
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json)
Hash identifier: ThhNmK2mtHR10pFIMfmuEtKyOANX4v3SYJwvukvJYUY=
Subject key identifier: 2F:1A:67:1C:BC:3C:08:D3:5E:97:17:81:7A:7B:D8:8F:34:A7:8B:AF
Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A
Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A
Certificate serial: 04D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
Manifest number: 04CD
Signing time: Thu 30 Jan 2025 23:53:22 +0000
Manifest this update: Thu 30 Jan 2025 23:53:22 +0000
Manifest next update: Thu 06 Feb 2025 23:53:22 +0000
Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: tnmZLxrPhEzzkWmTGqDWxU8zaRwFiIqVTuDD2Xb6t+M=)
2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: rVSuRgzwSSh8GvKjFbVO5KBlpGlmt2sbJHlM6WMDYjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A
Validity
Not Before: Jan 30 23:53:22 2025 GMT
Not After : Feb 6 23:53:22 2025 GMT
Subject: CN=679c10f2-2c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:f4:0b:32:46:b9:2b:c2:e3:19:a6:58:23:
0a:3a:b3:fd:03:68:38:6c:92:71:19:24:4b:c7:f6:
bf:91:0a:92:3c:03:30:c7:40:fe:44:c3:6d:6a:5d:
31:6e:2f:1f:a6:2b:13:fa:d9:03:bb:c9:a0:24:23:
a7:c6:d9:fa:11:ff:e5:77:bb:57:3a:18:60:ae:af:
c0:c1:93:3f:06:e9:f9:f6:36:1a:3a:8c:f3:d2:be:
16:0d:23:ff:0d:12:29:6f:ae:bf:11:f3:4a:24:65:
de:86:90:08:2f:0b:7d:fb:87:7d:41:a0:67:73:a4:
ad:17:ee:23:35:df:f2:31:d5:0e:b9:57:3c:2f:22:
c7:6a:39:15:30:26:7b:f7:3d:32:ae:c8:84:7f:ce:
d2:90:41:7e:74:02:4f:a9:6c:fe:f6:53:aa:d4:e1:
64:13:e5:fc:d6:4a:53:66:19:69:63:16:63:2b:05:
2f:16:1f:3f:73:a9:34:5a:52:4a:f7:e4:6c:03:de:
2d:3d:59:64:b9:d7:66:f4:56:1b:67:58:3f:ee:2f:
25:6c:21:49:88:fb:ee:f4:80:8d:73:7b:8d:56:13:
00:4a:38:37:40:38:03:64:e1:44:e3:dc:d5:4c:fa:
b3:5c:07:76:e2:30:f9:5d:07:b0:eb:ac:cd:d4:e3:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:67:1C:BC:3C:08:D3:5E:97:17:81:7A:7B:D8:8F:34:A7:8B:AF
X509v3 Authority Key Identifier:
keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:22:5c:9c:e0:ac:3e:92:18:da:87:9b:59:9b:41:f5:d5:
96:1f:f9:86:cb:70:0a:c3:2d:97:3d:3b:1e:3d:d3:c7:86:ad:
b6:e7:bc:1e:55:e5:24:e5:38:72:ea:ae:2d:4f:89:e8:a5:e6:
12:ef:67:31:fb:f8:ed:e2:66:dd:05:f1:71:c2:03:9e:a0:22:
43:ed:3a:07:e8:0c:ad:6c:68:37:9b:6a:2b:fd:0a:92:d9:af:
73:f8:18:c2:78:1c:a2:c0:5f:eb:b9:5b:c5:bb:e2:4c:de:a8:
ea:26:dd:cd:37:d3:96:66:69:a5:6a:92:77:f2:c7:10:2b:a0:
87:1f:76:8d:7b:29:ff:88:37:3b:14:ed:8c:9a:2b:c2:ad:f8:
d4:45:75:c3:a5:4e:32:aa:bd:77:de:bb:15:b5:f4:21:06:c6:
11:23:32:a7:6d:c4:74:cd:58:77:39:c8:0a:d4:3e:3b:51:82:
f1:6f:82:22:08:99:a5:d9:6f:25:cd:81:3d:7e:ce:e1:ba:6e:
d5:e1:7e:69:29:5b:ea:f1:91:47:dd:e8:27:ca:7b:3b:02:bf:
a6:24:51:e2:5e:52:c5:2e:b7:f8:48:ac:e8:19:6e:55:63:6e:
be:60:01:d1:05:a4:28:7c:66:29:d1:5a:82:b1:bd:f4:c2:9f:
49:a6:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:59 2025 by rpki-client