Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json)
Hash identifier: 9d4Pkx5ePUhlMtX8fdjOMNRjMp2ibHtyFBF6oVFOCDo=
Subject key identifier: D4:40:47:2B:A8:90:88:F8:CF:26:23:35:8F:CB:6E:6B:BC:BE:E9:3E
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial: 0615
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
Manifest number: 060F
Signing time: Thu 30 Jan 2025 22:47:52 +0000
Manifest this update: Thu 30 Jan 2025 22:47:51 +0000
Manifest next update: Thu 06 Feb 2025 22:47:51 +0000
Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: wYfxY3mlXkvYsg0j+WDxq+ZXkHQOIgfNleEpe+84S+Q=)
2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: BjkJHXkj5+mPaQvI75MMMBdyFJW01ysY4zBzxe7EtMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Validity
Not Before: Jan 30 22:47:51 2025 GMT
Not After : Feb 6 22:47:51 2025 GMT
Subject: CN=679c0197-2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:c8:00:e6:11:75:3e:6d:f4:69:5f:a4:b8:
39:10:35:60:6e:b1:42:e4:53:36:19:45:d6:79:17:
d6:0f:d2:34:54:50:35:58:94:1d:ab:98:22:80:96:
09:2d:2b:f8:72:cc:26:ab:28:f6:04:c3:3c:49:64:
6c:87:be:00:e7:d9:a7:fb:3e:3c:e8:2a:1a:63:b4:
dc:30:97:ee:72:8f:cd:d9:98:74:8e:56:13:95:f4:
bb:f5:82:06:69:b4:a5:91:4a:c8:eb:47:95:7b:cd:
92:f4:e8:55:2f:d6:ae:57:6f:92:44:30:27:0c:e5:
61:f8:58:c2:96:63:67:9f:22:16:97:b9:25:de:02:
20:4e:d0:30:a1:dd:c9:a3:a8:a5:14:b7:72:7b:c9:
c9:46:d9:1d:93:d5:1a:9f:c1:f2:81:c7:40:10:25:
5a:98:1f:39:09:cc:c4:73:70:25:92:2a:bf:93:26:
fd:c2:7c:6f:99:f4:93:d1:03:dc:1a:c3:18:6f:d2:
b8:c8:02:84:9c:75:c1:de:e4:82:4d:62:9e:b3:5b:
d7:03:ae:89:4c:ff:93:6a:d4:54:b2:25:3c:32:08:
a9:09:f4:f7:eb:a5:a2:62:f9:66:77:58:68:36:0c:
d7:53:38:f3:a1:d5:f3:95:a6:2f:3f:1a:7f:64:f6:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:47:2B:A8:90:88:F8:CF:26:23:35:8F:CB:6E:6B:BC:BE:E9:3E
X509v3 Authority Key Identifier:
keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:1c:13:1e:c8:ec:74:9e:25:f4:de:8d:51:f8:60:97:75:
bc:27:52:5d:65:5f:7b:0a:9b:fc:9b:fd:c9:dc:14:94:a3:9f:
0c:92:0e:60:46:65:87:d8:8a:24:cc:ab:76:f0:d5:d7:f0:b3:
42:bd:19:36:6f:c7:7a:a5:8e:86:77:b6:4f:29:b1:03:34:4d:
44:81:6f:7e:1a:8a:92:d1:d4:1e:32:59:95:e4:f6:64:37:90:
a1:ce:7f:6b:18:04:0b:ce:79:96:a0:57:24:35:87:a3:a2:b7:
d8:ab:c4:0d:af:87:96:2a:29:f5:2a:6c:2e:88:13:6d:70:83:
b3:c5:41:5e:23:cc:53:a1:1e:08:ad:90:6d:ea:f1:a5:af:6a:
da:57:87:f1:f3:f3:13:a3:0f:17:e2:f4:12:d2:07:05:8c:23:
98:30:38:68:b6:9f:ec:ff:5d:4d:8c:82:ad:a7:30:6d:d9:1e:
d8:ea:9d:b7:cb:68:ad:a0:02:68:f0:5f:d3:77:e6:32:5e:0d:
ba:80:2f:03:f1:ad:71:99:f4:6b:7f:d3:6a:da:0f:02:5f:10:
f3:88:d0:11:1d:c7:da:4b:cb:cc:d5:47:d3:a0:ce:3d:2c:63:
2a:2a:5d:20:6b:73:0b:f1:b3:95:10:18:1c:c2:81:36:a3:37:
4b:dd:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:35 2025 by rpki-client