Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json)
Hash identifier: yxE6ywgxAMiFsAOPePVloqkGe6virwaoiDGWLsbj/Hc=
Subject key identifier: 64:AF:2F:65:EB:3B:7A:3A:0D:05:AC:EB:14:27:33:2E:93:AF:AD:20
Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
Manifest number: 062F
Signing time: Thu 30 Jan 2025 22:35:37 +0000
Manifest this update: Thu 30 Jan 2025 22:35:37 +0000
Manifest next update: Thu 06 Feb 2025 22:35:37 +0000
Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: 5O32n5JN5abd/W8wNZ2LRZ7HfYjmXn9mKJ+3nrjt8/s=)
2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=)
3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Validity
Not Before: Jan 30 22:35:37 2025 GMT
Not After : Feb 6 22:35:37 2025 GMT
Subject: CN=679bfeb9-f883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:6c:57:98:d3:2d:0d:eb:3c:45:c4:b9:2c:
d7:6b:ed:32:44:d0:6c:c6:b3:ea:4f:2e:75:fc:db:
0f:41:90:8b:38:ee:8e:29:20:17:e8:20:47:c0:82:
91:a7:03:70:93:bf:33:47:05:1d:42:a1:a1:ce:78:
4e:1c:b2:b3:af:eb:49:c4:47:93:8d:8c:00:56:bb:
bc:42:73:6a:01:a4:62:4d:cd:71:b9:2e:c3:6a:a5:
25:44:c5:2e:5f:e1:77:32:25:12:c7:50:86:67:a6:
4f:a8:4a:9a:e9:44:67:1b:04:8e:78:e6:7e:55:6d:
bb:41:a5:13:fc:7e:a6:68:4e:33:35:d6:54:98:29:
6b:84:77:e6:b4:ba:f8:7b:98:cc:b8:b7:c4:af:cd:
46:40:29:dc:d6:a1:db:16:e2:74:35:d1:3b:6a:05:
07:ab:04:6f:19:1f:6b:3b:35:a9:21:6c:c6:e7:f9:
28:14:c2:be:2f:b6:17:02:ec:fc:02:43:ff:e5:b5:
8c:8b:29:3b:3b:3f:4a:4c:52:eb:01:33:27:97:86:
e4:01:08:40:01:4c:13:8e:2d:ac:d5:21:e1:80:de:
5a:f7:b5:d4:12:e7:43:02:17:c4:36:3e:3b:97:26:
3f:a9:84:7f:e7:8b:a7:ac:95:be:36:76:7d:c7:69:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:2F:65:EB:3B:7A:3A:0D:05:AC:EB:14:27:33:2E:93:AF:AD:20
X509v3 Authority Key Identifier:
keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:6d:0a:55:98:11:bd:13:73:cd:f3:fd:21:f5:7e:5b:b8:5b:
a7:06:4a:96:69:87:9c:5a:49:c7:4a:b8:7a:6f:4d:8b:89:69:
b8:ea:15:03:fe:46:14:0b:27:b1:5a:e3:3e:3f:ff:c9:9a:d4:
01:2d:80:33:d1:3f:73:66:21:fd:86:10:cd:33:77:87:bf:a2:
92:68:81:fc:75:d8:cc:18:37:c4:88:c8:fa:74:86:a8:16:ee:
61:a6:c9:c0:a0:6c:46:e9:f4:58:5a:ee:a4:e6:bb:03:98:cc:
58:b9:1d:42:e7:fe:b1:50:87:3b:7a:6b:0d:87:2c:98:cf:9a:
d3:ad:bd:12:8e:c9:f3:75:c4:b6:0c:bc:61:5d:d7:0e:d7:40:
81:82:0c:f5:d1:c2:66:f5:54:fc:2e:40:c1:6f:9f:15:a2:6d:
2c:f7:09:6a:f4:c1:69:7c:e2:87:12:44:d8:57:f0:3d:66:4b:
bb:1e:66:8a:e4:20:89:85:39:40:01:e8:da:32:df:ed:f4:42:
e6:ee:c6:cd:10:9f:f7:57:b8:a8:f5:b2:7d:64:b2:36:b5:7c:
7e:2f:05:ce:d8:ee:2d:e7:d2:00:f5:1f:fb:8f:04:89:7e:68:
cc:29:0a:26:ae:4d:d0:cc:fc:74:3a:b3:2b:e5:8a:38:cb:12:
27:2f:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:55 2025 by rpki-client