Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier: 1S0MbrmIqyBAbo0ZXohf7jHlLca+fZ/DAftRUTfJ0Do=
Subject key identifier: B9:63:12:D9:C6:CD:76:B3:4D:FB:9E:86:65:30:0F:00:98:7E:74:1D
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number: 0F
Signing time: Fri 31 Jan 2025 07:07:12 +0000
Manifest this update: Fri 31 Jan 2025 07:07:12 +0000
Manifest next update: Fri 07 Feb 2025 07:07:12 +0000
Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: /MiPBofwrLlfe34r+dQ3w7b9bApXuvA+EiAWXxqtjW8=)
2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Validity
Not Before: Jan 31 07:07:12 2025 GMT
Not After : Feb 7 07:07:12 2025 GMT
Subject: CN=679c76a0-740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:c9:0c:c0:ba:67:3f:15:c0:3f:4c:d6:46:
81:22:d1:2d:9c:9e:1f:65:4f:27:91:b0:dc:57:82:
90:b7:c3:83:0d:83:68:05:2a:03:08:92:19:52:55:
e2:e1:86:d4:e9:ca:50:da:44:fb:c0:71:dc:85:c6:
00:b8:5c:79:1c:40:d0:c0:0d:db:66:d3:42:5a:e4:
04:2a:68:0b:f7:a1:d5:ba:61:83:00:19:15:cc:be:
a2:00:16:d4:56:1e:2d:b2:76:aa:95:bb:c2:ac:c5:
4d:ab:e7:92:1f:1a:db:06:81:cf:76:a3:40:d3:b5:
e5:f3:81:0b:38:67:b1:3c:81:53:eb:92:7c:2a:50:
28:03:f7:32:44:fb:b5:df:89:10:ad:d7:9f:aa:1e:
80:38:44:c8:6c:92:60:15:cf:fa:36:9f:05:13:82:
6a:4c:30:96:93:d7:15:7a:6f:b9:f1:c4:eb:1e:c9:
aa:7f:95:6f:02:a3:0d:3c:69:1a:d5:1d:11:f6:7b:
21:4b:a2:dc:62:f3:d7:6a:cb:14:d0:75:dd:58:6f:
d2:94:d2:4b:52:f4:38:74:4a:9e:3a:86:21:a5:b2:
f6:54:89:80:fc:d1:3d:f3:55:fb:3c:9c:83:3b:c8:
05:80:1b:44:94:d5:80:0c:f6:75:1d:46:f4:2b:71:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:12:D9:C6:CD:76:B3:4D:FB:9E:86:65:30:0F:00:98:7E:74:1D
X509v3 Authority Key Identifier:
keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c9:7b:bc:6a:5e:b3:47:84:55:26:b4:02:c0:74:65:73:23:
82:4d:a4:d6:b4:2b:0e:0f:bc:0a:14:9d:1d:e1:e4:9e:9a:2d:
c1:5b:75:55:06:56:f0:39:77:84:1f:c4:33:00:4b:c6:84:62:
f8:5f:5c:42:00:1f:91:9c:05:a5:99:70:58:cd:81:ad:c2:fc:
ba:e7:d8:8d:ca:a5:af:08:20:4e:2f:d0:be:aa:f8:f8:ad:13:
43:26:2e:9c:79:99:ad:49:3c:d3:90:6a:a0:0e:a1:a4:26:6d:
e9:91:4b:fb:a4:80:c4:cc:5f:e4:06:9e:2c:e7:3b:06:22:32:
57:6e:56:0d:f3:f2:0f:fa:dc:5b:df:ba:57:f4:da:b3:2a:44:
5b:fa:b3:e8:41:84:0d:4f:f5:c2:ef:94:2f:c3:50:9b:fa:47:
1f:57:f0:8a:15:d8:2f:d5:66:c3:97:16:f6:c5:79:97:19:9c:
d3:a3:61:b0:3b:75:d8:6e:4c:f2:dc:6b:85:68:a1:ce:c2:ee:
12:3b:c3:34:b1:9a:53:2a:ac:e7:66:a0:fd:98:3a:a4:5b:56:
b1:da:c4:ec:a5:81:6a:7b:a3:9d:ac:bb:90:b1:85:a4:a3:22:
d2:99:4e:ca:cd:24:60:6e:2c:6c:1d:67:dc:d7:08:40:1d:45:
8e:2c:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:55:49 2025 by rpki-client