Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json)
Hash identifier: o3lIUOj3oMTKxXpqF1JQ11sD6gkN8erfhgCug2Rel4Y=
Subject key identifier: 9A:61:7E:3B:AA:CC:E1:09:86:AF:4B:31:DF:52:3F:A0:BC:3E:54:24
Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Certificate serial: 0C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
Manifest number: 0C1A
Signing time: Fri 31 Jan 2025 18:22:06 +0000
Manifest this update: Fri 31 Jan 2025 18:22:06 +0000
Manifest next update: Fri 07 Feb 2025 18:22:06 +0000
Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: S9N4OQ+1G47GerBzZ7Dj+eUbg8RQhoYAf8fYS4Q3UmE=)
2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=)
3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Validity
Not Before: Jan 31 18:22:06 2025 GMT
Not After : Feb 7 18:22:06 2025 GMT
Subject: CN=679d14ce-aa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:98:03:1b:e4:19:e2:db:52:2e:7f:42:2e:
b9:05:31:c0:62:b8:36:6d:67:b2:a0:96:5c:c3:4e:
8a:f0:ef:0c:f7:b2:5c:4b:24:97:8a:85:3f:21:58:
f5:22:69:81:09:66:c0:06:ad:b6:ef:27:0e:cb:a6:
1f:ea:ec:a2:42:6a:c6:eb:27:60:8f:ef:d4:f6:f5:
a9:74:8c:61:06:30:e2:55:fc:e0:ad:eb:6a:e5:05:
b6:6f:be:24:ba:98:ba:b1:e9:d0:7d:91:1e:95:31:
09:91:90:84:a8:7d:5c:f3:1f:79:0b:dd:27:fd:ad:
dc:be:31:3b:1d:e9:53:0a:74:b6:67:ee:4e:ad:0a:
13:fa:b5:a2:32:58:85:94:ce:ef:ca:c5:f8:50:68:
de:c9:3e:b1:8e:33:ea:ad:d4:70:e7:52:31:37:bb:
82:8a:ee:0d:ff:55:95:2a:a9:e3:2e:dc:15:7f:9e:
3e:d7:f7:f3:36:23:93:db:84:8e:b8:8b:32:6b:2e:
11:ff:b0:62:f7:51:d6:e6:26:52:30:62:bf:42:36:
5d:4a:d7:57:76:4a:5d:82:60:de:0a:d0:fe:fc:36:
8f:2a:24:7b:a7:21:bc:77:e8:ce:04:b3:97:b2:d1:
e9:ba:4e:1c:19:0a:21:ac:b6:f2:6f:fb:a2:82:1f:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:7E:3B:AA:CC:E1:09:86:AF:4B:31:DF:52:3F:A0:BC:3E:54:24
X509v3 Authority Key Identifier:
keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:84:79:5d:9d:c3:fd:61:47:f0:57:09:67:c0:59:63:3a:01:
6f:c1:84:20:52:49:67:74:d8:b0:44:57:b9:79:17:fd:cc:cd:
d3:70:83:d0:05:d2:9a:80:c3:e8:53:bd:2d:5c:f5:30:5d:be:
4a:f0:ae:96:50:b3:db:dc:ea:60:cf:e5:9f:cf:49:42:13:8f:
3e:7c:74:26:01:59:9f:80:30:3a:e1:d5:ea:2e:39:dd:3c:9e:
d5:35:f0:de:52:5e:cf:40:e8:d2:9e:d2:d4:b2:a1:ae:e7:d2:
7f:e8:43:4a:f1:bb:b1:f2:1b:75:91:05:17:9d:10:74:da:40:
1a:11:7d:c7:87:4f:45:c2:69:8d:a6:1d:bf:e6:8b:bd:42:14:
99:93:5c:99:ce:13:65:a3:d9:25:b5:ad:f2:97:19:a3:14:5a:
0f:ba:59:13:1d:f7:f8:d8:3a:be:69:da:cb:d8:30:80:61:48:
57:5f:4d:6b:29:c9:e2:29:b4:c4:8f:5e:e0:fc:74:4f:34:90:
96:88:af:34:3c:aa:95:9f:ac:1e:d9:9e:77:f5:3c:9c:28:82:
f6:77:4c:f1:e6:dc:ca:66:b5:1a:20:1c:cf:73:69:06:c2:55:
41:b2:71:ac:0c:a3:dc:8d:fc:24:b7:4a:78:b8:f5:11:ec:7e:
86:f9:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:21:04 2025 by rpki-client