Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA9/423E1AD45A1811EFBD477338C4F9AE02/71OR8qIt1l9IQxoyJt3MZbdllqk.mft
File: 71OR8qIt1l9IQxoyJt3MZbdllqk.mft (raw, json)
Hash identifier: 2VUlVfhzYYn7w7sBA9Zr3camUG/VbZrdKAxNRdUY0OI=
Subject key identifier: 7C:8D:F8:5A:2F:41:62:1F:8F:10:49:B2:65:DE:D2:AC:BD:EA:5A:30
Authority key identifier: EF:53:91:F2:A2:2D:D6:5F:48:43:1A:32:26:DD:CC:65:B7:65:96:A9
Certificate issuer: /CN=A9157DA9/serialNumber=EF5391F2A22DD65F48431A3226DDCC65B76596A9
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71OR8qIt1l9IQxoyJt3MZbdllqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA9/423E1AD45A1811EFBD477338C4F9AE02/71OR8qIt1l9IQxoyJt3MZbdllqk.mft
Manifest number: 5B
Signing time: Fri 31 Jan 2025 06:08:35 +0000
Manifest this update: Fri 31 Jan 2025 06:08:34 +0000
Manifest next update: Fri 07 Feb 2025 06:08:34 +0000
Files and hashes: 1: 71OR8qIt1l9IQxoyJt3MZbdllqk.crl (hash: tZpxlpX8t+iPbOAhACURBgC9fXn2mZu6ylhIREBBBFM=)
2: 897F96FC5A1811EFAF24E138C4F9AE02.roa (hash: V/66FKVQueBWCxe2q60voG68SskFvIkojTU44XWkp4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DA9/serialNumber=EF5391F2A22DD65F48431A3226DDCC65B76596A9
Validity
Not Before: Jan 31 06:08:34 2025 GMT
Not After : Feb 7 06:08:34 2025 GMT
Subject: CN=679c68e3-515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:c8:80:7b:10:17:b9:9c:c5:bf:95:12:6e:
25:37:8c:67:77:e0:04:99:70:58:b9:16:d0:0e:cb:
13:d0:bd:1d:41:dc:d8:60:66:99:df:ee:fa:d2:9c:
10:3f:de:2e:82:f2:15:02:f7:4b:82:ba:d4:c2:3f:
87:7a:15:15:0f:33:a4:48:06:ba:54:13:5d:41:7c:
b4:ea:74:9b:54:d7:09:d0:8a:5b:95:92:9b:1a:7b:
9f:44:9c:81:ff:5d:18:f5:49:ae:29:e3:e0:52:03:
cb:61:b7:11:cd:3b:47:30:7d:f6:87:f6:9d:55:4f:
f1:ab:cf:42:46:e5:27:7b:0e:80:e9:2a:65:fb:a3:
f0:51:90:a4:34:e4:b5:b9:76:56:2c:99:9f:d7:54:
d7:4d:c2:88:46:15:90:d5:8f:01:db:7c:18:48:05:
78:de:eb:bd:1d:0d:d8:59:83:72:03:59:03:31:de:
dc:56:24:5e:52:16:88:c8:6f:37:be:b1:e7:48:98:
94:da:80:c4:9f:a4:99:7f:bc:7e:4b:74:c3:c7:c1:
6c:94:95:2e:6f:40:fb:53:e1:68:7e:cc:34:e9:24:
db:b7:9d:af:c5:f1:ad:61:33:d9:93:72:96:83:61:
bd:92:05:15:80:7e:c5:38:0c:5b:91:24:3d:59:e0:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:F8:5A:2F:41:62:1F:8F:10:49:B2:65:DE:D2:AC:BD:EA:5A:30
X509v3 Authority Key Identifier:
keyid:EF:53:91:F2:A2:2D:D6:5F:48:43:1A:32:26:DD:CC:65:B7:65:96:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DA9/423E1AD45A1811EFBD477338C4F9AE02/71OR8qIt1l9IQxoyJt3MZbdllqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71OR8qIt1l9IQxoyJt3MZbdllqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA9/423E1AD45A1811EFBD477338C4F9AE02/71OR8qIt1l9IQxoyJt3MZbdllqk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6e:95:b6:02:e2:b6:66:dc:93:d3:50:d8:c0:3d:fe:42:3e:
de:20:2e:a9:af:b8:80:df:a2:98:0c:88:a3:95:c5:44:78:6e:
80:a8:ac:1d:3d:07:b1:ed:8b:4f:26:ca:ac:e6:9c:33:72:85:
6a:30:57:71:37:00:25:1a:14:d8:4e:62:99:44:c0:b4:79:90:
c6:02:c6:9b:55:ca:55:84:25:eb:65:fc:e8:9a:75:8f:d4:6b:
d5:36:17:e8:cd:81:75:ca:e7:1f:89:a4:ea:a7:ac:c9:78:50:
5b:3e:0d:e3:b0:21:7a:10:cc:0f:af:a2:fa:fb:7a:26:c2:84:
d2:69:28:cd:1c:ed:2f:6d:88:4c:75:ac:c7:1e:78:db:bf:61:
6f:66:b5:8f:77:1b:be:d0:9e:1e:28:a7:fe:5e:9c:8e:8d:9b:
97:8c:1d:51:fc:41:e7:8c:6f:96:a7:7a:a5:af:a1:2c:dd:cd:
94:4c:3a:99:17:9b:33:e3:bb:75:16:a5:73:40:cb:bf:96:b7:
8e:73:53:89:21:96:23:a0:fc:bb:ca:28:ce:f7:52:72:6a:56:
01:0b:41:64:bf:e9:83:b5:35:48:56:09:70:98:59:e2:52:92:
2e:39:8b:bb:64:7d:5e:03:65:7e:06:4e:74:8e:c7:68:4c:d9:
3f:b2:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:20:56 2025 by rpki-client