Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: DGBdCWCZQqekcaGorQi8uShz/ka2Sba/YY+O7ilwVdQ=
Subject key identifier: 6A:2E:FC:D6:14:62:70:10:6F:FB:C8:38:C1:31:C7:F2:AC:FE:6B:12
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 95
Signing time: Fri 31 Jan 2025 05:31:15 +0000
Manifest this update: Fri 31 Jan 2025 05:31:14 +0000
Manifest next update: Fri 07 Feb 2025 05:31:14 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: q+N9S5K7eSP3Ykv/fEWHu8TBTfWk2GTlXU4JXSBlq3U=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Jan 31 05:31:14 2025 GMT
Not After : Feb 7 05:31:14 2025 GMT
Subject: CN=679c6023-e75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:fc:65:03:aa:4d:6b:0a:80:f3:41:4f:30:
3d:b5:58:8d:e6:f9:c5:ea:f2:aa:f1:b3:45:ec:cc:
07:79:ef:45:e9:c9:d7:54:76:6d:62:23:b2:f2:a8:
7d:c2:76:b8:55:ea:f9:57:28:65:cb:9e:0d:7d:72:
78:7e:2f:17:aa:dc:28:c6:8a:95:ec:fe:2d:97:0a:
47:87:63:b0:40:ba:36:17:18:b2:8d:06:71:b4:df:
81:27:9b:fb:55:1f:29:6e:60:c4:ff:90:9a:d3:44:
fa:14:b7:ea:75:23:58:0d:76:31:99:ad:2c:35:10:
c2:27:2b:50:58:e4:35:ee:f9:47:ca:1b:1f:15:26:
8d:7b:3d:1b:ed:74:c5:39:d5:83:c6:2c:6f:ed:78:
1c:fb:55:2c:86:29:59:2e:8b:bc:80:be:8a:2b:07:
d0:5b:9c:4d:24:47:49:9a:32:29:bc:b6:da:72:db:
ab:5b:d2:6c:3e:6b:f9:f7:e2:05:3c:0f:ca:ff:aa:
77:cf:2c:4b:81:8f:82:3c:ed:ce:bc:59:41:34:13:
08:c0:e9:5d:29:b2:23:0d:66:30:2b:6b:f0:f9:8c:
50:ca:42:a5:9e:ef:4b:32:ba:3b:01:5f:c6:a4:30:
45:7d:2e:d1:9b:05:32:69:56:96:4d:6e:52:1a:20:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2E:FC:D6:14:62:70:10:6F:FB:C8:38:C1:31:C7:F2:AC:FE:6B:12
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:c1:ec:65:7b:36:8d:aa:9a:c2:bb:1b:12:eb:85:28:f6:
7d:51:a3:a5:e2:f2:74:a4:1f:07:82:b4:73:f7:aa:0a:60:b5:
75:8d:e9:3e:f6:14:38:f9:10:33:96:11:6d:77:b3:7b:d1:3d:
11:34:ee:1c:fa:53:31:5c:39:d2:32:a4:ce:d7:a0:46:de:cd:
14:f5:b0:44:36:f8:18:0e:da:c8:8b:44:da:cd:e2:1f:03:27:
de:8c:4b:ce:3b:85:8f:3a:80:30:e8:7c:de:23:4d:11:bc:7f:
d0:88:7d:f8:e0:2f:13:2a:13:86:5a:45:de:b4:96:c3:32:03:
47:58:e5:db:fa:fa:fe:22:80:6f:aa:fe:2b:a0:37:67:6e:d7:
ad:1c:00:7a:7c:77:bb:bf:0c:b0:4e:5a:4f:b1:e1:72:73:7c:
7b:84:fa:37:d6:6f:4e:7f:7c:3e:75:07:4d:ba:e4:85:c1:80:
2e:e0:6f:45:22:0b:34:b3:1a:92:66:da:bd:41:6c:d3:3f:d6:
46:14:8f:03:36:2e:49:45:2d:f0:7d:41:bb:5d:54:a4:91:d2:
01:df:13:46:be:0d:59:12:c9:03:77:d3:b4:32:90:86:9d:7e:
c1:3b:71:cb:79:5b:3f:e5:ac:5c:a7:68:7a:9f:0b:e0:e2:d0:
56:5d:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:34 2025 by rpki-client