Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: 8thLMpoHwX9Jppn0pI3zDkPmZQ/o4Cp6eOY77oW3zD0=
Subject key identifier: 5A:03:E3:76:F5:DB:A0:98:F0:88:F1:A8:32:D1:F5:1F:07:47:A7:87
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 0481
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 047C
Signing time: Fri 31 Jan 2025 00:06:26 +0000
Manifest this update: Fri 31 Jan 2025 00:06:25 +0000
Manifest next update: Fri 07 Feb 2025 00:06:25 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: OGYm1e92fdU6Q2K3CkZ10EWacWFGeDbirmpdJXvpl8o=)
2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Jan 31 00:06:25 2025 GMT
Not After : Feb 7 00:06:25 2025 GMT
Subject: CN=679c1401-c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:00:b2:dc:c0:fb:aa:12:08:d1:24:24:f1:
db:96:73:10:0e:26:82:41:f1:30:f1:55:a3:b2:c1:
ef:04:23:09:f8:f4:2d:f9:96:ff:6b:1a:00:96:ab:
c9:1c:24:94:7d:1b:fd:5e:ee:f5:ab:a7:30:1c:bf:
2c:42:40:84:dc:19:16:05:6c:c6:46:c2:fc:97:9d:
c3:3f:b3:78:57:86:57:fc:dc:69:22:15:ca:19:30:
7d:bc:6b:3d:fc:0d:b4:57:a8:5e:71:03:2a:9c:5e:
39:88:f3:96:92:72:5e:63:7a:f9:fa:0d:78:f9:27:
1b:80:1c:90:43:50:55:1b:2a:ac:08:ac:be:47:54:
6d:16:a9:da:a0:5c:13:74:bb:ab:4c:55:13:f4:db:
36:18:23:5f:4c:ee:d6:b5:95:55:1a:f4:bd:09:27:
7c:e3:fc:f8:49:17:be:37:70:61:28:62:9a:68:b3:
a4:ee:a1:4f:62:17:b4:11:85:c3:86:b2:23:f9:bb:
66:af:2b:39:60:de:c4:20:3e:82:1f:4d:3f:fd:bc:
37:1f:37:29:e8:b5:eb:8f:d7:a6:30:c2:15:f2:f8:
7c:bb:bb:5d:96:c8:07:d2:6e:f5:d0:56:c0:3c:27:
5b:f5:71:2a:0f:b6:21:02:9a:7b:d3:85:58:01:90:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:E3:76:F5:DB:A0:98:F0:88:F1:A8:32:D1:F5:1F:07:47:A7:87
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:eb:5f:da:e6:c3:70:91:54:81:7e:d8:17:a6:5c:9e:fd:
e2:80:fc:cf:1b:b9:fb:4e:16:cb:89:ab:b8:6d:34:37:33:87:
0d:8f:84:00:b6:4a:29:51:80:21:8c:3e:0d:23:68:4f:4c:cf:
9d:f0:b6:b3:41:29:b0:59:89:6c:cc:0c:8a:a7:14:4b:7e:8b:
4b:7c:50:c2:f3:ce:cb:87:e5:40:80:d9:88:64:be:30:b3:41:
72:52:fe:68:63:33:3a:02:22:2c:3d:09:84:64:6e:3b:6b:e2:
fd:f2:68:b8:5f:5e:f0:d3:ad:6b:f0:ae:9d:e6:fe:82:50:bc:
04:64:5f:da:71:d8:90:a2:b4:19:53:f0:1b:8a:06:42:23:7f:
07:16:fe:07:39:9e:a6:89:21:6b:ca:8c:8e:d0:b1:07:f4:58:
78:3a:1a:5c:d5:93:3b:31:10:7f:64:05:10:9d:b2:d3:37:48:
71:00:1b:82:80:31:17:12:7e:26:71:f8:12:b7:c9:8f:8e:54:
8b:a2:3e:92:52:4f:6d:87:74:54:f7:3d:05:46:b8:1c:05:17:
fd:6c:a3:09:20:b8:89:ff:80:b2:50:7f:1c:10:3a:66:0e:c9:
95:94:ee:4c:6b:80:93:74:48:8a:50:9d:f0:27:31:05:94:f0:
39:0c:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:42 2025 by rpki-client