Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json)
Hash identifier: Pk2J6L9H+xRsMw7+nbspgIlBlDyScvJEjCOzbJZli+o=
Subject key identifier: 91:7C:EA:52:54:AB:EB:94:22:6E:02:20:9F:5E:D8:5C:69:7E:07:F3
Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
Manifest number: 43
Signing time: Fri 31 Jan 2025 06:36:22 +0000
Manifest this update: Fri 31 Jan 2025 06:36:21 +0000
Manifest next update: Fri 07 Feb 2025 06:36:21 +0000
Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 08jEYOXOBMX3AJybTpFxjDYyu0h1WTCBW8BczApux/0=)
2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Validity
Not Before: Jan 31 06:36:21 2025 GMT
Not After : Feb 7 06:36:21 2025 GMT
Subject: CN=679c6f66-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:e3:15:db:e3:d6:76:17:c6:19:80:46:e1:
f9:6e:04:43:c2:0b:21:0f:fc:de:50:6f:3f:04:bd:
25:58:92:8d:bf:81:29:09:6c:30:ca:12:b3:97:a7:
f1:cd:69:d9:bc:12:0a:db:a5:54:7f:7b:cd:cc:58:
f9:6d:98:fd:be:cf:79:09:4e:ba:e8:8b:cd:26:af:
4d:c4:eb:4a:43:75:ed:6f:c0:9e:07:9e:64:8f:e6:
be:31:05:c3:fc:d3:0b:a0:ff:d2:3a:32:f3:d5:1c:
0a:f2:18:48:23:0a:77:82:99:e6:ca:db:9b:7a:f4:
28:b1:5f:ff:93:3f:80:a1:fa:f7:ea:82:3c:a5:a9:
a0:df:d0:59:ba:09:b0:60:1d:ab:e2:02:07:62:77:
83:e1:33:c3:d4:cb:ca:2c:77:a8:e8:f2:6d:04:16:
12:50:0b:db:5b:ac:c0:af:3c:97:1d:bc:c2:bd:2a:
b6:bb:b5:fe:48:a9:55:8d:bb:42:aa:2d:2e:fe:4f:
3b:18:31:24:1d:fe:af:a4:db:b1:60:59:5c:64:a7:
37:aa:35:13:5d:e1:15:72:b1:e3:b2:d1:d5:a7:02:
12:fd:77:a4:53:08:25:a1:ae:eb:42:16:4d:29:f2:
da:d9:a2:e8:c6:eb:25:0a:99:e6:28:6a:c9:b0:98:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:EA:52:54:AB:EB:94:22:6E:02:20:9F:5E:D8:5C:69:7E:07:F3
X509v3 Authority Key Identifier:
keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:e8:f9:63:cd:72:90:bc:3b:11:38:b8:83:f4:8c:d7:84:1f:
be:98:35:44:4f:9d:1f:b1:c3:03:da:5c:0a:a2:3d:89:86:e3:
e2:2f:77:98:9a:70:de:da:e4:ea:23:19:2a:c0:7c:22:12:b5:
80:09:8a:ef:6c:10:f0:85:32:b3:26:82:c2:61:99:e8:e5:a7:
8e:25:d6:51:5c:d9:49:e5:f1:e5:02:51:1e:3a:be:20:1e:64:
9e:23:b3:66:e2:46:b5:1b:d8:ea:bf:6e:08:18:2f:30:39:47:
eb:88:1d:56:9d:60:5e:dd:16:52:8b:f1:b6:b0:3e:92:5f:94:
a5:78:03:81:fb:61:5c:79:85:3f:c8:80:4a:42:ec:7e:5d:e9:
2c:cd:1c:9b:7d:a7:33:7a:7b:72:71:01:98:0a:f9:21:e8:b8:
46:02:75:8d:15:ec:b7:24:87:73:1c:cb:1c:a0:f6:0e:7b:f3:
15:24:03:ec:57:9a:d1:90:75:74:d8:33:0e:51:0b:89:30:da:
c9:6c:ac:01:44:78:bf:19:cb:ea:eb:b3:70:03:b7:0f:59:33:
71:0a:02:0b:55:25:d1:b0:ac:50:45:a0:5c:84:99:70:5a:fa:
94:76:c1:7a:19:23:f9:69:00:a1:9e:54:44:92:af:98:b8:3b:
20:04:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:55 2025 by rpki-client