25:1d:1d:6a:bf:c7:
aa:71:66:c7:51:37:de:37:aa:85:41:93:ca:6a:ab:
23:32:c0:2d:00:f0:35:a2:09:e4:51:1b:0f:11:d7:
26:28:87:b1:5a:fe:33:b7:5c:a7:0a:55:b5:ab:a3:
81:c1:b6:03:20:f7:c3:a4:24:3f:7d:0c:72:f2:c6:
4e:2d:15:96:74:d4:a4:d4:51:16:b1:80:2d:ea:f4:
37:bf:78:20:ee:41:c2:2b:e9:be:b2:7f:83:92:f6:
69:cd:c5:20:7f:95:74:a3:5a:6c:ce:6f:f6:5c:cb:
9f:ff:c4:a4:59:7e:44:f0:b9:67:d9:bf:c6:e2:d1:
83:8f:15:29:e5:5c:83:7b:fb:0f:3b:74:16:56:6e:
44:83:c0:bb:cb:2e:7f:ad:5d:aa:68:24:ae:a9:b9:
6e:bd:84:0c:65:fe:97:ed:7a:31:e7:f2:61:62:77:
59:a7:f1:fe:b9:08:29:84:ee:8b:cf:d2:60:8f:d4:
ca:e5:bd:1e:bb:b9:84:7e:4a:77:3b:eb:6d:ba:3d:
b5:b1:43:4c:23:7f:89:95:13:66:f4:30:8f:90:83:
47:60:b1:bb:48:9e:7f:8a:25:94:b9:9c:54:05:46:
e2:d1:a5:1c:6c:e5:00:6a:f4:1d:6b:ab:b7:2b:38:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:36:55:0E:BC:CB:1B:9E:69:51:E4:F8:65:FB:FD:90:11:A5:D5:F3
X509v3 Authority Key Identifier:
keyid:ED:55:DF:A0:EC:69:D9:64:B8:5B:86:D7:8B:40:05:1D:EA:12:96:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VXfoOxp2WS4W4bXi0AFHeoSlnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127AE0/DD6587AC0F4C11EAA014267BC4F9AE02/7VXfoOxp2WS4W4bXi0AFHeoSlnM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:72:23:9b:34:96:ba:3e:a3:c9:64:c3:6d:8c:98:86:58:0c:
23:ff:02:de:44:43:69:4a:56:dd:3d:6c:a9:bb:17:fa:47:37:
36:24:ee:34:53:4e:f3:a8:c0:bf:6f:50:fb:4c:79:8e:ce:f8:
30:1d:51:37:b3:46:25:a0:0d:15:59:3f:c5:ca:da:9e:6f:a9:
54:34:de:22:1a:a2:58:57:df:d8:d6:bd:f3:df:af:79:5d:a6:
1d:21:6e:f7:6d:d0:04:56:87:91:32:e7:31:c3:c6:1e:b2:ff:
77:5a:5f:f6:72:b7:d0:1c:34:09:83:b3:55:0d:a0:4a:67:0c:
b8:7b:08:57:ec:a5:65:40:4f:36:59:90:cd:8b:84:c5:ab:d3:
2d:5a:57:0a:41:5b:f2:3b:fb:24:36:50:53:d9:bd:a5:da:46:
af:51:89:d1:85:cb:dc:c1:b5:28:d6:ad:02:49:29:f1:47:f9:
ce:66:82:9b:2a:0e:b5:7b:dd:df:a2:55:f5:42:a5:2f:e1:88:
08:69:82:07:54:d7:2a:92:14:dd:be:b5:0a:31:00:91:6e:47:
11:f9:21:4c:bd:20:b7:95:f5:66:04:67:b3:13:a3:62:9f:82:
c6:69:6d:98:f1:80:b6:69:1d:b6:2e:ac:41:35:f9:1e:ba:80:
ea:8b:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:14 2025 by rpki-client