Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier: 10n6mdZwG2dLg+jSvbWP8sTkjP6I554FgR2qrN+1/zA=
Subject key identifier: 5C:08:55:D0:C8:B4:9F:61:CF:85:AF:1F:9D:85:7C:A5:66:53:E7:07
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 17FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number: 17DB
Signing time: Fri 31 Jan 2025 16:34:06 +0000
Manifest this update: Fri 31 Jan 2025 16:34:06 +0000
Manifest next update: Fri 07 Feb 2025 16:34:06 +0000
Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: kUFAbQ2jjUFJqcV7aEw+GlEXfzxd5+Ra1lwTVBES3s4=)
2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: mlV5FElI2KfwPw+F74U5A5+ugzB0GpF8appz7O1hrRc=)
3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: d2SHnZ0bs3Ad8y5hDn3mylfyHabzy/8uFTs+4jhjfXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6138 (0x17fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: Jan 31 16:34:06 2025 GMT
Not After : Feb 7 16:34:06 2025 GMT
Subject: CN=679cfb7e-edde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:84:04:b4:b8:8f:f6:0e:c8:50:0f:8b:51:
f7:d4:56:56:32:5b:44:35:e6:05:92:4f:10:a9:96:
82:6a:ed:16:1e:ff:07:80:09:cd:27:8c:c3:ce:b0:
5e:b8:03:36:94:2f:b3:ef:4a:e0:e0:b9:a0:06:c8:
cd:67:1a:31:bd:84:22:6f:24:53:bf:6b:48:21:0a:
8b:a7:f0:1e:32:f8:9e:e2:21:f6:5f:b8:c0:74:b1:
e5:a4:49:75:e1:23:57:cf:26:a7:eb:7c:59:60:e1:
a5:3c:0e:16:c6:67:8d:c9:fd:fc:c4:8e:7d:72:25:
9a:ec:b3:90:e3:8b:cb:ed:51:03:ec:8b:cc:a2:91:
62:ac:08:1e:e2:c4:b8:7b:12:cc:3d:7b:4c:f9:7c:
f6:09:07:30:18:b9:a0:97:39:d8:69:22:ca:0e:6e:
1f:0f:53:0f:8b:aa:1e:e4:88:a3:c2:1c:0f:6d:58:
1b:e3:ee:c8:cb:a6:92:2c:0f:9c:e4:7d:a2:96:ee:
5d:53:08:7d:2c:47:f6:8a:05:93:c5:2f:1e:59:a0:
26:a1:9a:37:f5:e1:d1:01:dd:aa:47:c2:04:b4:6c:
3d:28:87:3b:99:bc:30:f1:64:65:f0:3c:dc:06:4a:
cd:90:f6:56:b3:04:23:1a:ca:0e:90:05:91:f3:b7:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:55:D0:C8:B4:9F:61:CF:85:AF:1F:9D:85:7C:A5:66:53:E7:07
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e6:d2:95:d7:55:6c:09:4f:7a:4f:9f:40:2b:e2:b6:ac:da:
29:cd:15:f8:42:46:49:93:7d:d4:09:da:c7:36:95:b2:64:2e:
27:24:98:bc:69:8c:f0:d7:8f:82:2e:d6:e4:f2:90:78:bd:03:
1c:6c:12:01:f1:1c:9f:20:ae:56:5f:67:c7:74:28:79:f0:61:
d3:aa:78:88:5b:69:50:88:ee:1d:9c:ed:fe:84:e3:bf:ad:52:
29:8d:8d:7c:17:88:46:42:6a:e2:6c:bf:7c:7f:29:40:45:c1:
7c:fa:16:a2:2d:3a:a2:e9:f7:b6:be:50:4c:6a:72:cf:19:c2:
d4:b5:b7:de:7f:a8:1c:5f:c2:85:d4:96:4f:84:34:e3:cf:62:
17:b2:f5:02:82:ad:4d:62:d9:64:b6:cd:89:35:9b:7c:1d:1f:
6d:fe:2a:11:2f:4f:c7:a8:db:06:30:92:08:55:73:11:3a:ac:
ce:ea:b0:2f:9e:93:f9:03:cf:aa:00:14:d7:2a:5c:a3:d4:dc:
5f:62:18:15:f1:50:48:3b:80:49:8a:e3:3a:94:b5:cd:45:42:
9c:23:42:b7:c4:09:12:d5:88:96:39:8b:d3:11:85:aa:dc:a2:
d4:c8:a4:cf:01:ce:ae:43:7d:c5:4c:27:99:e2:a5:82:6f:b3:
b4:53:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:41 2025 by rpki-client