Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier: yc/Hu1pqmpN2B0itbB8hMD/0OhgsFNsds8AZS/xYtGY=
Subject key identifier: 36:89:29:47:0A:F4:0A:C3:29:79:17:19:99:C4:71:E8:A1:29:DF:69
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number: 01A7
Signing time: Fri 31 Jan 2025 02:29:50 +0000
Manifest this update: Fri 31 Jan 2025 02:29:49 +0000
Manifest next update: Fri 07 Feb 2025 02:29:49 +0000
Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: Wmc1vhdxfjweNMdVsUICLMvQwktGZvMpe/d45wCl9Bs=)
2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: JoMqVSrjZm4JfXMaz6xrPhG5LHTOXjmhXw4j9hZGE8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Validity
Not Before: Jan 31 02:29:49 2025 GMT
Not After : Feb 7 02:29:49 2025 GMT
Subject: CN=679c359d-0aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3f:ce:9e:ea:2c:56:c9:1b:46:07:bd:a5:d7:
16:7e:5e:c7:b4:a7:0f:0d:4a:ed:d0:a4:02:13:ab:
fc:00:56:43:ae:50:c7:54:21:66:b1:5a:c2:18:b5:
c8:bc:09:b2:37:ef:6e:62:10:27:24:18:58:3c:9a:
ec:90:e2:1a:ad:e9:da:39:d9:b1:d9:ce:e0:0c:86:
ae:0c:7c:b0:48:9a:56:4d:10:28:55:98:fa:96:af:
62:80:8c:15:9b:57:8a:9b:4e:bb:bb:a1:77:6f:34:
0a:6b:89:7e:46:a7:76:dd:98:56:0b:7f:6e:1b:ed:
95:cd:1d:5f:e3:d9:ec:8c:6c:94:3e:e1:73:2d:cc:
b3:ab:45:b3:74:04:46:d7:28:1f:29:52:f7:7d:ea:
61:df:48:81:d0:a1:a1:c6:db:f7:8b:68:4e:53:78:
31:e1:3c:75:be:a4:40:49:52:24:82:e3:8f:1a:98:
ca:e3:49:8e:cd:25:d7:84:71:c8:78:59:8c:50:b5:
35:a8:c7:a8:55:52:26:95:c7:ee:20:fb:aa:9c:a1:
a4:d4:33:c8:42:bb:cc:36:4f:b4:8a:82:d5:f4:b8:
98:57:23:e5:e9:90:9f:de:77:52:d6:fa:0f:d0:ea:
3d:ea:63:59:67:ec:48:ac:34:80:78:83:e8:c3:1c:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:89:29:47:0A:F4:0A:C3:29:79:17:19:99:C4:71:E8:A1:29:DF:69
X509v3 Authority Key Identifier:
keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:70:54:dd:df:8f:e4:98:b2:ad:88:45:15:19:ee:e4:e2:c9:
bf:06:0d:dd:de:03:fd:d9:5d:57:77:b9:3a:02:3e:47:f2:e0:
ea:3b:c1:14:5b:14:79:63:51:9f:a1:23:3c:a5:43:01:6f:0b:
d3:a1:52:16:0e:6f:4c:2f:4f:80:a9:b2:11:90:56:3a:3c:ae:
d9:71:f3:2b:72:21:4b:a8:fa:97:ff:17:4c:1c:42:f1:08:b1:
90:c5:f0:4c:32:ff:bf:c0:c3:38:b0:a6:da:5e:0e:9d:b9:76:
86:13:59:9b:b9:e3:53:96:35:73:5c:b5:1b:1e:fe:fa:86:c4:
ab:1c:b1:23:94:48:10:ce:bc:15:6c:10:bf:af:0e:83:b4:36:
2d:8e:2f:d7:fa:9c:1a:2d:d4:ae:7f:33:83:1d:10:e5:a1:09:
4a:fd:cd:99:67:07:cf:f2:8a:9c:0c:01:cd:1f:27:d1:83:3d:
d0:f3:26:45:4a:4c:b8:29:85:83:c8:c5:52:99:ce:43:75:d6:
c6:57:4e:a5:01:13:63:8e:87:32:14:a0:20:bf:50:82:dd:0d:
c1:6c:cd:f7:06:8f:9f:45:a4:c2:aa:18:bf:e0:0b:97:d8:4f:
9e:06:69:09:48:1a:d3:a8:36:dd:fa:13:d0:21:08:b8:16:4b:
2c:c2:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:16 2025 by rpki-client