Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json)
Hash identifier: GCOb3Zx/xeMzZwWpIz0dormpaIK3AuRZTgMHaWCXtBQ=
Subject key identifier: CC:18:D5:DA:52:5E:C8:83:9C:87:5B:4F:88:32:5A:45:27:55:85:DA
Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
Manifest number: 19
Signing time: Fri 31 Jan 2025 07:02:04 +0000
Manifest this update: Fri 31 Jan 2025 07:02:04 +0000
Manifest next update: Fri 07 Feb 2025 07:02:04 +0000
Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: +W5DFleXfayOfEyQxdQhO8EfnJ8ImGXN21r1m8dNVX4=)
2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: 2FSatyOED0Xg8fw4/PC0bYUlzXZJsIqXLZTaph/05xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Validity
Not Before: Jan 31 07:02:04 2025 GMT
Not After : Feb 7 07:02:04 2025 GMT
Subject: CN=679c756c-8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:be:a8:61:33:27:06:a9:49:51:3d:27:44:
2f:43:a4:1d:c6:79:dd:aa:83:77:60:cc:ab:69:80:
0e:c0:ce:1f:43:9d:0a:eb:c5:7a:53:d1:02:3f:92:
6e:b1:11:fd:71:fb:29:93:6d:a9:43:84:16:51:22:
4f:64:d1:a8:46:d0:52:26:b4:de:8a:66:a0:25:29:
fb:73:9a:ce:26:2c:46:92:2e:3b:49:a4:b3:1a:04:
84:39:86:88:dc:73:74:8d:3c:01:aa:69:7c:06:a2:
d4:7e:86:a5:d8:e8:b3:3b:27:96:41:e3:44:0a:02:
4e:f0:9f:ad:ad:d5:db:3b:b4:4b:80:0e:eb:05:7d:
09:15:02:1a:38:92:73:ae:ac:ce:7e:32:03:3e:62:
37:63:ca:7f:42:83:94:78:12:af:1d:5e:28:da:d3:
b8:e0:56:39:8a:46:c2:16:02:ef:0c:a4:9c:07:61:
e9:3f:90:0b:08:f7:2d:bf:61:06:6e:18:dd:c5:4d:
0c:9b:5d:18:3e:2c:09:9f:f4:a6:5d:61:a6:4f:b3:
28:bb:c7:85:ed:60:2c:21:f1:bb:38:f8:04:54:ee:
97:02:06:79:4f:e9:ea:c6:3a:ad:82:5a:83:8e:e2:
44:33:30:c1:27:bd:34:ce:f2:72:a7:02:73:94:6e:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:D5:DA:52:5E:C8:83:9C:87:5B:4F:88:32:5A:45:27:55:85:DA
X509v3 Authority Key Identifier:
keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d4:50:c7:a7:e7:02:f3:f4:00:07:7e:44:d5:14:7b:15:c7:
d3:4c:23:03:72:c3:5a:c8:ec:43:f5:5f:9d:67:85:0c:4e:e8:
e8:07:ca:a8:3f:10:a2:d2:2d:1e:08:1f:55:41:5a:e5:77:2f:
4b:4c:d6:93:f1:f7:a6:fc:8a:3c:3c:6d:4e:d2:ec:6f:8e:0e:
0b:42:19:24:03:6e:76:b4:b0:fe:25:91:63:72:1a:7e:31:36:
b5:a8:e4:2f:4e:e1:b2:eb:93:40:5c:be:d2:2b:53:74:51:36:
54:5b:38:87:44:05:2d:6b:0c:0c:90:73:ae:a6:a0:47:68:d2:
65:45:d5:e0:5c:f8:dc:56:d2:62:c9:4b:e3:75:bf:92:74:42:
6b:66:cd:f0:7b:dc:a5:38:c1:9b:8b:e4:2c:be:1e:30:28:93:
2f:76:e7:32:dc:14:68:9d:4f:6f:96:ef:9b:68:3a:eb:e9:ec:
26:d3:3a:e9:7d:3d:0a:01:13:12:53:12:5a:2d:58:02:78:98:
69:68:d0:f9:eb:d3:ae:26:c5:0c:ad:e5:50:9b:5c:bd:95:fc:
a4:d2:6a:c0:f9:01:21:c0:72:5f:f5:02:c0:ea:bf:76:bb:51:
7c:ca:84:e4:b0:b6:b2:d7:c3:16:1c:5d:05:64:1f:86:99:43:
47:25:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:25 2025 by rpki-client