Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json)
Hash identifier: Ue0uaTN+7VG1bVFYeA9K9ddL82PngmTvHb88u+rwxK8=
Subject key identifier: 10:F5:55:84:73:3C:17:37:0D:9E:A1:97:D2:BC:41:03:5D:B4:EE:FB
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 07:00:44 +0000
Manifest this update: Fri 31 Jan 2025 07:00:43 +0000
Manifest next update: Fri 07 Feb 2025 07:00:43 +0000
Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: 42R1E+OYcTsuj/EU8cRXZ1FKZKXctYXFbGYEZZ+IsSg=)
2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: G0RH92bUHo0viHdC4w7f3T+l7e4HdL4P2CYtBV/Kdpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Validity
Not Before: Jan 31 07:00:43 2025 GMT
Not After : Feb 7 07:00:43 2025 GMT
Subject: CN=679c751c-9705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:e3:29:39:5f:22:3f:d9:bc:a0:82:10:46:
e4:8d:c7:f7:96:d7:7e:32:b7:e6:28:a6:21:7b:bd:
1b:99:44:e6:da:32:03:fc:b7:b3:99:00:ba:1c:b6:
75:47:ae:bd:9d:19:ce:ab:7e:92:65:94:a3:da:b0:
c9:47:b0:f6:5e:3e:02:2f:5c:9a:78:ff:26:37:32:
d8:6f:06:64:1f:3b:7d:63:3d:34:20:db:08:7b:b8:
a9:a5:c8:80:79:6e:de:db:5a:f7:ae:bb:87:b8:b0:
51:6f:c2:50:d8:98:a9:51:a8:5e:9b:23:23:53:74:
26:6e:93:f4:69:29:61:ec:a9:bb:42:17:9f:1b:61:
ff:fa:c6:a0:e7:16:34:75:00:d1:4f:a5:12:3d:0c:
3a:7b:21:8a:76:8f:9c:72:a6:2d:06:2e:25:9c:22:
0a:8c:54:6a:c3:ea:52:bc:c7:72:20:16:eb:a9:58:
df:38:a0:56:52:e9:93:f7:95:d1:6e:1d:2c:2a:0a:
39:e9:6d:ff:43:e4:75:27:80:dc:98:77:f8:4c:90:
77:61:3d:96:01:8a:fd:58:cd:40:c2:41:56:92:80:
1f:3d:11:1a:74:22:1f:d5:57:41:f5:86:d7:d5:83:
c8:80:3e:47:55:da:d8:c2:da:e4:a8:0a:3a:92:ca:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:55:84:73:3C:17:37:0D:9E:A1:97:D2:BC:41:03:5D:B4:EE:FB
X509v3 Authority Key Identifier:
keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:30:f6:6a:cb:29:6a:b8:dd:75:2c:4b:f6:66:63:17:3b:
6b:fd:f1:cc:d6:42:9c:dc:b5:23:b5:eb:d7:d2:9f:98:66:cd:
a5:8b:ba:6a:97:fe:64:85:5a:3e:1a:e2:89:75:6b:1a:83:fb:
44:d2:e9:6d:51:5b:f8:a1:b7:98:d7:2e:1d:08:dc:e8:5d:27:
52:ea:f4:3d:5f:c4:c2:01:3a:98:b2:0b:a6:5b:68:3f:38:2c:
08:15:fe:73:4e:aa:91:0b:1a:5d:a5:61:05:1f:8b:a7:bc:e0:
58:73:67:d8:36:e7:e3:8d:1b:ee:70:3e:11:12:ac:f1:b0:48:
44:69:c0:8c:b6:b0:4c:d9:7f:ab:89:7f:e2:f6:5c:b7:2b:9d:
cf:b7:fd:99:bb:80:08:90:c4:71:b4:45:d4:aa:97:02:f0:e6:
77:5f:e4:ec:60:aa:eb:f4:be:25:1c:39:04:4c:00:78:0c:c5:
63:f7:19:be:2e:59:9e:63:57:74:ea:6c:7b:8e:c0:a4:62:24:
28:27:54:b6:d3:52:5d:41:a0:4e:80:06:2f:51:97:10:dc:42:
ac:cb:01:fa:3b:af:36:91:52:8f:a0:a4:2f:02:a9:a0:fb:80:
21:20:96:a5:19:3d:9b:1f:94:c8:4c:51:53:8f:5e:7f:a2:0e:
5b:a5:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:18 2025 by rpki-client