Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json)
Hash identifier: iklnRco7QazIKAAcWwSqhuDPNeTtCixjWRXWp23pRYY=
Subject key identifier: DA:E5:EF:54:D0:2B:D4:6A:07:39:00:AD:19:22:53:B4:87:86:50:2C
Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Certificate serial: 06F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
Manifest number: 06E7
Signing time: Thu 30 Jan 2025 22:13:59 +0000
Manifest this update: Thu 30 Jan 2025 22:13:58 +0000
Manifest next update: Thu 06 Feb 2025 22:13:58 +0000
Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: QxB/ifotedyLrsw6VGDwiEJhYfZiXYGyE0QipdSvEno=)
2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Validity
Not Before: Jan 30 22:13:58 2025 GMT
Not After : Feb 6 22:13:58 2025 GMT
Subject: CN=679bf9a7-f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:16:42:ae:ed:85:e3:2e:89:80:d8:7f:a5:
3a:57:7c:db:15:20:0d:74:95:90:bb:f6:1e:52:6b:
23:e4:35:32:08:34:39:2e:20:ca:13:d7:42:90:97:
1d:89:b2:18:66:47:c4:01:0b:f9:7f:de:6c:45:67:
f8:32:7f:b4:bb:9c:b4:a2:06:44:26:b7:68:98:82:
47:76:45:8a:70:9b:88:dc:3a:34:45:c8:98:9a:4c:
75:32:66:1f:ea:b9:38:d5:8a:e2:87:4d:fe:23:55:
b3:e8:fc:35:8a:ca:4f:7d:97:ca:ff:21:ae:e1:55:
a8:2c:2c:ff:f3:6e:a7:c5:e7:30:b2:58:14:28:15:
74:80:7e:3b:8d:b8:c7:e7:97:32:61:15:25:c7:c2:
98:a4:0e:2c:fc:9c:0f:36:87:ac:d8:22:9b:3c:66:
70:60:50:f5:77:20:45:a2:00:97:53:9f:2b:74:f4:
cc:8b:67:c8:2b:3a:88:5a:c0:50:96:cc:38:d2:52:
e4:00:b4:fd:01:93:94:1d:c3:64:d5:d3:8b:25:9b:
b7:d6:c3:78:d9:70:19:a2:3d:60:7c:b0:31:66:f4:
83:a9:64:b6:72:4e:f7:f4:92:e4:8c:54:9e:5c:08:
9c:59:92:94:f4:7c:66:06:15:25:de:f5:12:2a:d4:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:EF:54:D0:2B:D4:6A:07:39:00:AD:19:22:53:B4:87:86:50:2C
X509v3 Authority Key Identifier:
keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2c:28:29:83:91:ae:c7:e7:17:8d:dd:fc:f3:25:7a:3f:66:
6e:f1:47:f5:bf:fc:ec:b5:2e:0c:ac:97:59:08:e0:f4:48:50:
8b:dc:55:e3:fd:a4:2b:5f:0e:54:da:7d:f7:31:c0:d3:db:64:
b0:38:9c:4b:10:86:c2:30:39:ed:3c:be:5b:8e:15:25:85:43:
da:ee:bc:87:1c:ff:d7:32:13:92:f2:f7:07:b8:30:97:19:30:
2a:f2:ea:cb:93:13:cd:c2:a1:4b:de:ca:e1:50:5f:37:42:25:
69:32:6c:44:18:79:bd:d9:6b:8a:78:2f:e4:74:ad:d0:9a:79:
cd:03:d9:b2:ee:65:30:89:cf:37:84:de:00:89:f3:53:43:b0:
c1:92:1e:1a:87:8b:66:67:3a:a8:47:e0:e7:92:4e:cd:18:67:
e5:82:cc:4e:f8:36:d4:96:c8:36:e3:d4:b9:b5:6f:f9:60:54:
cf:fd:ad:60:b4:a9:35:2d:1c:e9:16:81:21:a1:71:62:dc:48:
57:85:be:38:5e:1b:ea:3c:b1:8a:a8:45:bd:d9:0a:e3:d0:d5:
2a:23:de:e1:1f:54:2e:70:ea:ec:2e:49:b9:a2:8d:5e:d0:2d:
e7:0a:e3:71:4d:49:77:29:86:93:95:7a:89:de:d7:d5:8a:da:
9b:d1:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:24 2025 by rpki-client