Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier: gGQUwzz/Plp2eP3okIXa6CFQguukSFal22DKqqzj1Y4=
Subject key identifier: 9B:8F:28:9F:5A:EB:8B:2C:53:A2:87:F8:D3:38:9C:38:F8:7E:89:A7
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number: C0
Signing time: Fri 31 Jan 2025 05:01:31 +0000
Manifest this update: Fri 31 Jan 2025 05:01:31 +0000
Manifest next update: Fri 07 Feb 2025 05:01:31 +0000
Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: q7KF6vJoGwSjxWhXCvEeIRYb42ISxAvr2q7SzZW5Ji8=)
2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Jan 31 05:01:31 2025 GMT
Not After : Feb 7 05:01:31 2025 GMT
Subject: CN=679c592b-2d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:4a:ff:29:0f:86:df:e3:dd:9d:81:24:af:
aa:e3:6a:d9:c0:64:ea:54:b3:5e:65:9d:40:36:ba:
14:83:0c:6d:11:27:e5:68:47:a1:e7:f9:98:f9:fa:
c4:fa:4d:e4:ef:df:39:03:1b:74:d1:db:92:1d:d9:
14:40:5c:0d:37:11:f6:34:eb:7c:39:81:ac:a2:cf:
0d:25:9e:8a:6d:12:f7:a2:ab:2e:ba:35:53:d1:7a:
53:84:59:1c:b9:ac:37:0d:2e:87:b3:0c:ce:2b:52:
db:8c:b4:c5:b9:a5:c7:b8:c8:e9:d7:66:99:02:4a:
f2:20:7b:94:ea:ec:9d:6c:eb:89:85:ad:88:37:24:
84:6e:f9:ba:9e:67:7e:ee:c1:f1:3a:34:95:8b:af:
7d:f7:e9:7f:fb:04:d0:8f:08:57:b1:f7:15:9b:b0:
d0:3d:83:de:77:d7:97:d4:5f:59:71:98:7f:fd:ff:
4e:1e:e9:bc:49:3b:40:bd:ca:7c:af:9c:ba:c5:b6:
73:e2:c0:05:4f:ff:d3:22:fe:ff:cb:cb:bf:c1:9d:
28:fa:e6:88:94:84:ab:5b:70:c2:08:c3:23:cc:3f:
96:78:ae:86:b6:8e:84:34:d5:39:9f:0c:93:d6:7b:
f9:1b:d2:5f:12:aa:fa:d4:6e:b9:a8:99:b3:ed:2a:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:28:9F:5A:EB:8B:2C:53:A2:87:F8:D3:38:9C:38:F8:7E:89:A7
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:28:f8:7c:e0:f7:7b:71:c0:06:ed:29:e8:73:5a:2d:f9:
98:6c:bd:02:35:2d:cd:f1:22:5a:20:14:06:a6:a9:79:0e:fa:
e3:3b:c0:e1:01:29:c3:74:fe:e0:b1:36:2d:a9:d0:03:1d:6c:
26:85:7f:92:42:86:21:ea:8f:6f:77:78:77:87:5e:10:04:28:
eb:29:f1:7a:bd:cb:4a:de:b2:f5:70:f1:a1:85:07:96:36:a5:
dc:e6:e9:71:c0:d6:56:24:5f:d7:3c:06:fb:3c:90:ec:1c:dc:
6d:19:7e:6a:86:5e:8c:d6:9d:97:1e:b2:e1:52:ec:e6:eb:c9:
37:0b:69:f6:e8:af:42:10:b7:57:ad:46:8c:53:d3:29:80:be:
d7:cf:8a:3d:9b:49:8b:a8:ff:a1:dd:93:64:88:6d:f2:00:c9:
1d:0e:b0:7b:a1:7d:90:a1:e0:53:5d:a9:64:c3:34:0b:b7:51:
24:2f:2a:d2:b7:fd:bd:10:ea:47:f4:a6:a3:0b:2d:6c:a7:8b:
9d:c6:7c:db:a7:4f:45:ca:c1:7d:05:64:1d:c8:f4:d1:2e:02:
48:1c:35:59:e6:c2:9f:3d:e9:3f:0e:55:77:37:d5:eb:c0:2e:
d1:40:4c:e7:aa:b6:f8:ca:a5:e0:93:86:82:3d:a5:8c:0e:86:
30:5c:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:59 2025 by rpki-client