Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json)
Hash identifier: rbIbO4DzexTAVaKoz73VCTXQvk1WjqEvZu6kXmf2AYE=
Subject key identifier: 2C:C6:E0:3A:89:A7:A5:AF:DE:1D:07:70:8A:AC:D9:11:98:8F:C4:86
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
Manifest number: C7
Signing time: Fri 31 Jan 2025 04:52:24 +0000
Manifest this update: Fri 31 Jan 2025 04:52:24 +0000
Manifest next update: Fri 07 Feb 2025 04:52:24 +0000
Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: I9YzCYqriRXcM31cIJXEwWm6zmlD9+3ZP4umCEtyxjg=)
2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: FUQ7hkmGES0QN9UAf6f/LO11kYNy/Xsa2qRfJOg9mdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Validity
Not Before: Jan 31 04:52:24 2025 GMT
Not After : Feb 7 04:52:24 2025 GMT
Subject: CN=679c5708-6688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:7a:bf:34:5d:72:f7:15:de:7a:61:39:41:
dd:10:53:cd:3f:a5:b4:7c:26:c2:5e:1d:01:b3:4d:
66:c7:b9:03:50:f0:79:cd:1e:78:ac:9c:14:d8:0c:
6f:22:e9:4d:b8:db:b5:97:c1:59:81:35:cc:29:c9:
31:3b:30:86:f3:6a:6e:15:1b:b7:17:d1:b5:29:05:
b7:f9:ca:8a:3b:5d:a9:7b:41:45:61:87:f6:44:09:
7a:7b:e5:db:19:f8:b4:36:f9:ef:b4:8b:92:58:fd:
94:2b:b9:52:85:70:9e:3a:32:da:95:5a:e9:32:03:
7c:35:22:fa:52:08:cc:2e:ee:8a:89:5f:7e:c9:8c:
d2:00:35:9d:1e:63:35:25:00:4d:53:4c:ea:c0:4b:
ca:3d:75:58:0a:74:12:27:a9:e6:bb:e8:7c:67:db:
99:b4:7b:79:b9:ac:13:80:e9:c2:2c:76:ef:e6:d4:
06:bb:bb:da:8d:c5:1f:ea:7b:8e:89:52:52:c1:71:
95:9f:1d:8b:19:1b:0a:cb:58:b3:c8:5f:97:ff:ca:
0f:8b:42:34:8d:a9:cd:e7:f7:d2:9d:43:55:0d:00:
4b:cd:8e:95:ad:38:a8:09:b2:b9:39:8a:d0:83:ae:
0f:79:ef:76:3c:f1:8e:a4:7d:d5:5e:49:85:d5:a3:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:E0:3A:89:A7:A5:AF:DE:1D:07:70:8A:AC:D9:11:98:8F:C4:86
X509v3 Authority Key Identifier:
keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e2:4b:11:b9:c9:fc:60:6e:8e:3c:2a:90:89:1b:43:c7:90:
72:68:71:d4:9f:3d:57:bf:3f:f8:59:38:fb:38:4c:b2:e1:73:
30:f4:c0:9b:b8:68:7a:90:ab:18:ee:bd:58:cb:cb:09:07:1f:
d1:5f:7e:17:ec:6e:32:a5:b0:d0:f5:e2:df:55:ac:90:0b:5f:
89:39:12:2d:45:d6:f3:32:a5:c7:cf:97:1a:3a:30:d1:ea:24:
97:ad:80:de:0a:a9:99:ea:27:15:a1:8a:98:08:a4:61:d3:e6:
b7:6f:8c:a1:b7:85:83:e8:2b:77:e7:6e:8d:6c:38:82:b4:7c:
9c:81:e6:15:4c:af:89:0f:97:9a:06:18:86:6f:22:a9:9d:50:
4c:a4:37:e9:ef:eb:26:ac:93:e8:89:9a:0f:9d:da:5f:ee:ae:
01:76:cb:23:5b:01:f7:d8:2e:3c:98:b5:e8:cc:41:22:7c:97:
a4:c6:24:a1:a1:5f:68:66:f8:ca:ed:08:30:96:47:a3:4b:7a:
dc:ef:e4:2a:83:c1:6c:3f:c3:90:32:79:c7:3c:b4:a3:8d:16:
0b:0c:1a:d6:19:4d:2f:3a:ba:e9:cf:1c:32:18:0a:3b:6c:2f:
aa:a3:d1:1a:38:4f:cb:31:5b:31:cc:a2:f1:1f:3e:57:14:2b:
91:11:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:44 2025 by rpki-client