Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier: VW/QCsEURg0uygqt8g/ksSvhhYWnvSjb4o9a6vKyIfY=
Subject key identifier: 8B:29:C6:DA:56:60:64:AB:4E:CC:EB:38:DB:DE:79:FD:DB:A7:B8:1E
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number: B7
Signing time: Thu 30 Jan 2025 23:43:51 +0000
Manifest this update: Thu 30 Jan 2025 23:43:51 +0000
Manifest next update: Thu 06 Feb 2025 23:43:51 +0000
Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: o8YYkrfPgDYSn+cyGxV3rUnwbdv3WEzalmRMJseIR7Y=)
2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Validity
Not Before: Jan 30 23:43:51 2025 GMT
Not After : Feb 6 23:43:51 2025 GMT
Subject: CN=679c0eb7-4fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:90:7c:3a:23:83:96:e7:e4:aa:2f:29:bd:
71:45:cd:3d:29:de:c0:98:61:9b:c8:68:af:ad:a9:
9d:a2:cb:07:39:2b:e0:b9:56:1c:b3:df:65:aa:f9:
8a:e2:9e:a2:76:b0:df:eb:11:24:31:44:40:83:c3:
e6:00:24:98:58:f6:fc:e5:aa:66:2b:d0:f7:88:6b:
f9:e7:ae:c1:8d:c4:03:3e:e3:89:da:84:3b:69:88:
c4:b0:47:75:21:0d:63:dc:a5:19:63:8a:eb:e7:25:
3d:6a:ec:41:f5:ee:8a:80:61:23:8f:91:36:b9:c4:
0a:4f:2e:1f:08:f5:cb:46:8f:17:8f:df:6f:a1:ff:
60:1c:64:8d:6e:e2:c3:e3:46:7e:3f:3e:13:11:bd:
e7:16:4b:5e:92:1c:f7:1a:45:f4:60:56:8a:e8:1b:
1e:a2:52:04:bd:18:fd:9e:d7:ae:83:1a:b1:55:3f:
6d:34:bd:cb:d2:5f:7d:21:5b:b9:34:48:6f:51:ae:
6b:09:ab:6c:47:b0:91:b3:41:51:85:4f:3a:63:fc:
ff:aa:70:3a:cc:a8:10:3c:e5:61:42:9e:28:f1:04:
d4:82:67:5d:60:81:9d:3e:a1:d9:67:c7:88:7a:ab:
f7:73:84:e7:4c:f8:57:14:e1:ee:6a:73:5f:80:ad:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:C6:DA:56:60:64:AB:4E:CC:EB:38:DB:DE:79:FD:DB:A7:B8:1E
X509v3 Authority Key Identifier:
keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:81:f0:df:f8:28:76:c0:24:a2:fb:00:86:ec:d6:c6:83:
89:57:12:8e:e4:e2:b4:b0:de:c0:3a:50:7b:3b:5d:c5:99:eb:
57:22:56:b1:6e:fe:e4:f2:66:9a:e6:16:42:43:01:56:a6:13:
7a:64:08:d2:79:6f:b3:f5:3e:9d:01:59:12:4d:6d:53:71:32:
9a:cd:8e:f2:f5:27:fb:cc:77:18:4d:2c:5f:27:70:57:44:ed:
d4:dc:15:c6:ad:37:97:e3:c1:73:c9:bb:63:2f:ef:28:c3:af:
05:65:38:26:29:df:6d:01:6c:9a:4a:ad:51:f7:46:08:73:ba:
65:83:6d:25:60:88:f8:30:4b:63:9e:ed:66:5b:0f:1e:1f:d4:
2c:f2:e9:8c:1a:52:40:68:16:3c:33:38:0b:f7:6f:b5:af:8c:
5d:49:3b:d7:7f:c3:8a:d8:f5:01:3a:ba:eb:2c:cc:e0:4c:10:
23:14:f2:0e:25:13:f0:23:6e:df:8f:75:d4:64:02:7a:4c:d9:
e4:0c:9f:0f:b1:c4:95:50:1d:c5:d6:65:3e:b4:15:a6:39:6c:
a9:de:5e:8f:7a:7b:c3:95:0e:77:9b:04:57:57:47:e9:80:44:
0d:10:a6:71:db:ea:1e:60:14:f7:8c:35:68:ad:44:8a:d5:35:
5d:a7:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:41 2025 by rpki-client