Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier: eg28SIjPVqL61Ka0ZekLZcK3udE8UbPARsTad/oQz54=
Subject key identifier: DD:C1:AA:32:CF:3E:E1:8F:78:7C:4E:F0:14:99:8D:8A:CD:E8:EC:E7
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial: 1EE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number: 1EBB
Signing time: Fri 31 Jan 2025 16:03:29 +0000
Manifest this update: Fri 31 Jan 2025 16:03:28 +0000
Manifest next update: Fri 07 Feb 2025 16:03:28 +0000
Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: 44yfCKeWpFusWh1L4TRP/0BjFtZo3IPu2NLgWyr8L6U=)
2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=)
3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7904 (0x1ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Validity
Not Before: Jan 31 16:03:28 2025 GMT
Not After : Feb 7 16:03:28 2025 GMT
Subject: CN=679cf450-436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:14:bc:c4:5b:56:1c:d0:45:61:5a:3e:8c:
d2:77:35:17:1c:46:96:43:91:47:68:50:97:f0:00:
23:a7:01:07:b1:aa:4d:e7:d2:34:25:27:e4:87:23:
cc:d8:cd:57:d2:5c:ad:bf:7e:68:7b:d3:da:45:3f:
1f:ab:4b:36:c2:65:ef:1b:a8:0b:17:02:cd:35:91:
b2:93:4b:9a:8c:ea:b1:90:41:4e:2e:a5:43:92:6c:
01:8f:f5:e2:58:a1:40:5f:85:57:b9:07:d6:44:71:
7d:eb:42:20:b0:d7:f5:db:db:eb:89:4c:73:18:ac:
87:98:5b:70:83:cf:fa:7b:06:c2:47:27:04:88:c0:
9c:2f:0b:2c:b5:c7:9d:19:89:d0:e0:ab:e0:8b:73:
bf:fc:6d:11:ab:e3:8c:fd:ae:6b:70:ae:05:38:28:
2a:f3:b5:ed:6c:76:01:64:84:9c:f2:05:fe:a9:92:
3b:e7:21:49:a8:ca:22:72:6b:01:b4:16:76:c9:e4:
41:ba:5c:f1:f5:4e:c2:12:8a:cb:3d:6d:72:b4:34:
84:36:91:0d:48:47:23:af:53:8c:18:85:a8:d0:f3:
df:93:da:ba:a6:b6:3c:6e:da:45:dd:ce:ab:b2:6d:
42:7b:87:f4:03:57:31:e1:ca:d8:d6:5a:d7:da:a0:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:AA:32:CF:3E:E1:8F:78:7C:4E:F0:14:99:8D:8A:CD:E8:EC:E7
X509v3 Authority Key Identifier:
keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e5:e5:8c:fa:da:ad:37:b3:ac:34:d0:5a:1c:a2:a9:30:e8:
ae:4a:19:2a:c4:2e:b6:b5:42:0a:40:16:5b:08:03:74:21:15:
58:4b:80:60:5b:01:3b:7b:a2:46:73:4b:e7:b4:9d:d6:ce:d7:
ea:db:cb:f8:38:3d:9e:b8:74:aa:88:7f:5e:cc:69:f1:76:1c:
68:32:e9:80:12:a2:46:aa:c7:c8:06:9d:26:7a:09:57:ee:ba:
3f:c4:af:2d:0f:dc:9b:e0:6d:53:b2:3f:98:13:da:78:11:df:
52:85:26:cb:22:2a:b3:bd:d4:ed:6f:b6:0a:ed:37:58:ec:46:
13:10:fd:4d:a0:b8:bb:6a:f3:c8:b1:ae:a9:a8:da:e5:9d:f5:
11:b9:96:d6:8e:c1:e9:8d:41:dc:17:9c:ea:5e:e0:0d:43:01:
b2:12:39:51:48:ee:50:a4:55:89:1b:8d:12:59:3c:0f:ed:f4:
f3:63:94:4c:8a:13:c2:71:3a:0b:1e:13:7b:98:d3:3d:56:98:
3d:52:46:42:85:4d:c4:ce:63:55:32:dc:64:f2:bc:43:92:f7:
04:f7:da:1c:40:b4:33:d0:77:fe:5d:45:9f:3e:98:1d:2d:6c:
46:81:e8:ad:4f:b8:16:af:8d:dc:af:57:85:90:62:69:50:7e:
67:fa:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:04 2025 by rpki-client