
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier: e6L6ZJD/wKHqN/7U5pDg/iT8bwQMIVKjwLylV9nne20=
Subject key identifier: 4B:38:20:13:00:6C:EE:9C:A0:33:B6:2F:19:2F:47:9D:64:1D:07:1D
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial: 0434
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number: 042A
Signing time: Fri 31 Jan 2025 00:25:47 +0000
Manifest this update: Fri 31 Jan 2025 00:25:46 +0000
Manifest next update: Fri 07 Feb 2025 00:25:46 +0000
Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: DDzITfug/61AA84ASl20wOpABYWQPimjOrtFU+jlieo=)
2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: Wy6Q8riSJ2ZA9beGIPBq+oF4HNk5aw3NBdp9GfPj95A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076 (0x434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Validity
Not Before: Jan 31 00:25:46 2025 GMT
Not After : Feb 7 00:25:46 2025 GMT
Subject: CN=679c188a-c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:a1:4d:d6:cf:8e:d7:11:69:0d:1c:3a:cd:
a7:bb:27:4f:97:e2:fa:41:5d:d7:89:ed:fe:84:94:
77:17:ad:54:8f:0c:0c:f4:53:26:62:ad:ab:1f:8a:
f6:e7:93:73:48:32:ac:67:ac:af:89:27:f2:5b:fa:
ca:d4:a4:4c:f3:5e:06:fd:ba:b7:39:e7:50:98:cd:
29:1d:d7:3e:1e:ef:da:ca:76:69:d1:11:69:4c:20:
88:75:cd:92:ea:e9:fe:d5:e3:05:6e:ef:90:2c:ca:
68:9c:1c:fb:58:01:63:55:5a:de:22:27:67:c1:8a:
75:d9:21:ab:3c:e6:12:09:05:cb:20:bc:9d:b8:96:
01:9f:3e:f6:67:3d:f7:3d:8b:21:16:3c:6f:7b:0a:
4f:d8:8d:ea:2b:22:e5:c2:be:99:8d:7d:ac:53:86:
70:3e:ce:e6:f7:0a:ae:04:15:23:41:dc:fc:29:39:
b2:56:9b:39:9e:eb:d2:4a:eb:dc:aa:b3:f5:71:41:
1d:2b:e4:cd:1a:e4:24:93:90:bd:0c:2a:e7:ba:9b:
22:ae:5b:88:cc:77:d5:27:6d:37:88:b7:04:7c:09:
cb:c4:cb:c2:ca:94:60:6e:f4:8d:fe:7f:68:4f:8a:
b7:6f:ae:19:72:2c:41:9a:7c:c6:0c:b8:10:57:45:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:20:13:00:6C:EE:9C:A0:33:B6:2F:19:2F:47:9D:64:1D:07:1D
X509v3 Authority Key Identifier:
keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f6:5d:4a:9e:41:9f:7f:ec:7e:08:94:d6:02:7d:60:09:e8:
85:f2:bf:d4:63:11:ec:af:4f:c9:4a:05:59:34:e8:04:04:90:
e8:f5:3b:90:db:28:02:06:d6:dc:48:f9:21:25:03:58:45:f3:
d4:60:d0:96:07:6a:a6:00:13:1b:d1:74:c9:55:d1:b6:16:a0:
f1:03:b8:b8:a2:da:35:0a:38:e1:56:90:08:71:a7:e0:98:1c:
f7:ea:43:13:2e:dd:e3:e1:9b:d8:ee:05:fd:be:15:86:8e:fe:
1c:14:da:73:a5:47:2e:df:28:89:11:92:ad:a2:38:cb:89:59:
0c:d9:20:40:32:0f:f5:06:26:78:be:20:e3:73:27:41:65:03:
3d:cf:7f:72:74:47:40:4e:db:f1:d8:81:fa:28:32:d0:b6:20:
77:ec:ee:09:2f:13:58:89:30:c3:3f:48:d6:69:b6:d5:a0:c5:
4b:32:f9:c9:5a:cf:5a:b8:cb:41:0e:f8:ec:43:85:96:98:7a:
fb:d8:ba:8e:53:4c:e8:67:61:f9:6b:d1:b2:5b:77:80:1d:05:
46:12:de:f4:fa:a7:d6:84:21:4d:b4:fe:61:4b:01:b0:4f:76:
49:8e:39:bb:9d:3e:0a:cf:c7:50:39:8d:7e:e5:03:8b:67:0b:
8a:ee:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:05 2025 by rpki-client