Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier: YCHq47zD7do0BcFlKE5XhWjMB0NECjpRMd8VoAi4MqQ=
Subject key identifier: 0D:05:78:48:60:99:3B:9A:79:0D:AF:7F:7C:FE:88:BE:D7:6E:CD:D3
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number: C7
Signing time: Fri 31 Jan 2025 04:59:06 +0000
Manifest this update: Fri 31 Jan 2025 04:59:06 +0000
Manifest next update: Fri 07 Feb 2025 04:59:06 +0000
Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: ti8/8DBsBUrJh0rLzVv9EOnqompiqMGZvEMezu9xLmY=)
2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Jan 31 04:59:06 2025 GMT
Not After : Feb 7 04:59:06 2025 GMT
Subject: CN=679c589a-c9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:a4:a1:dd:97:55:b4:86:15:a4:3c:b7:26:
d6:2f:73:7a:a4:08:42:bd:fe:ed:7c:e6:db:06:d3:
ee:22:2a:a6:62:1f:d3:24:8a:0f:f6:e3:69:34:08:
f4:54:a7:9c:8b:84:f9:b4:6f:ed:e8:9b:c9:de:84:
c2:f0:30:24:f1:1c:09:81:11:cd:64:1b:c2:0e:b2:
a8:19:1a:cb:f1:33:73:3a:c6:0d:61:53:5b:42:ac:
e3:58:0f:36:ad:a5:bf:6c:ab:8f:bd:d6:b1:26:1b:
b0:1f:8d:01:7e:96:f6:ab:7e:a6:dc:5f:a1:5c:42:
5e:ce:06:ef:aa:72:01:1b:05:f8:46:18:7d:76:79:
f3:a3:49:f9:95:36:c0:ac:2d:96:2b:e6:e4:79:03:
69:5f:8e:2d:ae:a9:b0:50:77:c2:72:26:f8:d2:e5:
9b:a5:f0:7f:1f:ae:2f:6d:89:13:e7:76:12:1d:d0:
87:f3:19:c7:8a:93:4b:07:6d:e6:89:2c:c2:a5:b6:
13:5a:e0:61:c6:23:ed:6e:19:1e:31:bc:a3:fe:6f:
ed:c9:05:bc:23:69:70:09:f7:6c:71:a8:2d:98:9f:
b0:dc:3b:d8:40:d7:d2:96:44:0a:3a:09:cf:74:20:
c2:4d:a7:3d:f4:24:cd:54:4f:2d:5c:1d:3f:23:83:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:78:48:60:99:3B:9A:79:0D:AF:7F:7C:FE:88:BE:D7:6E:CD:D3
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:f7:1a:99:fb:41:75:7b:6e:45:ae:83:1c:53:7d:b9:78:
f9:ad:71:84:bc:fb:d1:c7:4d:a4:bc:b7:5a:29:20:ec:bb:a7:
8e:e2:18:60:a6:e8:af:1f:8a:fc:65:8b:20:27:d1:e2:60:d1:
a3:bd:9f:e0:3a:79:99:7e:9f:99:68:15:fd:31:e5:3d:65:b7:
6f:51:7b:44:9b:96:ca:9c:e2:9e:ec:9c:65:3c:27:19:41:83:
be:61:29:83:91:d8:34:b5:d2:d8:dd:5f:87:74:75:76:d4:6e:
7b:37:93:e3:55:34:fb:00:fc:25:92:87:1a:31:16:61:24:9a:
5b:95:7d:24:0d:99:bc:23:76:0c:58:c6:0b:f9:99:a1:1f:9b:
14:df:e1:16:41:08:9a:49:75:40:07:50:be:81:bd:f5:c2:97:
87:23:b2:92:54:28:15:6a:5b:8d:49:a4:f5:20:77:b3:d8:c7:
dd:bd:72:df:fe:a0:e7:f7:c8:76:25:e3:d6:1f:d0:4b:28:ef:
4d:21:1f:c4:8b:b0:ab:5f:be:f1:a0:8a:1f:80:9a:9b:2b:b4:
4c:35:70:35:77:0b:e0:df:2d:e1:15:95:b2:79:2f:8f:17:e9:
9d:85:04:0f:f5:95:36:34:de:ca:fc:2e:40:61:6e:2f:76:a7:
a7:cb:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:18 2025 by rpki-client