Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
File: iR7Yuqwsc70TrcqhoWqvANIkqHc.mft (raw, json)
Hash identifier: XTqtTZP0gE5OYw2b53YpddxEEJ7MBbHoIupXTwkVGU4=
Subject key identifier: D1:6D:1E:1B:1C:27:58:66:37:61:23:41:67:9F:40:FA:D2:EF:2B:F0
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
Manifest number: 26
Signing time: Fri 31 Jan 2025 06:54:08 +0000
Manifest this update: Fri 31 Jan 2025 06:54:08 +0000
Manifest next update: Fri 07 Feb 2025 06:54:08 +0000
Files and hashes: 1: iR7Yuqwsc70TrcqhoWqvANIkqHc.crl (hash: w0/W4WamDcIa+8bWV665sJ3qEzYQZ9mh/7QQ2JHflJI=)
2: F7078BC4B73511EF8537DE81C4F9AE02.roa (hash: e90+mjyZj2zuwbEyBzLynR/xbGV19fXGWIy1lxomBoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Validity
Not Before: Jan 31 06:54:08 2025 GMT
Not After : Feb 7 06:54:08 2025 GMT
Subject: CN=679c7390-2d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:c4:ef:82:93:f7:3d:b4:66:db:0c:b8:81:
c6:32:89:0a:20:77:80:b2:fa:10:a9:7a:65:1c:a9:
01:cb:7c:e2:1c:0e:5d:70:f3:71:2b:6c:00:0d:f5:
b2:ee:ea:5e:f5:eb:00:90:6f:34:57:69:a4:05:93:
5d:cf:fb:5b:9b:9c:b1:ea:81:c2:5c:2d:1e:41:9c:
62:42:e5:3b:3d:fe:10:0c:01:8a:38:fd:6c:a4:c3:
36:f7:33:19:18:27:c5:c8:6c:a8:a6:4f:25:40:5e:
5e:5a:8e:83:13:ca:eb:ef:de:08:21:01:90:bf:1d:
66:12:58:1d:82:5f:17:ea:23:a6:29:47:44:d1:60:
e6:a1:8b:ff:4c:00:b3:21:80:a3:1b:b7:f5:89:14:
1b:21:7c:70:d4:43:c0:90:92:98:bd:5e:8f:b5:98:
fa:d3:40:3e:f4:bf:73:7a:b2:a0:fc:2b:43:37:c6:
fc:9d:49:51:b5:c5:00:9d:1b:dc:00:c8:03:cb:ff:
fd:81:b8:10:3b:40:21:21:ab:7d:b4:e9:06:50:f0:
d8:a3:84:cf:e3:3b:96:42:cd:ec:4e:72:cd:4e:f6:
8b:05:e2:6a:da:7f:b4:bf:4f:e8:f4:8e:3f:b4:1a:
26:39:50:0f:f0:fd:a1:31:00:9e:20:2a:ef:c1:97:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:1E:1B:1C:27:58:66:37:61:23:41:67:9F:40:FA:D2:EF:2B:F0
X509v3 Authority Key Identifier:
keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:c7:71:3b:1b:73:49:6c:8c:fc:91:92:89:da:d5:63:a7:
92:80:f9:f0:12:90:c6:47:50:66:bd:a7:5b:50:6a:f1:a9:f4:
69:6c:ff:00:d1:7c:09:1f:91:f1:03:04:05:ae:d7:dd:7b:ca:
c7:50:ca:a2:f6:3e:ea:c9:0c:19:22:02:df:fa:8c:51:65:5f:
d9:ff:08:b2:6c:44:25:f8:6b:ef:0f:de:60:ac:77:49:4a:fa:
6d:a0:56:3f:52:f8:22:f2:d8:fb:92:5a:52:38:81:79:74:47:
39:fc:b4:4a:44:1f:94:58:b2:5c:83:8f:33:fb:29:ef:6a:9d:
76:49:53:26:80:8f:df:ef:c9:0c:86:a4:c9:40:72:31:f2:3f:
06:50:2b:e7:58:6b:54:14:63:64:5b:83:da:f9:78:38:51:37:
77:77:75:fb:09:8a:03:38:09:e6:31:15:c1:47:ff:2a:36:0c:
ee:b6:da:b3:32:2c:7d:d2:73:96:b8:2b:ae:02:20:d1:1b:87:
89:7d:f0:f0:c0:ea:f2:26:6f:38:6b:27:e8:ba:7e:3f:85:fa:
51:85:5b:17:a9:9d:11:f9:b8:67:74:18:ca:84:dd:b2:7f:9f:
6a:12:df:81:a1:a3:9a:03:80:bc:ca:f4:9d:5e:18:ee:57:39:
87:1d:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:44 2025 by rpki-client