Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json)
Hash identifier: ti8UyfqovHYrQDNFLfpxr29cMUMovG21vpBomuS4iuc=
Subject key identifier: D3:82:90:2D:71:91:2A:F5:7D:73:15:E1:94:B3:F3:C2:9B:4F:51:FD
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 042E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
Manifest number: 042A
Signing time: Fri 31 Jan 2025 00:23:15 +0000
Manifest this update: Fri 31 Jan 2025 00:23:15 +0000
Manifest next update: Fri 07 Feb 2025 00:23:15 +0000
Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: gmUGYdpGYk5+A5OLqiiX63BwPfPn+g/k76kCzhMEL1E=)
2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: dphkC3ssGJ+iIglODQswGH04mVygF6iWdjby9ZvopB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Jan 31 00:23:15 2025 GMT
Not After : Feb 7 00:23:15 2025 GMT
Subject: CN=679c17f3-9bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:3e:3a:0f:83:71:b1:d4:5b:f5:65:d0:04:
46:0b:e8:d0:22:62:33:4f:eb:46:8b:a7:13:92:df:
ef:71:70:5a:e8:74:27:a6:9f:ee:d2:d5:ef:7a:85:
6a:4e:2c:5a:77:fd:19:d1:62:30:47:a7:cd:50:a4:
7f:02:d7:4a:72:56:99:a8:1a:97:60:f0:9e:03:02:
32:b2:98:41:2f:65:df:ba:07:5d:2c:4e:49:8f:04:
a5:c2:28:7a:f3:46:e4:72:aa:3c:9a:67:82:19:19:
df:2c:47:6c:11:03:07:ef:1f:d5:c2:f9:3c:c0:91:
48:6d:4f:84:77:1b:58:2b:f4:5c:1b:47:8e:c5:af:
ee:b7:e2:34:b3:48:0f:8c:b0:0c:ca:40:83:9a:96:
24:36:14:34:70:e0:b2:2a:8a:12:c1:ef:13:10:40:
41:7b:2b:41:a0:2d:05:75:42:74:e7:62:2f:93:5d:
1a:7c:d2:ea:b0:69:b9:1b:2e:19:23:66:b7:40:56:
5c:e5:4f:85:da:79:b2:9d:64:9b:e0:77:f2:e8:b0:
d8:d6:36:4a:8b:67:ff:44:40:10:95:cb:52:88:db:
60:28:ae:3c:a0:ae:6a:cb:99:2c:17:8b:5b:df:93:
ed:dc:ec:0c:d9:4e:fa:de:55:05:52:42:7c:20:77:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:90:2D:71:91:2A:F5:7D:73:15:E1:94:B3:F3:C2:9B:4F:51:FD
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:24:0f:71:9f:58:5c:13:83:5e:8d:bd:a1:ea:9f:48:98:c3:
21:c3:e9:76:5a:50:75:2b:9c:95:8a:34:95:a6:5c:68:90:c8:
77:de:a6:07:92:b5:ef:eb:12:a4:16:bd:17:1c:1d:39:d8:b7:
b0:e0:e6:ea:00:25:a3:d6:6a:dd:4c:e9:bf:d0:48:8b:d3:5d:
f4:d3:d8:3e:b1:9e:2b:47:42:9e:e2:89:4b:db:aa:7b:13:37:
5c:85:15:ff:b0:f2:dc:1d:67:4a:1d:30:a4:36:02:d0:19:63:
89:9d:e4:9e:3a:82:18:ae:6b:a1:0c:f7:2e:47:71:26:5a:5c:
40:5e:29:1d:c5:97:c1:d7:57:19:73:e6:c4:94:9b:b1:c9:66:
aa:cb:86:39:0c:74:c1:56:52:0f:c7:d1:c0:45:f0:ab:69:70:
6a:3d:b4:02:ce:87:96:ba:9f:9b:11:7b:85:e5:0e:fe:0d:e8:
e2:ec:b1:cf:e9:b2:9d:ff:04:3c:25:ca:70:c3:26:30:2b:33:
d9:6a:42:a4:dc:2e:d9:99:41:c8:9c:4e:14:aa:1e:12:aa:6d:
6c:92:67:1d:36:c3:96:cc:ac:d4:2b:d1:ef:84:b4:51:a8:af:
a8:6b:5d:9d:46:1a:21:63:79:f3:ec:35:7c:f8:7e:29:d8:9a:
b4:91:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:21 2025 by rpki-client