Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier: efLRAaaYeZH4ZeBfDCqdJIp1mi/AFxaw6R+OxAFHltg=
Subject key identifier: 9D:20:18:5B:0B:BF:40:FF:3F:4D:47:B2:CC:66:48:A6:31:75:32:F6
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 06:57:11 +0000
Manifest this update: Fri 31 Jan 2025 06:57:11 +0000
Manifest next update: Fri 07 Feb 2025 06:57:11 +0000
Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: exEJL+2oQmOSd5wPDqAy5zjiVoLneilmyhmTXB5P3zs=)
2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: 7UFK5IvMzRZ9oqAbFOWW72hTsQEiovxWyIoXLKQd8RE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: Jan 31 06:57:11 2025 GMT
Not After : Feb 7 06:57:11 2025 GMT
Subject: CN=679c7447-4ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:bb:73:e0:cc:cc:3f:da:83:72:13:13:34:
ea:4c:f5:a5:ee:29:e5:64:5e:55:ca:55:c4:74:b2:
4b:60:8e:ce:31:ed:71:9c:ad:01:3f:af:47:48:bd:
ad:39:1e:ef:3d:54:22:35:4f:c6:e4:0e:c4:8f:da:
88:90:74:e7:72:3c:7e:46:1a:47:33:f1:69:a9:b8:
86:3c:e5:67:62:f7:04:57:99:4f:4e:07:7a:95:40:
51:54:2f:cf:46:65:82:b0:05:b8:c4:40:3c:33:38:
f3:d9:9e:b3:fa:86:66:3b:21:a2:95:8f:4b:11:b3:
e7:e6:e1:af:ce:e8:b5:57:9c:6f:39:97:f8:28:dd:
af:24:70:d5:48:ad:b7:36:1f:8f:a4:cb:f4:33:6b:
a8:69:30:96:cc:00:1b:b2:83:ae:f0:3f:b9:2d:d3:
86:31:88:e8:7e:da:89:1f:18:0e:26:b6:8f:35:b4:
cc:4a:6e:3f:74:3d:d8:6a:41:f0:fe:28:64:7e:d9:
58:fa:0b:c0:04:a5:44:8a:84:c8:85:e8:c2:34:6a:
1d:8a:9a:d6:c4:d7:24:fe:cc:6a:37:44:bf:26:1d:
cf:c3:8b:db:e0:ac:26:dc:a1:5a:53:ca:b8:d8:5f:
76:fb:1d:12:b8:90:25:be:57:a0:c1:70:1d:a7:3c:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:18:5B:0B:BF:40:FF:3F:4D:47:B2:CC:66:48:A6:31:75:32:F6
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:34:d1:8a:c6:4d:cc:bc:e0:d0:08:19:13:f6:28:b0:c9:b5:
cb:ae:6b:18:06:d4:c2:07:02:c7:24:a3:95:60:26:91:1e:c2:
eb:c6:01:2a:ad:23:55:9e:1a:15:d2:8f:53:17:83:16:ab:d1:
b8:e5:ab:92:53:90:42:49:56:74:bd:21:ae:14:b4:42:af:c8:
9d:72:d8:29:6c:6f:d3:4b:31:71:e5:94:57:69:63:14:1e:fe:
85:1d:10:85:5b:f9:dd:82:fa:f6:ed:a3:fb:9b:0b:b5:7a:11:
88:b2:16:e9:d0:b8:be:ef:86:36:a9:e5:c3:5e:9a:12:75:73:
f8:93:22:7e:a2:99:d8:63:71:a5:25:3d:e7:96:c3:39:e5:0e:
d1:e8:f1:de:e3:75:e9:81:8e:27:b8:8d:57:eb:43:71:c3:14:
a8:a3:a7:d7:81:78:67:f2:28:ac:ff:4f:57:07:0e:0f:15:a1:
5d:d4:94:72:51:d3:07:d4:4d:cb:64:28:e1:36:45:fb:c0:ad:
10:a7:67:f1:be:05:30:11:9b:8e:0c:cc:d8:51:21:b4:40:85:
ea:36:56:9e:fb:25:2a:02:64:f1:ac:db:75:bd:d2:e6:03:fe:
3a:17:5c:3f:7d:59:a1:fc:94:a7:83:b7:7a:1f:25:d5:6e:18:
75:08:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:03 2025 by rpki-client