Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
File: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json)
Hash identifier: XT+mHDUk7Uw6MuKERlNL0UJCQpQEBf1CPu1nGVe0Xeg=
Subject key identifier: 1C:B9:1A:68:51:C1:5E:37:86:51:D9:7D:04:7A:E8:AC:39:69:E9:CC
Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
Certificate issuer: /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
Manifest number: 36
Signing time: Fri 31 Jan 2025 06:38:38 +0000
Manifest this update: Fri 31 Jan 2025 06:38:38 +0000
Manifest next update: Fri 07 Feb 2025 06:38:38 +0000
Files and hashes: 1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: Na8nkawt3/fDJXcAIYDOkAyKn2T+BLZdQ7E/RqghZhY=)
2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: 559cCrhl2gmU3vGuvWQWRr1GfQBHKWRfQIAknTBhv8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Validity
Not Before: Jan 31 06:38:38 2025 GMT
Not After : Feb 7 06:38:38 2025 GMT
Subject: CN=679c6fee-0f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:bd:d3:ad:85:5d:89:e2:58:40:d8:2b:59:
6d:03:d4:ea:cf:b9:d0:16:aa:89:da:43:8f:62:d7:
31:4a:6d:2d:51:09:33:9c:da:e4:1f:36:c7:79:00:
bc:5b:30:83:9c:d0:68:1a:71:45:d1:80:6a:67:4a:
a7:46:e6:ec:39:e1:8f:34:ec:7d:e2:4b:dc:12:2f:
15:cd:3c:7a:39:83:10:cf:fb:ef:b5:48:15:a7:b4:
42:4a:3f:6e:d0:83:8f:99:c8:aa:e5:ce:96:2a:d6:
a3:49:9d:e5:2d:5f:f6:55:73:17:21:14:51:92:fd:
70:ea:73:31:6a:00:c3:ec:70:9f:95:f5:1f:f1:b0:
cf:0c:bd:55:df:35:ca:fa:6a:3f:bb:8d:a8:bd:51:
1a:63:aa:43:93:53:3c:af:8b:79:46:17:d6:e0:ec:
55:b9:e0:6c:f3:94:0f:06:8e:9e:74:c0:f6:6f:f0:
3b:2c:90:80:d8:23:4a:b0:51:ad:a5:fc:be:77:98:
74:c6:10:42:78:12:a3:68:23:81:41:cb:84:96:e6:
dc:3a:90:7c:cb:e4:3d:dd:12:1e:b1:71:4a:37:df:
d8:5f:0d:8a:9b:4e:96:d4:04:69:1d:f2:e1:68:ce:
8c:58:ac:bb:ad:5f:c5:38:45:e9:b1:6a:62:01:64:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:1A:68:51:C1:5E:37:86:51:D9:7D:04:7A:E8:AC:39:69:E9:CC
X509v3 Authority Key Identifier:
keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:76:69:e3:86:da:e8:0a:35:56:b6:55:d2:21:6a:29:43:a9:
50:a3:d3:94:83:a1:71:42:17:42:bd:53:b8:77:03:93:c1:74:
8c:19:b9:b4:25:d5:2e:5e:c4:3e:48:1c:6d:11:a8:89:96:32:
da:25:8a:92:28:7f:9d:a3:12:ff:57:80:4d:29:6d:d2:56:81:
da:36:bf:06:11:da:8a:91:1d:cc:4b:46:f8:d3:34:df:8e:f9:
83:5a:e9:2c:24:b6:a5:24:af:c2:fc:c8:e9:b9:95:4f:68:52:
2e:52:e6:d5:7a:09:5e:2b:c7:65:44:02:0b:25:0c:48:8e:43:
31:71:fc:a2:78:d0:1f:ad:74:90:52:ca:16:19:da:de:30:2f:
e5:b6:58:4f:6f:32:1b:0f:97:57:ee:6c:0f:5d:46:41:d7:44:
a6:34:5c:78:42:25:2b:0c:3c:4f:d0:8f:49:9f:fb:0d:22:46:
47:f6:38:bc:4c:22:cf:9f:44:f8:c1:24:ac:8b:e2:dc:13:a1:
d5:c5:6f:a5:10:ed:e5:39:f5:86:b4:e4:7f:81:0d:f6:ad:8e:
42:8b:2d:61:8c:3d:94:45:64:4b:ca:48:71:8e:17:83:dc:6b:
a5:6e:68:e2:51:21:81:ad:b3:6e:a6:72:54:54:1a:82:b8:d4:
72:54:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:40 2025 by rpki-client