Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier: /u7cFyxHW7gPJELIyDvp6BMEKSnuscoj4JPw4DrRcxU=
Subject key identifier: 47:DE:AF:7E:D9:E6:35:A2:DA:DC:52:3C:26:67:AB:49:CA:05:48:68
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number: C7
Signing time: Fri 31 Jan 2025 04:57:45 +0000
Manifest this update: Fri 31 Jan 2025 04:57:44 +0000
Manifest next update: Fri 07 Feb 2025 04:57:44 +0000
Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: RHMyZXfGlUlzWMIpZeoxs4twGtQjOz/wwSWZvj3lvDE=)
2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: 8NNDcn/CtNpBvMIFdldKUPUuvftRiLW48mBlQXNrmYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Validity
Not Before: Jan 31 04:57:44 2025 GMT
Not After : Feb 7 04:57:44 2025 GMT
Subject: CN=679c5848-f685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:71:0d:f5:df:2d:6c:91:e4:f3:e8:6e:74:
10:0f:fc:37:e6:ea:8f:84:bf:89:38:8c:9a:b4:ba:
21:ff:3f:dd:68:cc:21:17:bd:98:f2:86:ab:c7:df:
7f:d5:19:58:8f:fc:6c:61:64:81:15:a7:73:8d:63:
fb:40:61:60:14:96:eb:66:2e:fc:91:3e:a0:a1:96:
80:11:64:32:98:1e:44:ca:5d:ac:02:9e:d1:8e:b6:
2d:7e:8c:a4:94:2d:a4:a0:18:dc:f6:a6:02:4f:10:
96:fb:24:08:95:4b:0f:6f:63:37:93:f1:07:5f:f0:
c3:22:69:a1:59:4b:ab:db:d3:01:2b:93:7d:d1:41:
27:97:8f:34:7f:31:3f:62:05:b5:82:26:0c:14:18:
02:eb:b6:38:77:1d:04:61:f1:17:71:17:b5:73:8c:
84:7a:ca:f8:11:c6:88:c6:62:16:2a:47:20:0d:b2:
9b:b4:1c:07:bb:2b:72:b4:42:ed:c7:9d:d6:6d:46:
5b:f1:80:e0:e9:8a:9d:60:89:dd:08:f8:42:ca:00:
9d:57:68:9b:5f:41:49:64:9d:83:47:2e:8a:af:fc:
c1:b3:89:9d:76:6a:fe:60:c2:25:b4:69:af:e6:b1:
6a:22:62:31:f5:b4:1b:9b:36:b3:23:39:b5:f9:46:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DE:AF:7E:D9:E6:35:A2:DA:DC:52:3C:26:67:AB:49:CA:05:48:68
X509v3 Authority Key Identifier:
keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c3:9a:b9:31:c7:35:3d:b4:73:27:8c:eb:24:29:d8:9f:4c:
bc:ce:b3:cd:73:31:42:ba:47:11:a1:14:c5:94:b8:e1:e0:78:
6b:8f:c9:4c:27:9a:0b:be:8f:6d:83:b9:f7:dd:03:79:a6:aa:
64:c9:4f:6a:d0:56:45:42:5f:dc:38:90:20:1e:03:ea:3b:94:
be:47:42:aa:9b:cb:06:5c:c5:7d:dc:79:6c:63:8b:36:7f:c8:
58:43:21:9e:a0:76:64:70:54:7d:9a:52:4f:0d:0c:50:df:f4:
b7:6c:e4:90:1d:0a:cf:38:28:d2:67:a5:00:ef:12:b1:07:31:
eb:47:f9:88:73:62:03:79:25:6c:00:3f:c1:81:89:78:d8:a7:
af:24:a6:8e:7a:d8:5f:d5:91:b9:79:8e:04:0f:53:7f:ba:58:
ad:65:6c:41:f6:83:d9:a6:db:14:24:c9:f9:29:26:b6:4a:b0:
3c:0f:f9:14:d2:1d:8b:7d:42:66:87:7d:bb:2c:d9:65:9e:55:
52:3d:85:85:64:aa:af:b3:73:f6:fa:13:43:23:64:b3:1b:bb:
d7:7d:f9:6e:4c:84:d6:af:1d:46:9f:01:0c:1d:ec:2a:f1:42:
36:b5:d1:ec:8b:b4:8b:ac:f4:04:1b:7f:f6:de:76:01:b4:98:
fa:ae:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:26 2025 by rpki-client