Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json)
Hash identifier: dFrsp2vhjZYdSAlYLRSYSkmYaNaT5S/QIWGL2nC0EFw=
Subject key identifier: 28:B1:F9:DD:2A:D2:76:03:39:A3:B3:21:4C:CD:46:5A:73:C2:8D:52
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial: 0C92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
Manifest number: 0C74
Signing time: Fri 31 Jan 2025 18:10:48 +0000
Manifest this update: Fri 31 Jan 2025 18:10:48 +0000
Manifest next update: Fri 07 Feb 2025 18:10:48 +0000
Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: XwGX5Na6J7y4sE30txMTxi/+8t1fCzEApYFoU5qYcwo=)
2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: 82U9PEBppNYTLTnVZfk76Z3820ETIwuj4FadkxaLsM8=)
3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 80DZG16CrcFxe5rU7q9F6bESXGfGU3ui08O8uchSe8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3218 (0xc92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Validity
Not Before: Jan 31 18:10:48 2025 GMT
Not After : Feb 7 18:10:48 2025 GMT
Subject: CN=679d1228-28c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:7f:a6:df:7a:8e:21:54:42:f2:d3:98:f2:
aa:ad:aa:1f:ca:05:06:2c:c3:41:81:8f:4f:11:16:
b2:87:42:ff:9b:ce:cc:e1:f6:93:33:52:ac:17:1f:
66:20:62:2b:3a:9b:e4:1a:e0:56:49:8a:06:76:68:
70:6b:b7:95:5e:9b:9d:96:ee:96:5c:2a:85:f2:b3:
e5:78:d2:e4:38:81:2a:1b:7b:9c:45:d5:48:99:89:
0b:1c:d2:13:35:25:e5:dc:5e:29:4b:31:8a:c3:eb:
e9:ae:01:c3:81:c5:5d:a7:da:2e:d8:f0:bc:4e:09:
9e:a7:96:79:1f:d0:6f:6c:77:ff:9a:23:1b:57:84:
9b:85:71:a2:3a:ed:37:85:50:e6:e7:63:94:61:9d:
d8:f3:b1:1d:4a:9d:33:b5:98:22:29:b2:cc:ec:3f:
a2:a5:f0:e0:eb:39:b9:66:d6:12:d0:13:11:da:ff:
aa:3b:06:99:ce:3b:4e:e3:2a:29:6c:ca:a9:dd:d2:
2b:51:b6:6b:40:b3:b4:9a:0f:ed:d1:59:69:78:8e:
f9:40:95:2c:7a:e5:6b:8d:4a:73:8a:cd:07:4d:67:
9b:3e:cc:94:7d:ac:0f:14:d5:0e:5a:6c:42:ee:32:
26:7d:7f:83:52:55:b6:11:56:3d:d4:06:d4:59:8f:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:F9:DD:2A:D2:76:03:39:A3:B3:21:4C:CD:46:5A:73:C2:8D:52
X509v3 Authority Key Identifier:
keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:bf:1e:06:e2:05:d9:26:38:31:4d:e6:b5:96:b2:0f:51:
06:56:95:e5:a3:88:44:3e:0c:3b:2b:1c:73:05:58:50:62:16:
06:f1:2f:0e:65:a3:40:82:e0:1a:1a:63:72:8a:f0:be:44:a4:
9a:70:47:e0:f6:9d:15:8f:a1:cb:96:a4:5d:ae:05:1c:df:f3:
b9:b8:ff:b8:70:22:e0:47:ff:6c:75:85:15:93:bf:dc:fd:8f:
43:8d:a0:b9:ec:fe:9c:a1:b4:0d:cd:75:af:3a:1f:f1:52:c3:
61:c9:4e:3f:a1:24:0e:70:e1:19:25:c3:f5:29:92:24:a4:9b:
b9:76:1f:f1:45:52:86:08:61:0b:a8:4a:15:0a:e0:38:5f:e9:
98:7b:85:89:fd:d9:c4:00:ae:6a:ea:49:3d:d2:91:f0:75:55:
1e:54:93:5d:46:2b:05:3b:4a:14:65:cd:ef:5c:3c:b4:43:ac:
f3:90:66:3a:bf:c5:3f:f2:ca:66:52:22:b4:fd:00:9d:0f:1d:
40:7e:9f:b1:fa:7c:80:9d:98:96:3d:79:d5:3c:8c:97:e9:a0:
85:bd:76:53:46:ab:cd:08:45:46:5a:f9:19:40:91:49:cf:e0:
08:c4:e6:27:3a:b0:18:57:72:d6:ca:cb:7c:fd:28:ed:55:76:
a3:f7:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:25:56 2025 by rpki-client