Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier: Sdt5Tf1G0npIV8Gw9Ml2xeIaGp6BXRLVVy29/gujNk8=
Subject key identifier: DA:6F:37:51:CC:C8:14:5D:A4:72:19:B2:A6:E1:54:78:73:1E:7B:5B
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0A21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number: 0A0E
Signing time: Thu 30 Jan 2025 19:57:06 +0000
Manifest this update: Thu 30 Jan 2025 19:57:05 +0000
Manifest next update: Thu 06 Feb 2025 19:57:05 +0000
Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: ao6ogCDTD9yp29bx2CvUscaMBlthywNJv6tvx/GDx3k=)
2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 2PTTTwQLgh4fXXfTwObsWVUAWIktXTAcMw+Xyyr0VJ8=)
3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: ATnpQbMAdtf7EHZF16qCy3h60N8FuS/9+ZIqFWtImrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Jan 30 19:57:05 2025 GMT
Not After : Feb 6 19:57:05 2025 GMT
Subject: CN=679bd992-a787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a4:f1:91:b8:52:0a:3e:60:02:4e:1f:46:d5:
d4:5c:d9:68:a0:22:d0:60:23:4f:5e:89:f0:c3:2e:
b3:45:51:41:a6:ab:88:75:f9:07:4d:ab:d1:82:9a:
87:8d:4b:a0:d4:ad:cd:42:e6:d7:b8:7e:85:90:9e:
e9:c5:96:11:ec:93:2b:04:23:2d:b6:55:a2:fd:26:
91:ee:7f:bc:28:ea:3a:58:de:4b:28:80:09:b7:e1:
39:89:31:b5:af:72:c4:c5:cc:48:7e:f9:0e:2a:53:
0b:c8:6b:3a:55:be:f5:6a:ce:bc:fd:08:d3:92:61:
23:9f:91:e6:db:e6:57:62:02:b4:94:79:d2:60:e4:
67:6f:f8:94:c2:d7:03:ef:5e:f2:e3:24:e0:ea:31:
c0:9b:45:98:7f:a1:9a:f2:b8:c5:9e:64:39:2d:1d:
ed:b0:59:de:a7:b0:b3:88:4d:b1:00:31:0b:7c:b8:
73:53:6b:3a:76:30:3a:2c:8a:fe:79:b0:29:25:ec:
69:1d:fc:4b:65:b2:d0:6b:da:5a:20:dc:cf:95:8b:
57:69:08:3e:05:55:d3:c3:00:b5:ad:9f:04:83:09:
d3:5c:25:5e:67:11:9a:75:58:97:37:9d:0b:85:7d:
d9:70:a1:4a:53:9b:d7:d5:b6:fa:4f:7c:17:e5:9d:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:37:51:CC:C8:14:5D:A4:72:19:B2:A6:E1:54:78:73:1E:7B:5B
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:da:a1:c1:b4:f7:4a:36:96:85:55:f0:a0:4e:28:51:5d:
d9:61:b1:2f:bf:af:97:e8:0c:3e:47:81:db:27:4f:c0:44:fd:
8b:55:96:06:01:2f:63:d6:5a:05:27:de:b5:81:a1:7a:7f:b8:
b5:68:92:56:5d:fe:25:ae:8f:24:5b:61:b7:fa:ed:4a:0d:65:
75:04:13:fd:2d:55:bf:4a:7c:e5:33:cd:5b:e3:65:1b:6f:c3:
6b:99:6f:23:fa:2d:85:f1:bb:44:07:2e:c2:a9:07:96:1d:16:
d6:40:cf:87:01:53:28:9a:df:a8:99:80:3d:fa:61:a5:16:30:
62:1a:ff:82:bb:90:7a:d0:cd:ac:a5:e8:7b:61:41:45:32:01:
28:da:72:9e:22:f8:a3:a4:83:51:b0:96:a4:58:cf:a1:54:a8:
c6:ed:5c:ab:1e:cf:13:40:43:aa:1c:72:67:76:d6:d4:3b:6c:
4c:f1:02:20:52:8b:a6:31:08:49:b6:49:57:21:70:48:05:2e:
7a:e4:e9:a6:58:21:14:bc:d3:a0:d2:d5:38:92:03:25:b3:32:
0c:01:8c:e3:1e:2b:3c:93:7a:27:ab:57:9a:25:49:0b:bd:1c:
12:75:c9:49:d6:a8:2f:51:69:b1:84:6e:9e:f9:c5:0d:e8:8c:
a6:9f:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:00 2025 by rpki-client