Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: cuQDBwx3XiRBP7R5iV118o+G8pq7siUKxYCGwr5ZfmU=
Subject key identifier: CC:FE:D2:9D:63:55:9D:30:19:5C:C4:A2:C1:77:D7:D4:CE:1C:CF:11
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 12F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 12E3
Signing time: Fri 31 Jan 2025 17:03:41 +0000
Manifest this update: Fri 31 Jan 2025 17:03:41 +0000
Manifest next update: Fri 07 Feb 2025 17:03:41 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: TUy+vlZTV8dIUd+nXt3TGrCScFyqQCve1SqcTMaYppc=)
2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: Ahb9X8aGkM4hgOjSkOVMY4nk30td0okGRRUIVN6nUDA=)
3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: a0NH5wp4HNks2+m4hfx7zhLI5guHxytTYFO6xK/58YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4855 (0x12f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Jan 31 17:03:41 2025 GMT
Not After : Feb 7 17:03:41 2025 GMT
Subject: CN=679d026d-ab52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:74:dc:f2:a8:82:d3:c8:48:33:11:cc:10:
cb:da:b6:15:ed:db:95:8c:3b:ae:bc:62:cf:7c:4a:
0f:ce:a2:1f:8f:f5:53:09:05:5d:73:c7:44:8f:6c:
c2:56:b9:03:c8:04:42:27:d6:6f:bd:1f:7f:b4:5d:
ac:f5:d1:f7:ce:d9:bc:aa:0a:b4:7e:ed:be:0a:9d:
30:23:5f:32:0d:55:27:d3:ac:80:e8:fa:49:d2:30:
55:2a:96:25:e4:19:f7:6a:08:de:b9:dc:93:2d:fb:
2d:e3:fd:3c:41:60:b6:95:6f:76:02:cf:7e:62:c7:
67:ff:e7:ef:0b:23:fd:61:e3:e2:13:38:0e:66:8d:
58:39:99:5f:d8:83:37:dd:2f:07:52:f4:0f:ca:96:
2f:61:77:7d:ec:14:0c:49:8f:b8:fe:05:ef:67:7a:
5a:d1:01:76:36:ce:69:49:98:87:c5:d5:f2:a8:e3:
90:cc:2d:81:65:f9:17:e3:73:02:6c:91:f7:3c:f9:
70:6e:1c:a9:f5:7e:db:dd:a6:e8:c5:20:ca:54:9e:
1e:5d:29:6a:9d:0f:90:80:12:9a:16:d8:89:a0:3d:
04:b0:c3:6a:1e:8c:d3:8e:02:43:23:e1:e0:b3:58:
ba:7e:66:c1:49:23:62:67:ff:47:07:fb:a4:23:70:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:D2:9D:63:55:9D:30:19:5C:C4:A2:C1:77:D7:D4:CE:1C:CF:11
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:05:d5:a2:e9:dd:90:38:eb:44:9a:c1:cb:09:d3:47:b1:
56:58:51:a3:39:bd:97:6a:e8:dd:63:cd:56:73:44:94:50:ca:
f2:05:66:e7:7e:e3:28:3e:1d:81:ce:9d:d0:84:52:c1:8c:b4:
21:8b:9c:3f:ae:c1:91:38:ca:27:ff:34:14:72:a7:b1:c0:79:
b4:b6:c0:17:26:f9:2a:0d:b2:c0:33:33:77:56:4f:36:d4:38:
b6:11:12:6a:fb:04:15:9a:9f:a5:5f:f7:36:e0:01:ce:ac:b9:
3e:7e:e5:83:8e:5b:7f:9b:e0:b8:de:15:5b:87:2a:dc:00:87:
f9:d7:53:23:ac:39:70:8a:21:34:74:bd:d4:1d:de:ef:52:0d:
d3:ed:2b:ed:01:bb:11:09:15:f3:d4:3c:56:e8:9a:51:c7:49:
76:d8:fc:ed:f5:2e:33:70:8f:6a:f9:9d:80:d8:44:3f:6a:ec:
5f:45:b0:ab:11:ed:67:b5:d4:e5:91:72:4f:e6:cb:be:a7:37:
ee:c3:52:9d:0d:d7:46:a0:f9:d8:5f:a7:0d:07:30:50:e0:0b:
56:0d:9a:f3:df:43:90:29:d7:fe:77:0f:56:95:09:58:3c:65:
91:9b:43:5a:ec:7c:f7:46:39:43:83:fa:12:1f:8b:14:9f:4d:
f6:af:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:49:11 2025 by rpki-client