Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json)
Hash identifier: 3pOIwl0t8r8VjZbX1DrZcvmjk9PfCvJksmF/NuPMLQs=
Subject key identifier: 03:C5:E1:B2:35:F6:9F:E9:A3:63:A3:F2:18:11:79:08:77:10:AA:FA
Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD
Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
Manifest number: 0189
Signing time: Fri 31 Jan 2025 02:50:42 +0000
Manifest this update: Fri 31 Jan 2025 02:50:42 +0000
Manifest next update: Fri 07 Feb 2025 02:50:42 +0000
Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: 2i3GCOFqu33cssCbo1+bH3RtXe+6+VrhK7jEb77RxcA=)
2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD
Validity
Not Before: Jan 31 02:50:42 2025 GMT
Not After : Feb 7 02:50:42 2025 GMT
Subject: CN=679c3a82-fec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:ca:fc:82:e2:d4:1b:2d:2c:89:30:f1:6e:
0d:db:ec:df:09:a8:e7:28:98:f8:80:3d:a4:dc:85:
15:b0:87:5d:24:8b:22:ca:8a:b9:2e:54:9e:48:d2:
46:ff:42:69:16:57:f5:44:a5:4e:73:13:51:76:93:
85:3d:80:30:11:77:83:89:9c:c1:44:da:86:11:b5:
73:31:d3:f0:8a:4a:8c:16:bf:86:02:7f:fb:18:fe:
93:ca:f4:e1:dd:d0:49:d3:4a:cb:3a:a5:58:4f:d6:
29:a3:43:6e:d5:a3:c8:fa:1d:3f:be:c8:e0:0f:63:
74:fc:73:d3:43:e3:84:96:0c:25:a6:ae:ec:e7:a8:
0f:93:8e:e6:5d:22:c9:59:8d:ff:bc:dc:7c:46:82:
ce:a8:ff:bc:c6:0d:ec:3b:a1:9e:2d:11:86:a9:0e:
e0:10:de:ba:04:89:41:f8:9b:37:26:ee:42:c9:ad:
cb:c8:f1:42:19:6c:a8:84:a7:8d:8b:9d:33:54:07:
5f:ff:d9:e8:11:48:8e:a9:f3:8a:5c:8d:00:37:ea:
37:9d:a5:d5:43:52:44:2b:4d:a0:de:2c:89:39:5d:
4d:6c:31:6b:94:10:c2:22:0f:f6:2d:47:cd:1f:58:
e6:87:d1:84:e0:59:ee:e6:e9:e0:93:e4:ad:28:41:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:E1:B2:35:F6:9F:E9:A3:63:A3:F2:18:11:79:08:77:10:AA:FA
X509v3 Authority Key Identifier:
keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:25:90:88:12:f9:76:22:b7:68:b2:50:09:69:c3:70:9d:
2f:f1:95:70:0d:46:fb:89:63:a0:9a:a9:fd:fb:db:b6:ef:34:
d8:0b:5c:f4:80:cc:f4:d4:83:4a:1c:98:e4:22:43:85:fb:6e:
6d:a7:5f:8c:ed:f1:2b:60:0e:87:11:95:09:e1:a1:b5:c2:81:
e6:4e:d8:1d:f1:dc:bd:09:a2:30:a6:33:87:74:2d:b3:f0:9d:
5f:cc:ff:96:99:09:47:de:13:4c:20:d7:66:57:1d:19:fa:49:
88:a6:12:11:f6:07:2a:8e:95:f0:81:ed:f0:84:71:1c:fd:19:
59:7c:91:94:16:71:f8:ab:4b:ec:59:fe:51:d3:1a:dc:2f:bf:
5f:b3:d9:03:1e:51:a6:f3:f7:c0:77:7f:5d:d5:0b:39:fb:ab:
24:af:da:46:6e:05:2a:6c:55:1c:2a:c8:da:95:a0:cc:ca:cd:
6d:5a:cd:31:57:19:8a:f3:f6:59:a8:b2:4c:c7:88:f8:d2:d9:
ed:6f:5f:67:58:61:a0:61:67:68:76:47:d0:2e:8c:b8:e1:25:
31:86:0d:0c:01:e7:b9:2c:c7:71:24:48:73:d7:f2:c6:39:04:
9d:1a:2a:cd:bf:c5:b1:c5:31:02:12:ed:27:43:35:25:f6:d7:
30:68:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:01 2025 by rpki-client