Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier: Asu8XGktmotTUMdSVM2N0VAUJ7jXYrJl7RKua41K1WI=
Subject key identifier: 1B:7F:1B:18:F7:6B:A6:56:99:FE:02:2E:9D:55:63:CD:FC:4D:32:45
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0AD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number: 0AC9
Signing time: Thu 30 Jan 2025 19:33:08 +0000
Manifest this update: Thu 30 Jan 2025 19:33:08 +0000
Manifest next update: Thu 06 Feb 2025 19:33:07 +0000
Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: i29cG3t41tQkp7ycwyN2BrHayZfoiKACdDK4zBdLue4=)
2: 9E5AF612533C11EAA9A27E3BC4F9AE02.roa (hash: 89nx6FtRGafpjrrGSCdK+2mjcNeSm3JlU4e4pH3725o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Jan 30 19:33:08 2025 GMT
Not After : Feb 6 19:33:07 2025 GMT
Subject: CN=679bd3f4-0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:ae:7a:a0:5a:d8:76:37:69:20:fd:3c:5c:
93:30:0d:56:d0:3f:4f:69:03:b6:3e:2c:e3:aa:89:
da:4d:4e:0b:d7:1c:61:34:e9:f1:0e:a6:63:c9:f8:
86:06:77:2d:1a:f8:63:b7:a9:77:7d:45:4f:55:f2:
f0:32:05:de:3b:ae:e1:7a:02:d4:5a:cc:7a:84:04:
a2:a0:df:fa:5c:41:66:ff:d4:96:24:c9:00:ec:30:
dd:e5:56:36:70:2f:47:d0:71:75:b7:08:3a:f8:98:
21:d1:0b:3b:77:f2:3a:95:67:b5:5f:9e:b7:0d:9b:
e0:97:e0:ac:12:94:a6:d3:28:0e:ed:6f:c2:00:9b:
2d:45:49:74:29:d3:c1:d9:9f:15:75:cc:b5:a0:c1:
23:9f:db:54:d9:02:28:e0:e6:38:70:2a:f3:95:4d:
88:ac:36:39:3a:23:4a:9f:97:d1:2c:bf:9c:81:09:
cf:a0:40:bd:65:f4:6f:87:5d:2f:b8:88:c4:02:f4:
2d:74:47:33:51:d1:c3:56:57:69:fd:72:e4:da:a8:
b4:0a:ba:9d:be:93:e0:64:ad:cc:61:27:b5:43:62:
9d:73:be:5a:04:43:1c:a4:3f:54:35:9e:81:d1:9c:
1b:22:b0:c2:a4:c0:a9:1e:18:bb:be:d0:38:aa:d5:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7F:1B:18:F7:6B:A6:56:99:FE:02:2E:9D:55:63:CD:FC:4D:32:45
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2a:f6:41:82:38:c1:56:ee:e6:e1:f4:96:41:05:83:af:87:
ea:72:47:cd:7a:08:99:a0:9e:07:96:0e:f6:84:1d:4e:14:dd:
a9:87:c7:20:55:54:a6:b8:22:c0:ce:be:43:40:49:98:d9:28:
e9:d9:0c:cd:15:14:db:d6:92:f4:3e:0a:91:6b:89:9c:8c:f1:
d6:41:ac:05:6b:e1:a5:2d:de:1d:8b:7a:6c:d4:df:17:6b:7d:
3d:b1:19:97:8b:f2:34:68:86:22:27:e9:a1:2a:8c:7d:e8:23:
cd:63:fc:4d:98:02:dd:98:9a:59:36:d3:9a:de:aa:f1:4d:4c:
e1:11:d8:54:c0:1b:01:6a:01:0f:e9:43:36:cd:b7:7f:45:17:
f6:06:8f:0a:da:38:bf:94:16:86:d7:98:0e:f7:d6:d0:cc:47:
85:d6:a7:06:ba:2d:04:63:0d:56:8f:c1:1f:63:36:b3:1c:6f:
8e:47:19:79:08:23:5b:de:e1:c7:63:d3:25:4e:93:69:6f:1f:
4a:19:40:b1:d5:12:94:00:af:78:60:f6:de:7d:16:a8:36:09:
66:df:40:36:47:2a:46:94:f5:57:20:a6:03:e2:59:9e:e6:9b:
b0:15:d6:87:7a:bb:04:fd:85:f1:22:1f:30:a1:89:47:65:f7:
2c:e9:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:40 2025 by rpki-client