Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier: RH6KLCHsbiE0Gl5vjBVnsxkaFvJk9ssk7tp6+xqU2hM=
Subject key identifier: C8:F3:32:1C:60:03:4C:FF:94:DA:33:AF:C2:4D:B5:5D:F7:4A:C0:B2
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial: 25D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number: 25BD
Signing time: Fri 31 Jan 2025 15:44:21 +0000
Manifest this update: Fri 31 Jan 2025 15:44:20 +0000
Manifest next update: Fri 07 Feb 2025 15:44:20 +0000
Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: OAn5bg8HDWfrnB9zjFB5p7FFxs02NoK1+NF0p5ClgdM=)
2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9684 (0x25d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Validity
Not Before: Jan 31 15:44:20 2025 GMT
Not After : Feb 7 15:44:20 2025 GMT
Subject: CN=679cefd5-db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:a1:1c:f5:9b:41:8c:c7:0d:d2:2d:4a:cb:
76:2c:80:f3:e1:39:6b:c5:9a:70:14:62:b3:95:b2:
76:72:5b:f3:69:a6:43:f3:16:4d:b5:c0:a8:25:26:
ec:ca:47:ce:4d:f2:18:19:53:8e:82:3e:a9:af:1d:
3c:44:5c:99:c4:b1:8b:88:ba:2b:71:4f:f0:61:81:
30:0f:1c:af:0d:bf:78:a8:3e:89:3e:bc:82:af:72:
be:2f:79:9d:8b:89:e8:eb:d0:eb:e6:96:36:bc:4d:
ce:b7:cc:2d:19:ab:c9:d7:f5:f1:86:04:33:6e:bd:
70:44:ea:c9:cf:02:ee:ce:09:64:ae:4b:07:14:b4:
01:22:4b:cb:6e:75:8b:6e:33:3a:e4:4d:a0:ea:fa:
77:4b:6e:ba:d3:d1:f5:62:1e:54:4c:6f:8c:ed:f0:
a0:2c:63:69:e8:e7:c3:b7:db:b8:ea:2e:f5:27:e9:
c5:71:32:d4:a3:53:66:5e:9b:dd:9e:1c:f5:aa:0e:
d6:4c:ac:95:45:96:3f:b2:97:f5:05:16:2f:91:21:
85:46:db:1f:b3:f6:f9:90:8b:d0:5c:ce:6f:9d:e4:
7e:5d:ce:7f:c0:70:72:f2:9a:44:c7:7d:9e:49:d2:
ad:a6:e5:56:a9:2f:95:34:8d:f5:87:6d:ff:bd:8b:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F3:32:1C:60:03:4C:FF:94:DA:33:AF:C2:4D:B5:5D:F7:4A:C0:B2
X509v3 Authority Key Identifier:
keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:b4:e3:10:a9:78:94:90:34:c2:8c:42:77:ad:a6:d5:fb:
66:7b:05:d4:18:1a:a3:34:5f:8a:aa:c6:ca:07:b4:08:bc:c8:
b1:4c:12:4a:78:20:2f:3e:96:ff:a3:64:92:60:db:76:96:45:
83:af:b7:07:4e:36:f1:94:e8:6f:da:8b:d9:79:a8:2d:8f:a5:
8f:eb:c7:29:62:cb:04:63:df:3c:eb:46:f5:fe:41:ac:7b:82:
04:e2:df:af:f4:fd:b7:13:5a:4c:41:92:be:af:5c:6d:60:bd:
e3:e7:ca:27:f5:d6:cb:60:4f:ba:79:01:b1:7e:7c:53:74:a3:
1e:3e:8f:91:f3:4d:72:15:dd:98:37:25:9c:d5:13:19:7c:86:
dd:a4:96:82:5b:71:0b:c9:6d:c7:a0:0a:d1:c2:3b:44:10:9c:
f2:74:f8:fc:5c:65:88:a6:8f:6d:3d:57:a0:95:5e:9f:9f:af:
82:ae:24:71:a9:ee:d6:48:4d:35:5e:ff:a5:e5:aa:4e:4f:f1:
6e:b0:78:8b:f8:76:63:7f:d0:96:73:9d:e5:e5:87:a0:9f:df:
1f:1c:2c:e5:19:68:5d:a9:f8:4d:ed:7d:ce:17:e1:ee:24:4b:
b0:66:d1:f4:8a:a4:1c:fb:a7:de:79:5d:35:6b:99:10:24:d8:
f9:6b:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:12 2025 by rpki-client