Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json)
Hash identifier: eRzIXiI7bu939i74kARTi+S42PcRDDm5cKTf+e4/8l8=
Subject key identifier: FE:C6:A1:4A:7A:B5:22:6D:63:67:BF:6F:7A:F2:09:BF:F0:9D:68:E2
Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
Manifest number: 25
Signing time: Fri 31 Jan 2025 06:56:47 +0000
Manifest this update: Fri 31 Jan 2025 06:56:47 +0000
Manifest next update: Fri 07 Feb 2025 06:56:47 +0000
Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: VN08AKqV74RBTi+6bxiPY7BX8lJThy19dvbSBuOlyek=)
2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Validity
Not Before: Jan 31 06:56:47 2025 GMT
Not After : Feb 7 06:56:47 2025 GMT
Subject: CN=679c742f-002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:ad:30:87:eb:4c:0c:11:0f:e0:25:f5:7c:
51:1e:05:ae:ed:7f:d3:b4:9c:90:3c:e8:66:0e:bb:
53:f0:c8:0f:be:97:d4:ee:fc:53:f2:f7:69:52:7a:
40:2c:77:3b:26:fd:6e:72:1c:f3:41:47:db:d0:1b:
a9:52:58:8c:b9:6d:23:6b:58:a6:7b:49:21:dc:2d:
99:e9:cf:de:ee:c2:ea:8a:0c:f0:e8:2c:37:81:02:
54:b0:8a:7c:a3:c6:51:aa:bf:c7:9b:76:22:f7:ed:
6b:f1:fe:7a:3b:89:2d:9b:3d:7e:42:5e:40:3d:d8:
3a:f3:3e:c3:4f:f8:a0:ba:ce:30:62:79:bd:c2:9d:
80:2a:59:3d:1b:20:98:b3:ba:e0:71:97:8d:79:4f:
2d:2d:31:fe:ec:8c:ee:60:59:03:d7:a1:3f:2b:d6:
95:e9:99:f0:94:1a:54:c8:d1:51:08:97:b5:6d:21:
06:90:0e:34:69:16:89:55:d2:c3:24:8c:81:15:d3:
b6:7d:04:0f:0d:55:ca:38:e6:3f:14:a0:55:91:a3:
f4:45:0a:61:c1:5f:51:5c:cc:e5:d9:b6:5c:b7:c4:
2b:b6:69:90:85:27:5d:10:c0:6b:72:73:fb:ca:47:
e7:f3:39:7e:7a:9c:d7:46:95:2f:b1:6a:5f:f1:80:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:A1:4A:7A:B5:22:6D:63:67:BF:6F:7A:F2:09:BF:F0:9D:68:E2
X509v3 Authority Key Identifier:
keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:1f:bd:e8:6b:73:39:59:43:0e:bc:f6:0c:a4:92:6e:7a:06:
f9:68:c5:64:99:62:09:b8:1d:4d:46:b8:bd:ce:c1:26:a7:e4:
93:c3:46:3d:72:70:11:d1:14:3e:78:ea:ed:ce:77:72:a7:49:
58:a0:9f:d5:c3:be:77:ae:51:9f:f7:1d:91:58:ff:5f:65:86:
f3:ec:c4:33:78:ce:62:98:ae:6b:9e:ba:60:8d:f8:63:e0:5b:
ea:05:39:44:b0:3d:a9:00:b3:dc:e4:4d:6c:cc:30:63:9e:0a:
6e:1b:2e:40:a8:f4:a9:04:d4:0f:87:1e:8d:e4:68:76:22:8c:
9a:73:43:d6:14:4d:13:ff:50:7e:e6:44:79:27:4e:46:8d:fe:
9e:35:a6:31:a0:0d:08:64:ac:6d:7a:a6:43:c2:c8:39:3a:24:
3c:ae:0b:76:e2:9b:cd:b7:9c:28:a5:6c:51:79:9c:f7:83:37:
77:11:c0:b5:a5:31:87:13:7e:af:bc:67:46:56:b6:02:57:8e:
53:a4:0d:36:02:e1:4f:60:ea:4c:71:b9:62:5e:81:7c:ba:d8:
7b:9d:e0:42:27:96:97:11:71:f8:30:ab:75:9f:04:b3:58:b9:
2d:91:5a:2e:9f:4d:30:61:f9:57:00:38:30:b6:ec:2c:c2:8a:
f5:31:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:55 2025 by rpki-client