Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier: sdJ/M0HDUDZcWyKAkXkFdkWPa4drGzf6eSThTaYsT5E=
Subject key identifier: 62:DF:AE:16:17:17:04:3B:06:66:09:5F:58:12:D4:98:56:A3:8F:F4
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial: 0F1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number: 0F0E
Signing time: Fri 31 Jan 2025 17:35:54 +0000
Manifest this update: Fri 31 Jan 2025 17:35:54 +0000
Manifest next update: Fri 07 Feb 2025 17:35:54 +0000
Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: isfyKsTSdyXzfU7p99r5smFLf4hZ8Dvz2iD3TT18lKU=)
2: 05B3C1D2134511EAB2075B28C4F9AE02.roa (hash: 2Npny8Xc4G2jKdm76yDLadH0zjYEKsGaoRDTXa+wXvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Validity
Not Before: Jan 31 17:35:54 2025 GMT
Not After : Feb 7 17:35:54 2025 GMT
Subject: CN=679d09fa-f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:6c:94:bb:f9:e3:b1:0e:af:8d:d9:61:52:
ea:aa:1e:85:70:4d:d7:6f:f8:60:a3:41:c1:89:2e:
b8:8e:d1:f1:f2:88:f5:4e:d2:73:a5:e6:68:26:d6:
c4:cc:94:d8:f2:c8:dc:5a:f8:5d:87:2e:83:a2:a4:
7a:43:67:1e:3d:72:be:f7:08:0c:e6:f8:67:c8:33:
9a:47:fb:d8:17:3b:75:93:cb:1c:3b:66:a2:7f:43:
a0:87:94:92:a9:ee:6b:59:30:5a:b7:2e:eb:f7:22:
e3:a4:8d:6e:f0:da:cf:02:c4:48:a7:3a:d7:55:71:
e4:05:5b:8e:42:55:9e:42:5e:7e:83:b1:51:57:dd:
35:e1:78:20:6b:b1:df:0c:00:eb:92:a1:9f:6f:62:
9b:ff:15:d6:4c:70:9a:c6:8e:05:6d:22:de:4f:85:
e1:27:f5:a1:28:f2:ed:9b:56:be:ec:2c:4b:dd:0d:
13:f4:96:f7:67:82:a6:3e:a0:90:b7:6d:b5:7b:4b:
24:d0:ca:2c:f7:0c:0c:df:f0:d0:a8:57:43:f2:ec:
c5:43:13:fc:9b:24:de:3f:49:a4:4f:dd:15:5c:30:
a7:0f:55:05:5b:43:27:e3:e3:09:1a:9c:ae:df:93:
25:60:5d:13:64:8b:2d:93:74:76:d6:12:93:d7:c1:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:AE:16:17:17:04:3B:06:66:09:5F:58:12:D4:98:56:A3:8F:F4
X509v3 Authority Key Identifier:
keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a3:5b:90:c7:b4:67:3d:b9:4f:1d:39:30:e4:76:cd:c4:42:
52:54:e6:77:13:b8:1c:38:56:1d:32:ee:44:80:23:9e:b7:2e:
32:9c:c7:e4:80:16:16:a2:d9:71:6b:b6:be:49:4d:b4:af:27:
27:b9:48:25:b0:ad:26:8a:21:79:2e:3a:02:b9:10:54:c5:df:
fc:51:89:21:ee:df:06:e5:8c:93:9f:9e:ca:b6:9a:31:c8:86:
e8:dd:b5:2b:10:c3:89:6c:74:31:2f:70:b6:97:c8:99:12:00:
8d:9b:e6:f2:7e:d8:aa:9f:b9:3c:71:c5:af:1c:77:54:6d:27:
57:6a:b5:58:1f:ff:0d:7a:5c:5a:11:73:87:dc:e7:86:38:a7:
c9:32:8c:4d:eb:83:95:7f:76:0a:5b:13:74:14:22:8c:64:8a:
f8:45:23:62:c7:e4:c5:c0:9c:34:15:c6:b0:82:1c:91:83:1c:
d7:e0:c3:06:c6:ec:36:95:1d:13:b5:a3:32:c6:84:b8:58:ce:
b3:d1:c8:cf:d5:fe:b9:1d:ad:0c:c1:36:6b:ad:5e:a6:7f:e4:
44:13:6c:7e:b5:aa:9d:1e:29:9c:0c:0e:fc:51:90:e5:78:4b:
3f:58:24:ad:4a:b1:bf:31:09:92:02:3e:18:55:fc:cf:b7:5d:
6a:84:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:21 2025 by rpki-client