Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json)
Hash identifier: +qWR3wuyNuXyGAGCI8LuCoSCaxjvU+6dw6K9/PGWd50=
Subject key identifier: 27:BB:A1:65:5C:97:62:6B:85:8B:48:4E:43:46:A1:C1:33:78:A9:63
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial: 07BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
Manifest number: 07A8
Signing time: Thu 30 Jan 2025 21:11:47 +0000
Manifest this update: Thu 30 Jan 2025 21:11:47 +0000
Manifest next update: Thu 06 Feb 2025 21:11:47 +0000
Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: 1twaPgNbEeNT95OtBy0QxV+iXRk8oyvE66I5j52yzCo=)
2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: gRPrkPot7cS4Md/lWHKHiYe/Z/9NwksWhg6tBROLm8I=)
3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: UOhw1kq9d+cXhpmk5TWMuSERdIf0YRt+xgjoXpvoadw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Validity
Not Before: Jan 30 21:11:47 2025 GMT
Not After : Feb 6 21:11:47 2025 GMT
Subject: CN=679beb13-f3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:b0:90:ae:37:1b:86:40:8f:92:5f:cd:1b:
95:98:45:fc:46:ed:61:48:ea:df:f7:b9:73:3d:c3:
8b:2f:0b:de:03:9e:8f:92:b2:b8:1a:1a:83:73:ba:
49:ce:f0:2e:50:b1:15:f1:a2:af:70:53:1e:c2:88:
c0:c3:a1:84:02:d3:f6:d7:ed:3f:e1:1c:c1:63:22:
bf:03:2f:cb:81:70:cb:fc:28:07:d9:a1:a5:97:f3:
b1:93:37:cf:90:9c:9e:8a:80:ec:8b:8d:ed:08:d0:
77:10:aa:c0:7c:14:b2:be:44:0e:ce:42:1e:f9:36:
60:8e:aa:d4:3e:c5:35:25:eb:e2:f5:9d:2a:9b:9c:
46:ca:8d:b4:b6:e1:00:d1:21:b1:7e:04:b5:a4:d3:
6b:44:47:8f:ae:09:c1:94:50:ba:f1:fc:86:b3:62:
da:15:77:6f:e5:9f:c1:0d:11:53:90:71:00:17:fd:
90:0a:8f:c8:76:09:b2:6d:c8:a4:e4:bd:65:b4:e0:
29:c9:06:0e:a8:59:23:c1:95:3c:4c:26:49:ba:74:
e2:16:02:ea:90:01:4b:76:f3:cb:ab:06:65:e5:5f:
b4:d2:fc:8b:44:ae:f0:f2:33:ca:dd:ad:c3:b5:ae:
f3:93:51:d4:2c:68:cf:81:de:dc:84:6f:fe:a2:07:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:A1:65:5C:97:62:6B:85:8B:48:4E:43:46:A1:C1:33:78:A9:63
X509v3 Authority Key Identifier:
keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:d8:14:a0:5d:99:8f:da:d3:a1:01:6d:97:6d:d6:97:ba:
00:f7:2a:f1:47:57:19:39:4d:d9:13:b6:3a:d0:d8:90:01:39:
91:9a:9f:10:53:c8:08:bf:02:61:6f:b2:d1:a2:82:75:aa:ac:
0a:f1:2e:4d:06:94:7d:72:28:3b:3f:51:d0:78:14:8e:79:58:
64:4a:8c:da:7b:34:3f:f1:ce:51:51:24:f3:55:54:9a:54:92:
8c:90:16:97:cd:9c:fa:58:99:ab:56:f4:44:d1:b9:0e:12:d1:
3e:a9:f2:ad:14:f3:a4:1e:a0:f1:27:93:51:fa:4b:da:16:b3:
5f:98:2c:11:cb:08:34:a2:1a:3d:f5:28:a3:f0:dc:14:74:79:
2b:9d:1d:f5:17:52:49:d0:be:a0:57:6b:e5:4d:cd:9e:bc:18:
3b:f8:5d:20:c6:29:ca:34:0c:38:ef:d6:a9:4e:d1:6d:18:3d:
d7:77:aa:a5:64:81:de:90:64:76:05:7a:f5:59:d0:a9:21:a6:
49:75:ff:60:db:ad:00:5a:36:fc:c0:e3:a0:a8:f4:00:51:4c:
14:b2:24:cd:84:bf:89:5d:e6:e0:83:2d:54:72:8b:b4:81:21:
b2:74:5c:74:ba:99:86:d6:af:d9:ad:2c:47:44:32:2a:27:11:
e3:a3:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:10 2025 by rpki-client