Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier: PqUQFxxhHRHq8U9Lu/NLduuEpa2v/dT3UtJ8hq7yiJ4=
Subject key identifier: B4:F0:DC:DB:B2:D8:8B:7E:2D:CA:4B:6A:21:6C:E9:A6:D7:E8:9D:0C
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial: 0615
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number: 0613
Signing time: Fri 31 Jan 2025 14:49:55 +0000
Manifest this update: Fri 31 Jan 2025 14:49:54 +0000
Manifest next update: Fri 07 Feb 2025 14:49:54 +0000
Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: mkTc1rBPRsCnyh2sa3UM3bwZmZGgOHRhXvxEvy7zpR4=)
2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: /bP5RMzdbkL7/5EZqhq7cO3FfNuTY5k1xdEgv+lDTck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Validity
Not Before: Jan 31 14:49:54 2025 GMT
Not After : Feb 7 14:49:54 2025 GMT
Subject: CN=679ce313-952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:0c:ed:68:28:e4:bf:39:76:cd:dd:4b:7b:
d8:18:d7:94:18:82:52:37:6d:3b:ab:de:25:81:d6:
09:a4:30:ad:c9:ec:16:bc:65:85:4c:c2:95:57:79:
ad:6c:6a:0a:6f:c0:9d:76:46:18:58:97:33:ed:8a:
83:59:80:84:e6:07:0b:7f:cd:ab:05:5b:a9:d2:27:
96:e3:d8:52:a6:58:ac:d1:e4:6b:dd:32:08:62:26:
85:20:a2:6f:b6:82:85:17:59:70:50:8e:ee:f3:ed:
51:3d:db:82:95:6f:24:6b:c2:37:82:6a:61:0e:29:
e5:81:6e:3c:70:eb:e2:ce:6f:53:f4:0a:34:58:c4:
02:da:cb:7d:89:5d:47:62:99:36:4c:65:fc:69:1a:
72:0e:74:f3:5e:47:24:f1:4c:33:2b:f5:cf:9b:0e:
f3:9d:7d:a8:2d:a4:72:ee:60:ef:32:bb:eb:10:f3:
03:5e:ed:1e:ee:6a:5e:dd:ab:75:1b:59:91:c5:38:
10:e0:c2:fa:38:ad:6a:d4:45:c8:75:3e:a0:14:28:
02:5c:30:51:17:81:65:18:ec:a5:2b:b9:3a:a1:4b:
e7:be:c0:f4:89:f0:56:bc:85:05:65:41:06:60:69:
9c:f6:2c:ab:f4:d9:92:d0:47:a0:b3:d9:b4:3a:c0:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F0:DC:DB:B2:D8:8B:7E:2D:CA:4B:6A:21:6C:E9:A6:D7:E8:9D:0C
X509v3 Authority Key Identifier:
keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:f5:6f:20:e7:ad:da:56:11:6b:7c:6f:a2:bf:a8:a0:b7:
a3:82:dd:23:d7:d1:f0:dc:ec:d9:0c:ce:42:da:e4:10:5d:64:
2b:58:e8:5e:c6:9e:89:6e:4a:b5:f4:b4:ca:10:38:08:a9:3e:
48:b5:cd:da:5a:5e:28:b8:21:e4:2c:12:ca:68:cb:c2:3c:c1:
bb:12:38:06:d0:a8:07:f2:fe:5b:f1:ff:bb:87:43:8b:15:54:
bf:8d:14:a3:8c:81:d0:6a:19:97:b3:bb:fe:f7:b1:49:5e:50:
8b:69:f0:3a:72:41:b8:da:fd:5c:c1:16:60:c7:0d:8a:06:0e:
1b:b6:c3:39:58:30:db:69:70:ab:89:a1:bf:bd:c5:d0:76:cf:
6c:f2:e6:8e:76:9b:54:3d:1e:a6:47:07:21:d4:2c:bf:f0:7e:
41:12:85:b5:ea:3d:fb:d0:eb:f9:c5:d4:77:e5:21:b1:fd:b7:
8e:65:94:d2:7e:75:b6:a4:92:c3:21:e3:61:bd:16:2d:54:44:
b9:fc:cf:c5:8b:97:62:54:33:78:bf:19:99:9a:11:0f:cf:3b:
aa:b8:6b:63:f8:f7:f3:cf:fd:6a:c5:a6:2d:79:e3:f1:fe:9b:
7e:78:c4:6b:bd:da:c2:32:e4:86:88:ce:b4:f8:bc:4a:92:3b:
9a:85:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:54 2025 by rpki-client