Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json)
Hash identifier: qdAI41VSyWlX6g6895qsbpVs3IsbR3DGK7a6LXzo6Wk=
Subject key identifier: EE:DF:1C:B0:10:59:50:BE:F5:08:62:9C:CA:A6:CD:92:45:17:60:1F
Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF
Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF
Certificate serial: 0F35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
Manifest number: 0F2F
Signing time: Fri 31 Jan 2025 17:34:20 +0000
Manifest this update: Fri 31 Jan 2025 17:34:19 +0000
Manifest next update: Fri 07 Feb 2025 17:34:19 +0000
Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: qwCVVpNdf6HS0B4WQu3NeUpu1OsntZxp0QeuHKXmjtw=)
2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 1zH3grg0ceGpDk/dZf7X9+Paneb19S8sTUxBY3dwpvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3893 (0xf35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF
Validity
Not Before: Jan 31 17:34:19 2025 GMT
Not After : Feb 7 17:34:19 2025 GMT
Subject: CN=679d099c-3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:8a:90:c6:9c:d3:5c:d1:2e:0b:21:b1:cc:
f6:64:3b:c4:c7:58:d1:dd:8c:0d:29:1e:e8:c1:a9:
e2:9e:53:06:66:e6:5c:e8:e3:1d:bd:c2:d2:6c:7e:
84:1e:c1:5c:f7:41:ac:6c:0c:7b:57:05:e6:7e:60:
8a:b3:78:98:0e:2e:1b:b8:75:34:12:6e:b6:ce:12:
64:1c:c4:9a:f7:4f:0e:ab:c1:31:83:99:60:8b:87:
93:c6:f8:1b:74:db:53:f1:fe:f7:ca:46:5f:47:0e:
81:33:37:84:e4:cc:09:c7:40:00:d2:8b:c6:7f:0d:
00:d1:ca:79:fa:7a:86:99:2b:b5:4f:d2:74:6b:ca:
e7:8f:c2:83:b6:76:84:ec:bb:00:0c:cd:a6:ab:de:
d8:f7:d0:f2:ef:c7:a9:2e:ce:89:3b:bc:1a:d4:1a:
c0:75:40:f5:82:65:05:2b:86:45:d1:70:32:1d:5f:
dc:cc:ae:ab:e0:60:31:41:de:5f:af:77:a3:bc:9b:
cb:22:63:e9:d0:50:c2:08:40:6b:3e:93:fd:fa:2f:
79:58:69:69:26:20:eb:ee:5a:7f:32:1c:fc:27:c7:
e2:55:18:88:38:13:3f:79:61:99:fb:9e:14:e6:9f:
96:c0:90:6b:28:e1:37:98:4e:b6:14:33:2a:27:70:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:1C:B0:10:59:50:BE:F5:08:62:9C:CA:A6:CD:92:45:17:60:1F
X509v3 Authority Key Identifier:
keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e7:2e:b0:3a:44:47:1f:86:7d:2e:dc:31:ec:e0:65:98:f2:
1a:e4:17:de:76:a7:ca:05:a9:fa:fa:c5:de:82:8d:e3:ae:a3:
af:6c:ba:3b:ac:c0:d9:40:f7:a9:8f:a7:22:60:f1:79:16:fd:
4a:3a:0f:52:34:73:7f:2d:68:4d:47:55:b7:97:48:f1:ad:55:
73:49:8b:08:71:6a:92:13:0d:29:86:0a:a1:ef:49:8b:92:dd:
21:28:9a:35:a8:ca:a0:20:93:24:c8:1d:96:13:36:eb:61:b3:
97:cd:5d:54:c9:03:d6:a2:54:f3:62:e6:46:a0:57:45:6e:7c:
d0:a4:94:8e:b0:33:82:fc:ab:f0:99:d9:00:40:0a:47:3d:b4:
d6:30:bd:d7:19:f5:19:06:6f:90:3d:03:2f:38:c7:97:4d:a3:
55:f1:e0:47:d6:2d:28:ce:44:32:3d:76:ee:c4:85:98:f2:ae:
bb:77:f5:ef:cd:d4:21:c4:0c:27:53:e6:e0:42:80:5d:49:17:
4a:d6:e0:90:c8:41:f6:72:b0:d9:08:47:af:8a:8e:ae:1d:c4:
b0:b0:85:c8:c1:fa:c4:07:a5:9e:8e:88:ed:86:da:3e:32:4b:
11:91:05:c0:4e:4e:7f:83:f1:c3:13:19:cf:b4:d8:24:94:07:
9d:6b:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:54 2025 by rpki-client