Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier: Im7CfFvATgNGd8maH8ZE8wkSsVqkQvOcJ8v+BTf1QnQ=
Subject key identifier: 68:FF:8C:65:BC:77:B9:CD:A0:28:3C:59:A2:26:21:D6:24:73:F7:A3
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial: 124F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number: 1245
Signing time: Fri 31 Jan 2025 17:07:13 +0000
Manifest this update: Fri 31 Jan 2025 17:07:12 +0000
Manifest next update: Fri 07 Feb 2025 17:07:12 +0000
Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: fYmR6VCXBLkNawBhvJIpswwsIeThqgmC2SzYd/K239g=)
2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4687 (0x124f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Validity
Not Before: Jan 31 17:07:12 2025 GMT
Not After : Feb 7 17:07:12 2025 GMT
Subject: CN=679d0341-1a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:18:09:0e:49:d2:e2:14:82:25:89:d6:55:
27:09:22:ba:b0:a7:5f:cc:a9:b8:3e:f3:ef:ab:36:
51:68:f1:2c:21:3f:d9:12:99:a6:88:c7:16:10:42:
fe:cd:cc:15:66:e9:c4:24:a6:17:bd:05:ba:58:1c:
79:9a:f4:8f:9e:52:ca:72:2f:95:a2:73:35:20:17:
2c:bc:14:d3:c8:dc:51:6d:c0:62:a7:17:3c:c7:aa:
85:5b:e8:13:a5:be:65:88:3f:7f:62:3c:fe:c3:47:
4d:44:c6:65:ce:93:98:7e:ce:28:5e:20:83:ee:1f:
b1:c7:6d:d0:9a:7d:0c:fb:31:1f:88:94:23:b1:7b:
ca:a5:fa:ee:a2:32:dd:e9:9b:eb:2f:e3:a0:aa:6b:
34:dc:a1:eb:44:4a:f7:51:25:1d:be:7b:99:e6:fe:
ca:a0:6c:a1:b8:75:9b:7b:51:10:e0:dd:d0:da:c3:
97:e5:bd:84:f6:28:1c:ca:23:7e:a5:c4:34:36:65:
99:16:a1:65:04:bd:aa:3e:b2:45:24:b2:cd:16:4f:
83:1e:b8:a9:8a:98:7b:46:80:26:f6:61:76:94:b8:
87:80:a1:07:d1:d4:ab:3c:01:07:d8:15:31:ff:a1:
74:c0:51:17:c7:b3:04:9a:7c:83:b0:22:9a:65:00:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:8C:65:BC:77:B9:CD:A0:28:3C:59:A2:26:21:D6:24:73:F7:A3
X509v3 Authority Key Identifier:
keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:4b:20:d6:e9:b2:20:e0:db:86:57:e6:6e:2a:a7:5f:80:
11:c7:4e:19:7c:2b:3a:00:fd:5a:d6:51:ca:04:6d:5e:6c:77:
32:59:3b:e3:4c:3e:d5:48:17:d4:a6:a5:44:5d:e5:87:9b:d8:
b3:5a:fb:70:d7:c8:cb:04:d6:10:95:78:9c:c2:c5:8e:2b:20:
2e:91:36:ed:7f:53:3b:20:55:36:7c:15:03:9c:0e:5d:da:93:
ab:3e:f7:6e:38:0b:81:d1:3e:47:80:31:17:39:26:7a:a0:c7:
ba:db:5e:47:c7:90:39:96:9c:21:6a:a4:04:1c:ca:51:78:8f:
ea:78:86:7c:ab:2a:bc:df:a5:e4:b2:1a:01:55:e8:68:0d:8c:
c7:7a:6b:c7:ea:cf:78:0d:cd:41:48:8f:b5:f6:be:25:0b:ba:
a2:f7:e0:d4:e7:60:b3:63:b3:e3:83:61:2c:4d:32:79:0b:c4:
b1:aa:6f:16:b1:8a:bc:08:1b:cc:c7:f7:3a:b6:e0:04:1e:4e:
6c:38:73:b1:90:dd:41:4e:da:7c:44:4e:09:3e:f6:15:e3:54:
6f:87:c8:f7:4a:63:3c:1b:5b:0f:82:8a:3d:22:42:86:45:03:
cd:ee:9a:a7:f8:d6:11:c9:28:74:32:3a:f8:e7:77:3c:50:d2:
b5:cf:1a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:42 2025 by rpki-client