Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier: dlS19F+I+Si6Lcxz6qCej9wQuOklE8Z60XjMlMjvRHM=
Subject key identifier: D4:42:BE:C9:6E:FA:7E:31:8D:76:45:69:BD:0E:C2:D3:57:76:F4:09
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0B40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number: 0B3B
Signing time: Fri 31 Jan 2025 15:16:18 +0000
Manifest this update: Fri 31 Jan 2025 15:16:17 +0000
Manifest next update: Fri 07 Feb 2025 15:16:17 +0000
Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: CnVRrcVhDBIArZvf/9QA+h6dNywqb+dvkC4tb5n93DM=)
2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: tLtn7CFG0HbQ9XWzYKgOAxAROG1jTzb9mpWP5oMuzzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2880 (0xb40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Jan 31 15:16:17 2025 GMT
Not After : Feb 7 15:16:17 2025 GMT
Subject: CN=679ce942-e3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:19:3e:ee:5a:32:0f:36:72:51:d8:c0:8c:
dc:6f:fb:77:8c:99:6a:70:eb:b9:00:f8:7b:41:6b:
6b:95:f5:b2:9e:38:f2:be:b6:99:bd:5c:73:aa:c3:
4d:9e:48:14:78:94:11:80:ee:4c:a6:6f:8c:3b:fb:
d2:dd:c7:4f:8c:64:34:08:31:82:7e:f8:47:e5:7a:
f6:3f:c1:64:11:98:b0:43:74:d6:76:2a:66:da:73:
fc:c9:ba:0d:30:e2:db:5b:5c:d5:f8:b8:99:12:1c:
c5:be:90:07:4e:7f:78:a1:73:c2:c5:ff:8f:e1:fe:
1e:3e:85:dc:ae:0c:af:20:38:37:d8:63:fe:9a:14:
b7:a8:3a:c6:7c:94:97:bd:d2:46:0f:3a:ce:0c:c9:
48:7c:53:f4:08:d3:ea:bf:f9:7f:5b:6c:b0:4c:ed:
ab:8e:6a:28:34:9a:f7:55:42:b2:8b:a1:ac:e3:75:
42:af:1b:0a:ce:ff:6a:9a:1a:c2:74:25:b7:a8:bd:
2d:53:ce:70:1b:98:7f:14:50:04:df:41:d0:68:2b:
08:44:b9:1e:b0:04:82:36:44:26:45:e5:82:96:3e:
12:6a:ce:70:07:d7:7b:81:59:ba:a3:ff:58:9f:54:
87:15:64:32:9d:1f:15:d4:e2:57:b1:00:63:76:1e:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:BE:C9:6E:FA:7E:31:8D:76:45:69:BD:0E:C2:D3:57:76:F4:09
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:26:3b:80:e4:f7:6a:97:ea:3a:72:15:8a:41:d7:b5:78:91:
30:a9:30:7b:94:c9:1b:c7:9c:85:2a:6a:43:77:d3:18:33:47:
06:12:1e:a2:6c:2a:60:2e:b7:15:d9:c8:80:c7:3a:23:cf:6c:
d4:e3:a4:06:63:06:98:6a:de:b7:07:9a:98:d1:28:53:0a:0b:
40:53:0a:82:2b:15:d7:57:74:1e:bf:8d:6e:67:1d:60:35:b8:
64:52:97:1c:e1:84:f4:77:d4:4b:87:c7:83:b7:cb:cd:6f:a8:
0f:de:6f:0e:7a:20:8c:a8:a5:f3:f9:4c:38:4b:f4:c1:61:ea:
02:71:37:49:16:26:3f:81:bd:71:07:bb:93:62:b7:5d:c9:cf:
68:d4:41:3f:05:52:ec:65:72:42:58:1f:18:bc:25:09:1f:13:
15:5e:f1:73:e5:a7:7e:f5:cc:5a:49:0f:32:4d:b7:9d:2d:32:
26:2c:f1:eb:cb:b2:67:62:16:b9:e2:a3:32:f3:98:1d:1e:ab:
0f:0e:1d:48:ad:6a:18:07:57:3b:1e:4d:10:00:8a:f5:9a:48:
f4:a3:03:51:e4:eb:29:47:10:4d:cf:6c:43:1b:ae:4a:c2:2f:
d2:37:7f:bf:fb:f4:31:83:cb:c8:1d:a4:a8:92:d5:c5:91:5c:
f4:df:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:53 2025 by rpki-client