Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json)
Hash identifier: PzIEtADJgmQE+q7IxCHl6A3L9z6sEzKpffnJWjk8pfU=
Subject key identifier: 68:B3:8F:5E:3A:2E:62:FA:2E:67:B5:CF:6A:62:3D:D4:D6:E2:0A:EE
Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Certificate serial: 0B63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
Manifest number: 0B48
Signing time: Thu 30 Jan 2025 19:13:42 +0000
Manifest this update: Thu 30 Jan 2025 19:13:41 +0000
Manifest next update: Thu 06 Feb 2025 19:13:41 +0000
Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: DG18Xmf43NdwPPdc8v06PWUQHUCqlPqqh7W6TE13FLE=)
2: 7510C8E4A58111EFB180AE4CC4F9AE02.roa (hash: E/BGID6Gby6v5QvQj4hPXMbAhQVogenf9fUtMLowUnA=)
3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: xCXQqgm7s0yqcl5rlXb69u+J291yS3/BUfkPMKe4WIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2915 (0xb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Validity
Not Before: Jan 30 19:13:41 2025 GMT
Not After : Feb 6 19:13:41 2025 GMT
Subject: CN=679bcf66-ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:da:da:ab:7f:bb:39:41:9c:ea:5e:f0:43:
52:f0:21:f0:80:9c:51:2d:2e:79:3f:a9:63:01:04:
db:ae:06:2e:d4:33:b8:28:b1:8f:0d:16:0c:df:d6:
26:8f:89:ab:89:72:d5:a1:ec:66:d1:50:02:cf:bd:
6e:1c:21:75:ae:cb:63:64:89:a3:56:ca:d2:62:4f:
86:fe:62:44:23:19:55:1b:06:e6:e3:b5:7a:9c:2d:
15:cf:c5:12:09:ae:23:1e:ab:03:71:fc:99:ce:59:
b1:b0:5a:2b:89:36:4b:8f:e6:78:13:a7:c9:e0:be:
7a:03:30:b5:38:dc:e0:5b:6b:f2:4a:0e:aa:94:c3:
12:35:9b:d7:f5:ba:23:93:c2:98:87:9b:5b:83:83:
0f:cf:ef:35:0f:b2:8a:0c:cb:e6:04:f5:d2:02:97:
80:f2:90:9a:1c:26:88:24:97:4e:64:c0:29:f3:0f:
20:e1:8f:af:01:53:e4:8c:f2:04:2c:65:7a:02:38:
9d:fe:88:d1:ec:05:32:f1:99:03:b3:be:73:fa:24:
b9:2a:b5:d5:87:b7:99:01:b8:3f:ad:6b:07:cf:73:
0d:1c:8e:27:da:62:87:d9:c3:8a:4d:c4:86:69:df:
2f:7f:4c:29:ad:2f:da:9c:d8:40:e9:4a:7d:d5:1f:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:8F:5E:3A:2E:62:FA:2E:67:B5:CF:6A:62:3D:D4:D6:E2:0A:EE
X509v3 Authority Key Identifier:
keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7f:f7:4a:c2:89:b5:92:c5:88:80:2b:8c:30:2e:21:48:cc:
fd:fe:ad:80:36:54:f5:5d:dc:dd:9a:25:44:e3:85:14:16:c7:
7a:68:b7:8f:e5:0f:c2:30:36:d8:2f:cd:f0:d2:b7:3d:d7:f9:
21:72:f4:57:bb:45:92:c4:ae:5e:3e:3e:b1:bc:6c:6a:5a:22:
a6:a4:0d:47:e8:70:b3:02:7d:e7:b9:07:84:71:64:70:da:93:
56:06:36:6d:4f:6f:fb:58:cf:ef:c7:d6:6e:b7:b1:cb:98:36:
26:f8:60:63:e8:bb:68:96:53:31:21:79:0e:9b:a5:49:a4:61:
70:d1:11:6f:b0:ee:59:ae:7e:18:1e:b2:ce:ae:1c:fc:f9:ae:
34:a1:37:90:0c:44:76:d3:b3:d3:31:04:1c:c9:bb:db:60:89:
b9:3d:5c:dc:e5:d2:7a:b5:1a:7b:c4:67:88:14:32:a4:23:3b:
ee:3c:7c:9e:ac:c1:7c:ab:c4:95:0d:e3:c2:18:c0:0a:3e:96:
f6:13:fa:d2:b7:5c:93:f7:55:c1:5a:3e:31:d5:d0:28:76:fb:
ae:75:0f:60:c9:0e:6f:d3:df:93:7d:31:a2:ba:98:79:f7:29:
7c:4d:e3:41:90:24:ad:21:23:de:8f:61:a4:9a:b7:87:0f:3c:
a1:77:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:23 2025 by rpki-client