Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json)
Hash identifier: gYx5h5iP9Jhy+e1v8JaPAYn96A2GkVGws7In/N89/2w=
Subject key identifier: EB:FB:23:3C:AA:60:14:96:48:96:05:14:29:10:44:FA:67:32:7A:D2
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 04:07:27 +0000
Manifest this update: Fri 31 Jan 2025 04:07:27 +0000
Manifest next update: Fri 07 Feb 2025 04:07:27 +0000
Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: pF0ZuLD5am+efwtBxxTlU1NVQv8f2Lfbo9cmKzSP1Fg=)
2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: cgKCscFwaw/2U5+hTiR/tOv2oFJWqQfbOoEz10tjRiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Validity
Not Before: Jan 31 04:07:27 2025 GMT
Not After : Feb 7 04:07:27 2025 GMT
Subject: CN=679c4c7f-37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:aa:83:38:40:39:25:fd:b6:3c:e7:1f:d7:
c3:93:4d:e6:44:93:a2:8b:0e:d6:32:be:35:e9:10:
d9:58:27:2c:34:77:13:c3:69:53:30:86:bd:0c:ab:
0f:ab:2e:30:48:c5:d8:34:b2:e2:ef:5b:38:8e:ad:
2c:b0:c7:63:ee:88:13:92:16:c2:db:9a:a0:ee:db:
b6:b8:53:41:84:11:88:50:77:ed:78:c5:47:9c:b6:
bd:57:26:54:23:52:ce:7d:a7:3b:86:06:95:4a:42:
eb:28:23:92:7d:95:6e:60:11:c2:39:a8:11:56:40:
3a:f0:65:58:d1:36:2c:da:e8:96:42:8e:c0:fe:ae:
8b:13:d2:53:4d:e6:35:7d:45:7a:d3:af:e3:a6:8a:
d3:d9:12:83:c1:2e:cf:c9:67:82:91:ee:2e:f9:d4:
56:2c:4b:84:fe:05:39:63:82:50:25:6a:25:62:42:
5b:41:9f:0d:25:00:23:9a:43:0c:8c:06:0e:22:c2:
18:7e:07:96:e6:e8:7e:cd:e2:e5:93:c8:0c:fc:b3:
b7:4d:1f:e3:42:ae:78:ee:2f:2c:c8:89:19:0c:e0:
41:cf:7b:bb:66:4e:f7:ae:28:ec:f7:2c:f5:a9:fc:
c0:75:5c:ce:f9:2e:36:6b:2a:c7:f3:1f:db:61:9c:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:23:3C:AA:60:14:96:48:96:05:14:29:10:44:FA:67:32:7A:D2
X509v3 Authority Key Identifier:
keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:5f:bc:7b:11:93:f7:cb:5c:9d:86:61:dc:2e:17:ab:9d:
0b:e7:29:9d:83:ab:e1:b8:f3:5a:71:a9:e0:61:82:b6:eb:d1:
57:3d:85:4c:a7:1c:b0:93:17:d1:4c:48:1f:8a:44:01:2c:2f:
cb:1a:4e:86:12:ca:39:26:dd:12:7c:7d:86:99:1e:3e:ea:9c:
db:f1:15:b4:0b:66:6c:b4:1c:5c:4b:d8:70:f6:da:e6:dc:d1:
6d:0a:51:89:cd:5f:97:0c:a6:1f:ee:18:8a:21:b2:0a:9a:96:
41:b0:e6:90:c7:5e:59:45:0c:75:8d:8a:bc:86:52:bd:e8:33:
99:75:7c:47:c3:d0:fb:7e:e7:e3:2a:d8:bc:6c:09:a4:d1:e4:
b0:74:c9:f1:ec:c4:2c:e1:b4:99:3b:93:b8:84:c7:1a:89:60:
8b:a3:8c:90:b9:5a:a6:d1:36:40:23:2d:11:ad:51:24:6b:41:
2a:24:55:12:91:21:2c:e5:bc:1a:7a:13:6b:21:3a:46:43:c8:
c6:7d:ec:d4:f5:2b:79:df:56:64:6f:75:33:dc:e1:48:ae:4c:
81:9b:99:43:27:43:2a:b4:49:33:1e:17:3d:9a:93:61:51:0e:
15:49:f7:99:29:f5:32:d0:e4:2c:8e:1a:5a:7a:b3:52:07:8f:
d2:01:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:00:36 2025 by rpki-client