Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json)
Hash identifier: gIbxAHOZ2GYV+FTW9vLkL6QC9ZRAAODjTVan4rrIbq8=
Subject key identifier: A1:A5:53:EB:1A:AD:B6:66:3B:EE:BF:E7:B9:87:03:68:B0:9F:82:B9
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial: 09FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
Manifest number: 09F7
Signing time: Thu 30 Jan 2025 19:58:21 +0000
Manifest this update: Thu 30 Jan 2025 19:58:20 +0000
Manifest next update: Thu 06 Feb 2025 19:58:20 +0000
Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: z2whTbg1QGwHsmCUjTBEYAsTX208Sb716mJl5AuZeGA=)
2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: OJuUeP3/MhnZuj46uoZjHhNgvQX9+E3YIgo5c+femP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2557 (0x9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Validity
Not Before: Jan 30 19:58:20 2025 GMT
Not After : Feb 6 19:58:20 2025 GMT
Subject: CN=679bd9dc-2128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:ff:1c:6a:b7:84:46:83:0a:f7:87:3b:df:
c3:f0:e4:22:ac:c9:71:b0:fd:54:a8:ec:85:5c:b0:
2c:67:30:3e:e7:94:9e:cf:05:24:de:79:b4:81:15:
fd:5f:93:e8:f1:a6:ed:31:96:ee:3c:51:f9:a3:bd:
5f:9e:d5:17:27:ad:cd:1c:20:f1:d8:1f:0d:87:b0:
4e:13:66:12:53:9d:31:94:48:70:2d:30:72:f8:38:
b7:d6:bc:a5:8a:91:66:08:07:01:3f:4d:8e:28:19:
39:1c:24:ab:ab:42:82:12:54:bc:f1:c6:50:bd:53:
6a:f0:8c:80:00:eb:bd:a8:77:6a:3e:6f:28:dd:f7:
07:86:e9:c8:71:3c:3f:15:a4:92:01:83:23:5f:7d:
63:46:8d:e9:9a:b5:c1:8a:86:64:af:d9:82:7d:a9:
45:b8:20:55:c6:39:f8:54:94:2c:53:1f:c7:85:36:
e9:43:ce:4c:19:49:90:1e:04:e5:f9:bf:2a:a2:88:
5f:45:02:34:2d:79:d7:fe:b6:26:e0:0a:e5:f4:91:
0f:d8:6c:42:70:06:40:f1:8e:6e:40:c4:48:56:ee:
5d:1b:d0:20:fd:d7:28:9e:2d:b2:98:55:aa:c6:28:
b0:ed:fd:f5:9c:29:14:8c:4a:ed:25:fb:5f:86:95:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:53:EB:1A:AD:B6:66:3B:EE:BF:E7:B9:87:03:68:B0:9F:82:B9
X509v3 Authority Key Identifier:
keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c8:91:5f:e6:2d:6a:54:6d:60:6c:1b:80:7d:b9:88:3f:d0:
55:60:4a:bd:06:65:a0:4c:28:39:f2:45:65:7b:d6:f2:51:fb:
34:df:5b:92:ee:5d:83:20:7e:23:65:97:ca:68:15:1d:32:10:
9f:7f:80:53:d5:8d:f7:f1:f4:86:b3:c9:e5:6c:4f:69:f4:8f:
05:b6:2c:e5:ca:6e:f1:fc:58:cc:f5:6a:37:fc:bd:2b:27:cf:
04:ed:ba:8a:8b:fe:fb:19:15:9a:3c:4f:ed:0d:82:b2:2b:b2:
20:fc:72:a9:83:e9:0c:93:bb:e7:1f:63:1a:93:16:1f:51:2d:
b3:9b:86:8a:19:d5:29:34:7a:3b:fb:32:09:5a:88:4e:4f:e3:
f1:f6:90:ba:2e:a9:8d:3d:6b:b3:00:1c:fa:b7:51:5f:89:27:
04:6f:c4:5d:65:6c:d6:30:07:28:70:43:55:74:d0:5e:c8:ff:
41:ff:e3:bd:e1:c6:f2:8b:08:a1:26:25:11:f2:e9:42:c0:52:
d9:29:ed:fd:2c:be:a0:e7:c3:97:d8:8a:29:bd:55:90:53:e8:
33:6c:27:fc:7c:27:bb:74:e7:bc:a8:31:2f:12:02:6c:bd:f4:
1e:60:91:3d:51:48:0e:7c:7e:fb:39:4e:22:8a:48:60:11:2c:
7f:21:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:49 2025 by rpki-client