Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier: gKzf9Zj33Ip64Ax0EutlbCOQCZRwbsgGxgYSTxPoEE8=
Subject key identifier: C5:2C:F5:6F:24:DF:BC:6D:91:1F:0D:53:B1:F5:92:EC:6E:5A:72:E1
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial: 040B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number: 0407
Signing time: Fri 31 Jan 2025 00:31:16 +0000
Manifest this update: Fri 31 Jan 2025 00:31:15 +0000
Manifest next update: Fri 07 Feb 2025 00:31:15 +0000
Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: YthPCuxMEdmwyjgKDioixAVNBOfTtD0Yyv2CwUoiwPs=)
2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1035 (0x40b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Validity
Not Before: Jan 31 00:31:15 2025 GMT
Not After : Feb 7 00:31:15 2025 GMT
Subject: CN=679c19d4-af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:64:ec:2f:6b:3e:7d:06:cb:5c:79:54:39:
6a:40:cc:26:1c:d5:30:5b:67:10:36:16:25:e5:e0:
b2:af:91:8a:5d:f6:05:ae:9f:a5:8e:ea:6f:e0:98:
fc:77:8d:8e:33:35:de:9d:db:a5:2d:17:0d:2f:e3:
02:31:65:ec:45:ad:48:32:70:79:ea:4b:f8:9c:01:
74:cc:e5:96:da:0a:71:60:fd:1e:69:2a:de:ec:d1:
be:24:47:6e:51:a1:c8:ff:d2:79:03:70:28:cb:9b:
2e:b1:4b:df:f3:91:2f:e7:91:6e:db:4b:6f:f6:e8:
fe:7e:18:c8:cc:76:40:fc:be:81:9a:9a:7b:19:d3:
8d:49:fc:f9:5a:b3:b2:61:e3:c0:97:5b:14:5a:77:
23:da:f0:dc:eb:23:4f:44:32:7d:a4:2d:43:7a:9f:
ea:6d:d0:71:1d:fe:11:82:04:45:b0:c0:c6:bd:98:
6d:99:65:f2:7e:ff:49:8e:cd:5d:db:8d:51:ce:6a:
85:a2:88:29:b2:b5:3f:6c:b8:7f:69:b1:a8:75:9f:
38:84:a9:b5:61:ba:c2:37:22:46:34:36:b1:67:30:
67:a7:c5:18:d4:96:38:1b:4f:24:a7:bd:01:70:49:
45:52:2b:df:af:e4:66:5f:df:98:6b:80:16:27:68:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2C:F5:6F:24:DF:BC:6D:91:1F:0D:53:B1:F5:92:EC:6E:5A:72:E1
X509v3 Authority Key Identifier:
keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3e:5e:5f:c2:96:59:71:41:f4:19:29:bc:72:c1:69:e5:c4:
92:f9:c9:d0:8f:8b:a7:bc:8d:ab:83:7c:34:13:a0:5d:58:61:
4a:4c:09:7b:74:66:7f:8a:6f:7a:cf:c8:3d:75:5e:19:f7:ba:
31:25:4a:b9:e2:e9:ec:69:d7:26:83:e7:18:53:58:f4:58:30:
6a:a3:6e:83:97:ab:11:0e:45:01:9a:d2:4a:34:2f:07:0d:13:
cc:7b:ff:63:8b:ee:db:42:a6:c0:a4:50:10:56:11:39:78:87:
44:fa:74:a8:ed:5a:af:97:43:d2:8a:2c:71:4d:63:20:07:97:
b6:89:63:50:9e:1a:41:0e:45:af:ff:2a:80:8c:9a:02:9f:c2:
4d:1b:92:f0:6f:89:f9:d6:61:c8:c5:6c:78:82:1f:8d:da:b7:
a0:76:f5:bf:9b:cf:6f:cc:0e:64:6b:10:35:c8:70:68:89:05:
ff:99:7f:68:69:70:9b:c0:43:82:bc:62:02:37:38:51:a4:31:
3e:3f:c4:35:bf:c3:d9:58:a1:5a:8e:98:7c:fa:12:d9:25:90:
41:1b:e5:33:1e:09:25:d0:6b:0b:50:3d:86:9b:3d:6d:91:1a:
a1:0b:97:3d:11:b7:9f:fa:33:fe:4d:51:a9:c9:9b:2e:b9:61:
c8:3f:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:39:38 2025 by rpki-client