Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: GJoM8cW2TtVGLr/bZ7fMhRDoWWQ5eWC58jDOR3Kl79E=
Subject key identifier: 09:82:72:E8:50:BF:46:23:DB:86:9B:A4:B0:00:12:C3:78:8A:80:7E
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 03:54:19 +0000
Manifest this update: Fri 31 Jan 2025 03:54:18 +0000
Manifest next update: Fri 07 Feb 2025 03:54:18 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: upi5Wn96ERlY0srCDQOHoMrdkjf95Ng7L0Hp4qfqdKQ=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Jan 31 03:54:18 2025 GMT
Not After : Feb 7 03:54:18 2025 GMT
Subject: CN=679c496b-026a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:71:0f:79:e2:da:90:55:d0:3f:2a:cd:e1:
c9:e2:7b:e4:18:a2:35:7b:96:82:b8:09:74:90:f5:
2e:9b:22:73:ca:19:92:e4:d0:a1:3b:7a:0c:c4:70:
7c:b4:48:16:a7:a9:f6:41:29:c5:c3:63:fe:3a:9d:
e5:46:73:83:97:e8:e3:65:00:49:43:b5:4f:54:13:
aa:c9:2b:4a:c0:6e:7f:3b:08:e2:90:69:96:6e:e0:
f1:04:e1:a9:0a:04:f1:8a:5f:1b:5e:6c:82:a9:bf:
51:fd:28:00:c2:d5:c8:44:d8:68:03:83:32:76:6a:
5a:10:22:68:42:60:ed:58:7e:28:a3:f4:87:0f:10:
c6:e3:ff:34:fc:f3:63:95:d1:f4:44:dc:26:22:f2:
f3:14:ba:69:b1:fe:67:a5:83:63:88:e0:ee:a6:ce:
75:22:64:56:27:82:5a:42:d0:b7:ff:83:eb:09:50:
2c:49:14:b1:0a:eb:f6:b0:35:b5:d9:b9:be:0e:21:
24:73:9d:03:6e:1c:39:33:e1:21:7a:5e:1b:69:ca:
55:c5:79:38:41:84:5b:93:98:7a:3f:0a:35:f0:1b:
16:f1:94:7d:02:f2:22:e1:41:3c:14:19:9a:67:fd:
32:02:1c:ef:72:8b:c8:4c:30:d1:db:29:d4:13:62:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:72:E8:50:BF:46:23:DB:86:9B:A4:B0:00:12:C3:78:8A:80:7E
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:45:c3:aa:b9:9c:0d:64:dc:97:c8:c8:99:33:34:9a:8e:
d0:64:5f:c6:b7:70:b5:88:7e:57:86:09:1a:3e:2f:b0:55:49:
9b:e5:3e:9e:7d:f9:a0:2c:17:25:a7:fc:43:94:45:8f:03:24:
2e:c0:41:13:9b:e9:32:41:85:13:e5:61:8c:07:39:c9:6a:d8:
30:59:f3:89:59:b4:c5:c2:78:71:2e:6d:34:dc:e0:d4:87:c0:
31:20:f3:ab:15:1d:25:2f:14:d7:b9:a0:a9:f2:87:a4:f2:f9:
1c:db:79:03:cb:4e:41:2b:eb:3c:5d:3f:24:de:d6:97:34:24:
74:8c:b3:25:3c:d3:2d:45:2e:45:bc:4f:3a:8a:54:29:f7:6a:
f4:f9:ba:8d:98:26:35:e8:e9:2c:c5:cd:f5:2a:ae:38:76:d2:
0e:04:b3:e8:78:dd:a6:f2:e4:49:47:90:39:c2:b3:4c:ee:25:
28:8d:31:69:d5:5c:b5:39:ce:b6:a9:9f:0b:99:2c:93:8a:09:
1f:0a:48:76:d0:00:ec:31:3a:83:20:f8:cf:28:42:d2:5f:c8:
3e:d0:b6:cb:83:18:e0:da:ad:d7:eb:f2:c4:bb:8a:95:4a:a0:
42:df:e7:90:14:c3:82:f9:80:3e:0b:f4:93:45:f4:11:e0:74:
3a:0e:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:42 2025 by rpki-client