Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: hVLGgZokar3WzeOrkF2UCYbYeqHSOwijOLXoNYuz0lw=
Subject key identifier: F9:AF:FE:DA:E8:88:B5:2B:09:FE:B8:AC:F5:E1:BB:79:9E:D1:15:EE
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0AEA
Signing time: Thu 30 Jan 2025 19:22:13 +0000
Manifest this update: Thu 30 Jan 2025 19:22:13 +0000
Manifest next update: Thu 06 Feb 2025 19:22:13 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: Y3Lv8cSs/sRY1SZx0DZ6APma1A1DAKaoEK+PAolH2O4=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yUzUPNwrnnqA9y2QcEn+ohx6QfzL71Dl4zwJAGApA/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Jan 30 19:22:13 2025 GMT
Not After : Feb 6 19:22:13 2025 GMT
Subject: CN=679bd165-259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:a2:62:37:6c:38:08:2f:11:bb:b4:f9:78:
9f:e0:b4:05:54:12:57:cd:16:a1:8b:ca:4c:5a:71:
a6:c2:77:57:7c:d9:68:c1:62:0b:4e:2a:93:7c:d8:
d5:5c:d9:7d:1f:25:17:6b:31:24:32:5d:10:53:52:
c3:47:7b:e1:05:d3:91:46:ce:36:2c:6a:62:26:66:
77:5f:61:0f:86:16:57:52:75:0c:09:68:a1:da:f7:
41:b1:68:7b:c5:3c:22:58:0e:91:94:1b:33:14:f7:
2b:74:2b:e0:f5:6f:c7:1b:37:12:49:40:39:2a:b0:
af:b3:5a:9d:ba:12:93:e7:e2:e4:30:47:1d:73:83:
4e:fd:f5:a0:c8:8f:1c:55:ff:1b:cf:51:7f:5d:29:
bb:eb:e2:b1:31:93:2a:2b:ca:2a:c6:8e:ff:bf:27:
ab:aa:71:63:17:ca:32:5b:15:1b:11:02:15:66:a8:
6c:eb:2e:54:ce:a8:d8:fb:a4:f4:94:61:ae:1a:5f:
2b:06:ce:38:5e:90:1f:74:b3:8d:79:68:3f:12:0b:
11:3e:0c:03:e7:25:b6:52:68:a4:19:71:b7:e1:ad:
46:b9:5d:24:a5:e9:86:48:c3:e1:74:be:2b:e8:0a:
62:b7:1d:ce:5f:44:26:d3:f6:0b:8d:bb:30:f2:79:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:FE:DA:E8:88:B5:2B:09:FE:B8:AC:F5:E1:BB:79:9E:D1:15:EE
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4a:49:11:68:8e:04:d2:dd:a2:94:b8:bf:d3:c5:ec:55:04:
3b:34:b7:8f:f8:14:0e:9b:74:5f:4c:8d:3c:91:71:fd:14:4a:
bf:d9:8c:5b:80:75:15:47:6f:61:3e:f5:bf:63:01:5e:e4:8a:
7a:f9:f0:3d:8e:f1:93:8d:8f:0b:6d:83:1c:fd:54:fc:da:98:
b7:4c:37:71:85:61:9a:6a:83:70:fb:1b:d5:fe:01:81:c0:04:
0b:3e:fb:36:98:6e:8b:32:9e:9f:8d:9f:e7:54:ab:02:d4:34:
e6:7b:36:f0:cf:f9:34:79:c4:08:92:1a:ce:8e:e0:cf:c5:04:
82:08:b0:4e:ea:9d:3f:b2:3b:72:01:1e:0d:76:e7:a3:01:b9:
11:6e:0a:b1:f8:58:85:78:30:3b:19:f3:28:42:82:06:f1:b1:
71:c1:fc:75:41:0c:d2:5f:e9:2c:09:fa:2c:bd:ea:86:18:25:
78:84:dd:37:73:56:1e:82:11:84:4c:ee:02:f9:ad:b1:4d:3c:
4e:f4:3b:80:1d:92:14:e2:87:e9:a0:d9:23:86:3d:b8:27:5e:
95:42:4d:cf:b3:f9:72:f7:fe:a4:39:c0:46:da:01:51:8d:6e:
d6:97:f2:d5:6f:5b:ab:31:27:72:97:4f:8a:8d:96:46:ce:d2:
a3:33:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:03 2025 by rpki-client