
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier: qyQYCw2BHgId984lr8VdipuWfaRYDRD5jtSP6hphiGo=
Subject key identifier: C8:EB:A4:7E:11:A1:86:F7:D0:F9:DA:2A:BF:2F:61:E3:45:6B:78:03
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number: 01A1
Signing time: Fri 31 Jan 2025 02:30:56 +0000
Manifest this update: Fri 31 Jan 2025 02:30:56 +0000
Manifest next update: Fri 07 Feb 2025 02:30:56 +0000
Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: y0NL0lzmdDiPu1xoHiPZn/2T/09neNNTo5lpOG8DLUQ=)
2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 2v1fNj4a/xWl8aWsyyllbFfz3S6+MQv77E5w5OZvxxo=)
3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: GrunRdOPzVgoKdklWpjxOZFACret6qIAPie8FS/bKnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Validity
Not Before: Jan 31 02:30:56 2025 GMT
Not After : Feb 7 02:30:56 2025 GMT
Subject: CN=679c35e0-7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:e1:ad:51:e4:a9:16:23:65:53:d7:a6:29:
4a:dd:19:61:f6:37:c3:2a:6d:64:86:50:21:16:6b:
91:c0:7d:c7:e1:38:2a:59:99:de:64:f1:f1:e8:6c:
9c:bd:69:dc:a0:f6:54:c3:16:bd:47:53:76:e3:2d:
34:ca:81:27:3c:13:23:10:66:5f:6b:d7:4c:57:4b:
8a:71:2b:a1:b1:18:5e:48:3b:cd:88:ec:ca:79:fb:
1f:8f:a3:e3:d8:09:01:bd:56:c5:20:dc:66:2f:b6:
6f:64:38:17:09:55:0c:8e:da:0c:1b:fb:a2:f0:c2:
f8:a9:72:ae:80:3b:98:3f:44:a6:ea:5a:78:d5:93:
62:5b:4b:47:2b:dc:92:59:1f:06:b3:31:75:4c:c3:
6a:f6:ea:53:16:c6:35:4b:84:85:18:f1:bd:4b:26:
80:83:c3:ff:75:0c:b3:34:57:6e:90:cd:e2:a2:3e:
83:77:ad:18:be:b2:a0:38:ed:ed:55:39:ee:58:42:
48:b7:92:7d:d6:30:6d:c2:fd:28:7e:75:2d:a4:64:
85:1b:6b:cd:17:59:ad:3c:26:dc:7e:6c:fb:65:58:
79:f0:89:a1:de:2f:5d:c3:31:3e:f1:7e:90:35:39:
cc:3d:ee:86:28:85:02:a3:82:5c:74:77:6a:4a:85:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:A4:7E:11:A1:86:F7:D0:F9:DA:2A:BF:2F:61:E3:45:6B:78:03
X509v3 Authority Key Identifier:
keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:ae:af:d7:7d:ac:d8:54:e4:46:84:4a:1e:ca:f3:2b:c7:
0f:ec:4c:cc:64:e1:85:cb:40:81:e0:31:f9:4a:79:c3:51:24:
7a:f1:63:88:13:f6:c9:99:56:1e:0e:c5:5f:94:10:ef:b1:b6:
a1:9a:4e:62:ca:35:a4:62:60:48:07:b9:4b:8d:ad:9a:c2:07:
1d:f1:b1:21:40:1a:5b:11:f0:aa:dd:32:37:93:d5:ae:e7:5f:
6a:8e:6e:d2:85:75:09:b1:61:03:ba:a4:b8:c2:7b:2b:98:5b:
12:30:ed:a0:c7:b8:8f:0d:74:6f:4a:75:6c:b6:0a:0d:b3:6d:
8e:e1:64:0b:8a:4e:a6:64:87:fd:e7:88:09:9f:88:70:81:c9:
26:15:39:3d:55:18:8a:14:17:4b:9d:21:89:bf:21:56:9c:cd:
fe:21:e0:7e:bd:dd:66:1f:1c:9c:51:a0:97:c7:7a:6f:4c:93:
5b:71:46:18:2f:62:b8:d7:5b:cf:b7:9d:80:38:3a:7e:a0:b0:
1a:3a:3e:90:fa:49:05:d3:90:84:3b:05:c1:35:31:c0:95:b0:
58:03:93:50:e3:88:5e:b1:ef:ee:b1:c1:72:01:20:33:1b:93:
23:18:1d:ab:37:79:6c:2f:89:b6:89:3f:42:06:cc:66:09:6e:
32:1b:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:46 2025 by rpki-client