
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
File: 674mL25KszsiCY2mAsJkKj08A_U.mft (raw, json)
Hash identifier: K9ampOSgVHAim7ixjNTPvbY5XLBfBHH1Yr2ODQEbFgI=
Subject key identifier: A4:33:6E:4B:FF:66:6C:75:1E:CC:39:43:EB:73:B5:BB:08:10:5B:B7
Authority key identifier: EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
Certificate issuer: /CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Certificate serial: 067A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
Manifest number: 0670
Signing time: Thu 30 Jan 2025 22:22:21 +0000
Manifest this update: Thu 30 Jan 2025 22:22:21 +0000
Manifest next update: Thu 06 Feb 2025 22:22:21 +0000
Files and hashes: 1: 674mL25KszsiCY2mAsJkKj08A_U.crl (hash: 6BOTs9JyKu3VrPnkcuO1N3YH069RzBnHxohPvfQd+2k=)
2: EC816CBE641F11EBA016EF13C4F9AE02.roa (hash: NtxjxHWZIfMo0Kt8OLvqFSbGnEdwJUbMVOZ3SZCghWk=)
3: EBD40682641F11EBA016EF13C4F9AE02.roa (hash: c+WQzSJXoshc9k6/pfga0XXEDax9tj8GwJo473Lwjss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Validity
Not Before: Jan 30 22:22:21 2025 GMT
Not After : Feb 6 22:22:21 2025 GMT
Subject: CN=679bfb9d-5da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:27:30:d4:7b:a0:61:32:b3:f9:57:6e:e8:
3a:28:24:2b:5a:02:0b:c0:90:5e:20:94:1c:06:95:
b5:d9:38:b3:aa:55:c6:2e:4b:a4:82:ea:49:bb:54:
ae:34:fa:d3:2e:d5:b6:d2:49:12:d6:15:65:10:3c:
90:b0:0c:0b:32:fa:9c:2c:2c:ab:c6:86:d6:26:5f:
e2:57:bd:3f:58:e4:03:ad:64:cc:3c:21:2e:95:a4:
8b:ff:d8:d9:17:7b:18:66:e3:07:5b:9c:1b:cc:84:
d8:bc:53:5d:fe:7e:42:53:d2:81:1a:1b:f0:23:f1:
87:d6:2a:6e:14:c0:0e:2f:ea:cf:47:3b:83:b2:b6:
82:b6:7f:1f:9e:6e:f0:9c:8e:a5:69:77:48:dd:ba:
32:c2:5a:d7:4a:04:7c:d6:d0:75:9a:14:92:86:3b:
85:ef:d5:3b:10:d7:1a:77:cb:36:2d:98:fa:02:b4:
28:d4:b3:68:dc:9f:fd:01:4b:43:d6:9b:70:b5:28:
58:9f:29:8f:23:1e:7e:1e:43:79:7e:0f:93:0f:ee:
1b:fe:9a:e7:89:c5:01:d0:e0:ff:35:3a:2f:bf:c8:
11:10:e7:61:01:8b:54:c5:fc:30:75:dd:6f:18:48:
3e:32:d7:93:9d:e2:a0:8b:e8:b3:46:d8:ad:a1:43:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:6E:4B:FF:66:6C:75:1E:CC:39:43:EB:73:B5:BB:08:10:5B:B7
X509v3 Authority Key Identifier:
keyid:EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:2b:98:4f:07:33:c9:12:38:d5:14:d9:64:17:3c:58:f9:22:
37:44:84:0b:84:be:db:90:ef:7e:c0:e2:16:c6:bf:02:b7:bc:
75:85:3b:13:47:8e:48:c3:09:13:6f:f8:23:75:eb:d4:1d:20:
63:3a:56:28:29:f7:f8:b7:5c:53:33:71:5e:b1:17:2a:e4:67:
69:0b:06:27:5e:2f:75:0f:45:44:ea:56:32:e4:39:db:b1:75:
89:ad:17:72:eb:77:88:ee:77:6c:07:c9:62:ac:db:39:f1:49:
13:7f:c2:94:1b:61:fe:97:bf:61:82:83:7d:b3:0e:b5:e2:c2:
12:77:62:c6:95:5d:e3:cb:69:b8:ec:1f:68:4a:bb:3a:d9:4f:
d9:f9:fa:2d:0d:3f:a4:15:a5:99:3d:9e:b3:99:61:6f:b8:bc:
05:da:72:67:f1:fb:98:88:ce:69:ad:9f:31:4b:02:1b:9d:cd:
4c:99:db:1c:19:06:25:df:4f:a1:13:8f:e4:49:92:0b:7b:26:
f4:63:bc:2e:54:50:ac:0f:be:5f:80:43:dc:f9:ed:7a:5e:61:
30:bc:40:f4:a3:57:f7:85:82:09:8d:f1:de:ff:47:c9:e7:f9:
e8:9b:36:fd:31:94:24:76:71:a3:7e:bd:18:ca:2e:79:33:80:
91:45:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:30 2025 by rpki-client