Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier: b6QH2GX4a2/x1zMUhj6MBYhcAM00G/M/8IA5hAuyEAA=
Subject key identifier: 4E:72:EE:7D:AB:59:2A:C6:6B:3C:96:BF:18:EA:17:72:60:B4:1F:91
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number: 016A
Signing time: Fri 31 Jan 2025 03:18:08 +0000
Manifest this update: Fri 31 Jan 2025 03:18:08 +0000
Manifest next update: Fri 07 Feb 2025 03:18:08 +0000
Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: n/CE2d8IxhVZjOk/9AQ2MFd6I7rQWlvMXwb/qAIu6AU=)
2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Validity
Not Before: Jan 31 03:18:08 2025 GMT
Not After : Feb 7 03:18:08 2025 GMT
Subject: CN=679c40f0-56c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:c1:ee:b0:0a:4d:0a:f8:cc:4a:4b:09:08:
3a:9f:5f:72:5c:ae:9d:c1:8d:4e:ec:95:e9:9a:31:
a2:77:ae:c0:43:be:4c:7f:3d:92:40:71:d5:6c:02:
55:32:03:9d:fb:1a:81:ad:93:e0:e5:00:37:5f:1e:
20:09:45:3d:6d:4e:88:e3:c2:ad:c1:34:96:5e:48:
f7:82:9b:7d:46:6f:4e:bc:f7:bf:f6:c2:2e:59:35:
cf:65:c7:1a:77:d1:eb:c5:9d:f0:1d:f2:53:eb:33:
d8:cb:53:bf:83:42:37:a3:4c:fe:4b:b5:19:45:11:
32:0f:6b:fe:a6:97:02:7e:fc:d5:14:30:61:f9:86:
b0:7f:aa:1c:5e:1f:fa:34:02:68:98:a8:ba:59:cf:
3d:bd:9b:70:9e:3d:bf:bf:32:09:42:16:03:81:f2:
aa:dd:cb:f8:8f:65:96:85:4b:24:c5:8c:d0:88:79:
16:15:35:b8:cf:14:89:ab:fd:b9:a5:3c:e9:56:fc:
76:1f:30:82:f8:7f:c4:3e:b9:bd:83:43:ac:f3:24:
0d:7f:8e:75:50:d5:7e:55:2d:0a:95:5c:7b:da:db:
b0:96:64:7b:82:01:0b:4c:49:10:00:75:62:f5:60:
c7:69:8d:c9:20:f2:45:32:e7:55:39:df:a0:2e:64:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:EE:7D:AB:59:2A:C6:6B:3C:96:BF:18:EA:17:72:60:B4:1F:91
X509v3 Authority Key Identifier:
keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:1e:ad:f1:63:83:75:59:d7:e8:18:c7:c2:18:1d:8c:25:
68:fc:71:53:40:2b:8f:18:cf:39:5b:28:c5:46:cc:8f:cc:08:
5d:f8:4e:90:5f:c0:34:8e:55:29:e4:b3:84:c3:d9:97:bf:00:
94:b3:d5:b8:9b:9a:c1:60:96:cd:28:35:a3:42:f3:93:2c:6e:
31:db:80:1f:a0:21:44:75:e1:a2:83:f7:a2:65:46:bd:c1:5f:
f3:02:0f:17:21:65:de:a4:ed:c5:89:23:c2:a0:e1:3f:a0:00:
34:a5:0a:57:f8:45:cb:07:3e:da:fa:e5:79:22:49:19:49:5d:
a1:11:92:1d:c3:7d:c6:be:2e:81:4f:4c:e1:7c:39:05:71:81:
dc:c9:52:a0:69:e4:a8:e1:30:ae:80:1c:86:e1:84:5e:59:2e:
51:98:61:c3:4d:d6:ce:b8:50:bd:95:83:d6:e8:4c:3a:90:4f:
1b:50:2c:98:9e:16:75:b1:fd:47:e0:18:9d:d5:10:82:09:4b:
31:76:e5:60:3f:a1:92:42:ef:30:6b:e7:07:0e:e0:8f:9f:9f:
71:6a:9f:b7:24:0d:2e:80:df:ee:13:96:08:a1:ab:17:fc:7a:
cd:2f:43:a0:a1:c5:43:c8:37:d4:58:e8:69:d1:a0:df:da:5f:
d3:7b:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:57 2025 by rpki-client