Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json)
Hash identifier: SeC9a9dtm5jCegdxP+GsgELSx43pWDMF16ya4KDVQf8=
Subject key identifier: F6:42:12:F2:E4:BC:CF:66:8A:4C:BB:97:C4:9E:61:F3:43:96:2B:06
Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Certificate serial: 0A7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
Manifest number: 0A78
Signing time: Thu 30 Jan 2025 19:43:42 +0000
Manifest this update: Thu 30 Jan 2025 19:43:42 +0000
Manifest next update: Thu 06 Feb 2025 19:43:42 +0000
Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: nnwfljedHY96mTAnduo2Wfwq2ygZeVob1ycmFnXucAE=)
2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: TWQ1ADwa1K2dZAFElhYa7BYiQdhNeF1NWXVQTSgNoBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686 (0xa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Validity
Not Before: Jan 30 19:43:42 2025 GMT
Not After : Feb 6 19:43:42 2025 GMT
Subject: CN=679bd66e-ae0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:41:b5:0d:8d:73:37:e1:cd:60:6a:d6:7e:
6b:0f:77:9b:99:21:04:f4:b8:15:42:6f:c8:e6:34:
67:28:a3:a4:6d:70:00:1c:9c:6b:85:fc:45:fe:e8:
ff:7b:8a:41:64:75:8e:f7:db:9e:11:5a:3d:f7:f9:
5d:13:13:ba:c0:0a:24:25:89:af:62:67:31:f2:8c:
e4:52:b4:9d:63:51:8c:69:b9:2b:7e:a9:d2:0b:3d:
f5:8d:8a:ff:a2:cf:af:80:41:c3:be:7b:f4:03:60:
2c:3c:06:2d:c9:06:94:7e:06:b1:d9:79:02:b0:98:
44:4e:3c:77:7d:21:c3:b3:60:90:d6:2e:0d:be:15:
3e:10:8a:8b:e0:5a:37:89:7f:9c:9e:8d:81:62:d8:
f1:a1:2b:14:3e:43:54:39:d5:b1:de:4e:87:90:65:
78:11:5b:31:a0:61:68:f1:95:0b:2f:de:c8:7c:f9:
85:96:c3:4e:5a:b2:d9:06:27:b7:54:37:9f:82:90:
11:ad:e7:58:ce:d6:77:af:a0:05:72:f9:51:5f:1c:
87:a2:66:0a:6e:cb:e5:1c:28:29:e2:c2:eb:06:c4:
5d:04:6d:eb:ed:4b:91:89:01:f8:e5:a2:7e:78:05:
9c:4c:a2:8a:2c:6a:d4:5b:5a:64:28:b2:36:22:a6:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:12:F2:E4:BC:CF:66:8A:4C:BB:97:C4:9E:61:F3:43:96:2B:06
X509v3 Authority Key Identifier:
keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:83:86:ba:3d:77:4a:ce:cf:da:3f:c1:5b:2e:1a:73:3d:67:
55:dd:92:c7:ae:16:06:9a:0f:af:8e:6a:47:dd:53:48:36:29:
5e:ab:3e:61:b7:e8:b6:fc:82:bc:49:86:0e:63:f3:96:67:5a:
47:00:cf:a1:bf:ab:ad:e8:d0:a4:8c:5a:da:b3:6f:73:47:a8:
fd:6c:dd:f4:60:26:0a:24:92:39:e1:bc:72:c6:8c:52:51:86:
83:8f:64:30:4f:f5:3b:9f:97:db:76:74:a4:ff:88:60:f3:66:
07:a2:ae:03:2e:8f:aa:c1:32:14:5c:d1:49:bf:39:3f:12:b3:
06:5b:8f:45:1d:b4:dd:98:d3:15:80:ee:12:28:ec:44:6d:52:
47:d6:54:12:ad:d4:31:81:c7:ac:66:4d:c7:e5:a4:00:09:59:
66:1a:58:f9:6c:5a:3e:c9:26:bf:bd:3c:e2:86:b1:84:21:4f:
5f:ef:14:d8:78:8b:47:ed:11:ac:54:8e:28:de:f2:ec:5a:d0:
6f:23:3e:d9:24:26:3c:de:0b:ae:9f:71:44:ca:eb:78:09:35:
43:c7:5c:1a:db:41:4f:f5:60:7e:7f:d2:99:2e:ff:db:6f:92:
2d:74:ca:70:4e:ba:7b:36:65:4a:82:cf:9c:e6:3a:37:dc:fc:
2e:c1:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:35 2025 by rpki-client