Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: FEYISADOFbE4myPVUPP9fuVKysjVV+zhUhopk43jz5A=
Subject key identifier: DC:24:C1:71:85:18:B0:9B:3F:3C:2E:B0:A6:36:8B:BF:45:D7:4A:D9
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 0222
Signing time: Fri 31 Jan 2025 02:05:57 +0000
Manifest this update: Fri 31 Jan 2025 02:05:57 +0000
Manifest next update: Fri 07 Feb 2025 02:05:57 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: w4pbIK78z1pUKgj66tGTmIO+DvhVawjiHkeV1mV8F8Q=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kng6fCGLTbPsbCoI7dxHc95AMq1MgoPXW3QCzJfYN0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Jan 31 02:05:57 2025 GMT
Not After : Feb 7 02:05:57 2025 GMT
Subject: CN=679c3005-a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:e6:fe:e6:b1:10:ad:22:96:a9:55:b9:c0:
e8:db:da:cd:fd:53:55:aa:d1:c2:bb:1e:8e:bd:b1:
7b:b5:a1:a4:0e:a7:4a:5f:79:87:b2:9b:93:e8:65:
4c:b8:93:82:35:29:df:80:cf:da:d9:e8:eb:74:7a:
55:52:b1:f7:81:9e:f6:29:5a:f2:a6:8c:7c:57:0b:
66:71:63:04:c0:f7:1e:17:48:59:94:7b:98:66:0b:
06:1e:08:f8:bb:e2:f0:42:c5:ec:df:e5:95:26:3c:
4f:f3:68:f3:32:9a:79:e8:7d:4e:cb:e9:49:7a:c5:
d5:6b:10:cb:a4:1e:ec:f5:05:a7:73:df:e8:3c:10:
1e:a5:3c:b3:8e:34:ad:ce:6b:99:1e:b0:b4:5b:c7:
0a:59:2f:d6:f8:88:f6:f3:d0:cc:2b:eb:54:00:11:
cc:20:9b:00:a0:6c:16:4f:34:a3:b4:8d:e6:fa:77:
8e:d5:63:c2:82:06:22:14:d6:66:52:ce:e7:32:c5:
89:fc:46:2c:d5:3e:ac:3f:8b:0f:fc:59:87:87:1e:
34:b9:19:27:e5:86:40:6f:23:4b:b8:78:9e:65:98:
af:d6:76:ed:36:d8:58:1e:8e:99:3d:6f:a1:12:d1:
70:50:23:08:0d:96:da:90:eb:dc:ee:cc:03:81:53:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:C1:71:85:18:B0:9B:3F:3C:2E:B0:A6:36:8B:BF:45:D7:4A:D9
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:ce:b3:80:83:03:08:a1:87:3e:24:54:b7:9e:0e:0c:ea:
05:1f:8e:3c:35:f6:ce:85:42:a8:2d:7d:26:66:69:5d:85:01:
06:8f:01:d9:59:d5:69:ea:65:8f:38:bc:c3:d3:de:42:92:a8:
14:8b:a1:05:27:ab:13:b2:0b:76:07:19:cb:63:5f:61:13:97:
37:5d:6b:d9:93:db:4b:0c:c8:49:6d:4e:ca:8c:6e:12:4c:96:
e6:f0:bb:09:73:40:ef:32:9b:c1:c0:e9:ed:d6:a3:fd:7b:5c:
b0:e3:4e:b0:65:2b:83:41:31:d2:1b:12:e4:e7:bb:6c:62:77:
9e:f6:b2:3c:f4:e3:d1:19:3d:a0:70:59:bf:f2:cb:74:17:f3:
0b:91:1f:d1:09:9a:fe:bf:ca:6a:58:9c:62:fd:20:c7:39:4b:
22:d5:67:30:4e:8d:5c:29:1b:6a:8c:55:9c:f4:ba:27:99:cb:
62:ff:5a:67:41:d9:dc:8b:ed:f8:8c:d5:23:98:52:32:ca:c8:
29:97:26:c7:20:d9:00:a9:c7:d8:1f:64:85:2e:b3:cb:03:4c:
29:87:e7:38:e3:47:22:ef:49:37:05:e3:57:ea:58:85:d0:c7:
09:75:ec:9e:27:9c:90:97:98:4b:7b:33:42:8c:52:c8:54:04:
c2:fd:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:01 2025 by rpki-client