Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json)
Hash identifier: rGN8AAlCkfFU58UQIl4TwoPjCyDG1LF5R62/Pvdxlu4=
Subject key identifier: E6:FE:CB:B2:DD:9C:79:44:62:52:52:51:04:C7:8D:E6:7A:5F:C8:D0
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
Manifest number: 7C
Signing time: Fri 31 Jan 2025 15:45:49 +0000
Manifest this update: Fri 31 Jan 2025 15:45:49 +0000
Manifest next update: Fri 07 Feb 2025 15:45:49 +0000
Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: 06RofVgdwcCE6qaALsCPz70HbycER/LSVYVgxKLO9JI=)
2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: nEx36xMYEspoRTHpBzsjyglWKve6HGzaUV9gJlWDtWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Validity
Not Before: Jan 31 15:45:49 2025 GMT
Not After : Feb 7 15:45:49 2025 GMT
Subject: CN=679cf02d-308d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:f1:5e:f5:c4:81:e8:b6:42:83:d5:5a:8c:
b3:65:52:9d:8a:0d:8e:ba:92:de:ad:e9:91:f0:df:
dd:c3:8f:4a:90:64:ff:3e:e5:a1:36:c3:fd:04:eb:
fe:7d:c8:cd:4b:1d:be:9d:24:8b:4b:d4:8d:17:e3:
91:93:1a:f6:cd:8d:be:d5:5d:58:bf:2a:5a:f6:ab:
d8:26:96:bf:91:e1:82:ac:26:b2:bb:b2:3d:93:96:
bf:7c:57:ac:87:20:0e:ed:27:24:43:28:29:5f:7a:
ee:2c:e4:78:92:24:c8:c4:f5:3e:c0:f4:d8:40:ae:
0d:2e:51:f8:9d:0e:d7:dc:d4:de:5c:63:c9:e1:b2:
34:43:fb:a0:5e:e2:d1:46:5f:86:73:ec:72:8f:3b:
d6:cf:a3:80:d0:76:c5:af:d9:e7:f2:f7:9e:5d:b9:
bc:55:4c:9a:53:5d:3b:84:1e:3c:39:e6:71:bc:9a:
fe:98:ce:48:f5:f3:9d:d7:e6:32:62:d0:c2:5d:9a:
ef:0d:f2:11:11:53:8e:d1:82:0b:fe:b9:07:5d:6a:
f9:e0:f6:1b:d5:dd:a6:00:b2:af:b2:36:53:65:93:
48:76:e0:40:99:36:79:96:93:c0:4b:c8:e9:0e:27:
5c:06:db:c5:f1:47:9b:86:54:ec:92:17:11:9e:94:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:CB:B2:DD:9C:79:44:62:52:52:51:04:C7:8D:E6:7A:5F:C8:D0
X509v3 Authority Key Identifier:
keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e8:4f:13:3c:ef:f6:70:75:bf:d0:aa:f1:d8:27:ae:ed:f4:
77:7a:7d:e6:73:d4:3a:4d:78:a8:d7:94:fa:a5:e6:e1:a8:14:
d1:ee:13:f8:a1:db:54:71:81:bb:c4:84:20:64:f8:7b:40:1f:
34:63:3a:d1:5b:4e:b5:c5:5a:f1:74:27:4c:6c:95:ff:24:35:
12:49:63:4b:b2:c2:1a:b3:69:06:75:eb:d8:1e:2a:e5:ab:64:
1c:e1:dc:bd:bc:af:93:f7:6f:f8:5d:84:d8:b5:f2:58:f0:bc:
39:54:b0:d9:45:e4:5a:14:8f:04:28:54:af:a2:ea:f4:49:22:
76:ef:de:66:19:1f:2d:6e:22:9d:bb:9d:1e:eb:50:a9:6f:68:
87:d7:d4:ad:93:5c:f1:12:6c:33:4a:7c:b6:7a:a3:f0:e3:1f:
e5:be:89:ba:da:33:ac:00:6e:56:31:39:0d:06:bf:1b:e3:33:
75:1d:76:76:49:40:d1:24:92:a1:27:c9:09:cb:7a:de:7e:f6:
2c:a2:e4:a9:16:64:89:45:f4:93:b2:a2:85:7d:4f:6c:45:d6:
61:cd:db:9b:21:d0:69:39:31:6e:01:2b:7d:47:25:ef:65:ac:
19:a5:80:2d:e6:16:5b:6a:e5:d1:ee:ff:78:e5:4d:de:ba:6c:
20:d1:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:56:49 2025 by rpki-client