Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier: 5/vGFQJE8jrpfyPv3Ip310k0bdUZ/e/F81deqrfmlAc=
Subject key identifier: A4:FB:82:84:F1:50:1B:CC:04:E9:3F:96:BF:CD:91:6A:A8:CC:DD:E3
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 0752
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number: 074D
Signing time: Thu 30 Jan 2025 21:32:01 +0000
Manifest this update: Thu 30 Jan 2025 21:32:00 +0000
Manifest next update: Thu 06 Feb 2025 21:32:00 +0000
Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: l4vICMda8zOIVzVoywNyyZopy8Zt1NiWIYFZWRj1Uz4=)
2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: IvwVD4Q9iLuwpemzgQpr7lRPiWqlqg1E9p3bOADAod8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Validity
Not Before: Jan 30 21:32:00 2025 GMT
Not After : Feb 6 21:32:00 2025 GMT
Subject: CN=679befd1-58d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:46:dc:9f:6a:66:2a:d9:39:c9:87:d2:bb:
a7:5a:e3:cf:a1:41:38:2b:71:26:f7:80:eb:7a:40:
25:36:5b:50:ab:8d:0b:3e:98:3e:ba:f1:88:e9:15:
fd:7d:a3:52:dd:ca:f0:eb:38:6c:8c:e0:b5:3d:00:
4f:65:85:0f:e4:1e:95:c5:d0:00:a5:44:d5:95:8b:
4d:2e:20:c8:50:22:c2:ce:96:e6:75:0b:f5:5d:e7:
a1:b9:a6:89:e5:2e:6a:50:1e:af:61:b1:3c:5d:81:
7f:df:bb:d4:e6:2a:35:05:6d:b3:dc:07:d9:86:af:
d6:6a:de:a5:09:0f:20:4c:10:73:9b:a8:36:fd:1a:
61:fb:34:a1:f8:c5:11:88:a4:c4:f4:d6:55:e7:a3:
1b:d9:a0:1a:b1:e4:6d:2e:b6:9e:c7:73:90:c9:9e:
a7:ac:0f:35:76:89:cf:c6:ee:76:29:3d:32:cb:70:
a7:20:31:b3:8d:6a:cd:1b:62:ec:1b:d1:d4:64:68:
b4:d7:b7:4d:05:41:a8:0b:de:70:80:62:a1:d8:73:
12:e2:25:54:46:16:7b:50:b9:92:9c:78:5b:b7:72:
27:5d:80:1a:d7:63:2b:88:8f:2d:75:83:ca:b0:4b:
0d:2c:29:43:6d:39:d1:87:f3:69:32:1c:c8:69:21:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:82:84:F1:50:1B:CC:04:E9:3F:96:BF:CD:91:6A:A8:CC:DD:E3
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:87:1e:7c:07:67:90:8a:87:91:12:7b:b1:ed:b3:c3:da:cf:
80:42:13:e7:a9:1d:5c:51:b3:fd:a4:e1:ab:56:ac:49:9e:f6:
d9:31:6c:6e:0c:37:07:ed:14:2b:e9:8e:16:40:50:ac:5e:8e:
83:54:41:88:f2:95:e5:bb:bb:d5:55:fa:ff:80:19:c8:93:6c:
44:25:4c:24:98:3e:20:6e:12:44:c5:a6:97:13:43:c4:21:5b:
00:73:e4:64:ce:4e:45:7a:7b:53:0b:48:0e:74:4f:fb:48:ce:
cb:8e:55:85:27:a2:87:17:b3:14:6e:83:ff:0b:d1:7e:cd:d6:
4a:c2:82:28:14:3a:49:33:66:56:77:a5:fb:9f:f0:b3:03:44:
70:31:11:c6:a2:d8:33:4c:5d:87:c3:8c:c4:96:b7:2d:b9:c3:
10:5b:b0:98:cf:30:52:70:75:ad:af:96:54:2f:fd:96:e6:f3:
ba:39:e0:aa:81:74:3e:5c:71:96:d8:50:0e:4a:ca:f5:9c:4b:
51:61:a6:c6:66:9e:a5:c7:7b:ed:a3:42:97:7c:b8:b6:af:44:
8e:d5:1f:da:c9:37:ac:7c:09:92:f2:17:3a:b3:bd:d1:2b:fc:
02:63:5f:c5:3a:dc:0b:65:b8:aa:ff:9e:20:0a:78:b4:b4:c5:
2e:b5:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:07 2025 by rpki-client