Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json)
Hash identifier: /qlncBEXbEUf4ydfnwdSBgY0imoW046LkYA+N+0Xbfw=
Subject key identifier: 52:B1:1C:51:7E:87:E0:26:59:93:2D:96:83:33:D6:88:A2:C3:F8:9A
Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Certificate serial: 074C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
Manifest number: 0742
Signing time: Thu 30 Jan 2025 21:33:46 +0000
Manifest this update: Thu 30 Jan 2025 21:33:45 +0000
Manifest next update: Thu 06 Feb 2025 21:33:45 +0000
Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: wkOxS7BGts8oKL3Xh8OzVNl9zrxhJICi0XnVp2aTXOY=)
2: 1ACA9A7011BC11EBA0759F52C4F9AE02.roa (hash: 1/WmY9YBhKiu5MIvT1vmw+1SrQM0aVWoRuNlt6WnK0s=)
3: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (hash: 0XN9EZ4o4OF/LsbCrndQVN6EKGwIuwGsOPBGXuiVcqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Validity
Not Before: Jan 30 21:33:45 2025 GMT
Not After : Feb 6 21:33:45 2025 GMT
Subject: CN=679bf03a-add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:26:15:aa:58:24:7a:55:71:58:d6:73:64:
61:bf:b3:d6:f7:10:21:19:79:36:31:4d:dd:9d:86:
8c:a9:d4:20:a9:f5:8a:da:5c:ac:fd:a1:b7:6f:23:
a6:76:6c:82:08:d5:67:fb:dd:33:d3:58:c3:24:e5:
67:9b:04:9b:2a:2e:12:a5:8b:f0:1e:61:87:a9:f3:
c0:f5:50:ab:24:57:0b:91:49:c3:d8:63:a6:01:ca:
10:ad:69:78:13:57:c8:5e:a4:04:13:06:aa:30:89:
e2:bf:e7:bb:23:d2:85:8e:72:71:74:a0:e0:8e:0c:
61:b1:18:ec:e2:e5:c8:4b:92:dc:5e:b4:c6:01:7e:
0e:fc:c1:dc:4e:26:a1:7f:53:ff:42:8e:c0:a8:bd:
75:96:6a:4d:ff:ae:d0:84:3d:c7:05:ce:e8:f7:b2:
ff:f9:d0:75:32:b4:b2:12:f2:aa:28:df:06:6a:fa:
a5:8b:fe:90:c5:c8:56:b7:bd:b7:81:d1:7e:b2:97:
08:35:dc:a0:08:16:de:6b:a1:d8:13:a3:26:26:55:
05:57:54:3a:e3:13:f0:c9:b0:b1:45:2b:5a:c9:d3:
26:ad:ed:89:ba:19:4a:c3:9b:32:8a:6a:fe:5a:3b:
76:2b:96:5c:17:59:69:3c:88:f1:ee:e2:4c:9e:6a:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:1C:51:7E:87:E0:26:59:93:2D:96:83:33:D6:88:A2:C3:F8:9A
X509v3 Authority Key Identifier:
keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:f3:5b:bf:87:da:27:48:df:0c:f4:87:68:45:e2:a9:d4:
ee:b3:9a:5d:aa:67:cb:b7:41:dd:87:79:6c:52:7c:ed:b3:52:
06:e4:8e:c8:f4:68:4c:95:03:bf:e8:77:99:e6:a0:a0:8e:90:
3e:0a:f8:a3:29:a0:13:4a:b3:31:7f:74:37:76:a2:d0:9c:a5:
76:bc:f6:a1:48:7d:38:d2:9d:44:03:ab:83:3f:00:56:40:93:
c5:a0:ad:85:9a:f2:02:64:50:e8:37:8e:c9:62:f4:dd:c9:91:
de:21:a4:08:02:93:80:39:e1:82:16:08:8e:d0:3d:36:0f:e4:
9f:4c:69:b9:de:2f:97:d0:c8:88:21:6c:dd:01:34:3c:9b:38:
b7:2a:77:84:22:9b:8e:cb:a7:c2:67:e4:71:8c:22:b7:28:64:
e9:93:5c:66:a5:73:99:ed:ed:2f:7c:6d:9c:e9:01:a4:7e:f9:
1a:ef:13:ba:3a:c1:26:46:d8:6e:b1:be:90:75:30:53:c6:41:
2a:24:cd:26:86:44:38:3c:b1:fb:c7:09:e8:c2:6b:01:8c:d0:
d7:38:ac:d7:cd:28:a4:6b:d5:82:0b:e1:a7:0d:96:d6:e1:25:
cb:f7:da:b6:20:f1:f2:25:7e:df:ff:b5:13:2b:66:5c:a6:47:
e1:41:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:38 2025 by rpki-client