Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier: yQsMFQC8yTrBcUQZS0OPNbSlB/Y2V+BcMk/wAcZ8Xl8=
Subject key identifier: 6F:58:56:48:C6:39:E9:99:4C:CF:EF:A6:4C:DB:50:E8:96:00:AF:77
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number: 63
Signing time: Fri 31 Jan 2025 06:03:53 +0000
Manifest this update: Fri 31 Jan 2025 06:03:53 +0000
Manifest next update: Fri 07 Feb 2025 06:03:53 +0000
Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: TQE55JRiHNI9plrCcsg7JMvSArj5B9rVDd1f32YBl8c=)
2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Validity
Not Before: Jan 31 06:03:53 2025 GMT
Not After : Feb 7 06:03:53 2025 GMT
Subject: CN=679c67c9-1a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:36:e1:0c:d7:4e:7d:85:d4:ba:d8:79:6e:
b5:23:73:1e:20:ce:2e:a9:68:de:e9:c3:77:dc:01:
37:b8:8f:3b:ad:ce:5c:8e:3a:d3:a1:8f:25:9f:6a:
78:24:cd:fb:ec:32:95:ce:70:fb:b6:f9:9f:10:e0:
86:4f:79:0f:3f:52:0a:ef:56:8e:4c:a5:49:d9:fd:
79:56:32:c8:b8:0e:59:1f:10:ad:72:1a:92:fc:e5:
1e:c5:1d:e1:55:93:a5:b9:c8:40:87:ce:86:a2:b9:
e5:cc:52:4c:dc:2d:83:c0:2d:ac:17:30:93:b7:43:
84:de:0e:74:f1:76:55:45:b7:13:3c:b1:d5:97:d5:
aa:ae:d8:db:01:61:ab:09:e4:46:56:37:e4:b6:96:
8e:d9:e3:c9:a1:a3:18:46:06:48:65:6d:2a:45:8e:
33:17:ff:fe:0f:5c:37:11:89:75:fb:73:e8:1c:1e:
1f:00:b4:31:d7:81:52:9a:8c:41:ca:16:ae:5e:f8:
80:a2:ca:aa:e3:d3:9b:df:cb:1c:34:7f:89:0a:78:
20:23:b2:0c:dc:08:6e:6e:79:4a:9c:fe:0c:76:56:
72:5b:b7:2b:2b:b8:99:2e:4d:85:da:64:23:21:f3:
16:ab:d4:ec:19:14:ec:b8:76:05:3a:72:d3:ec:23:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:56:48:C6:39:E9:99:4C:CF:EF:A6:4C:DB:50:E8:96:00:AF:77
X509v3 Authority Key Identifier:
keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:3b:fc:03:15:6a:22:f0:82:73:8a:2d:fb:54:08:4a:de:6c:
21:0b:b5:46:2c:0e:8a:a5:bd:ee:a7:5e:24:69:10:fd:02:46:
de:61:0b:6c:fb:c1:3b:0f:b2:f3:3f:ac:57:20:b9:8b:73:4c:
17:13:76:96:f3:6b:f2:c7:b1:c7:fe:fa:ee:e2:4e:e6:eb:5e:
2e:b6:ba:a0:36:40:44:25:14:c4:be:01:05:27:da:e0:47:e1:
e1:b5:3a:ca:1f:3d:57:1d:32:fa:d7:7f:de:d1:68:fb:75:11:
c4:38:b9:aa:7e:3f:d0:e5:ea:6d:ac:ce:fb:d5:40:ab:fb:52:
69:97:6d:67:9b:bd:d5:0b:21:35:e6:d9:b8:d3:04:dd:f9:54:
5d:49:3c:96:d3:e4:44:78:7f:a6:58:e0:db:24:54:6d:08:76:
c9:fc:ca:b1:d9:e3:1b:a3:20:98:1d:ea:51:30:a5:35:09:6d:
94:62:b1:54:c9:ea:8f:ce:7e:94:6a:7c:5d:f8:d5:5c:3e:c6:
d3:2f:f8:3a:83:a8:a3:21:f3:6e:d5:53:9f:3c:7e:c5:3e:d5:
b0:58:25:b2:a9:43:08:4c:29:5f:83:10:1a:ae:07:3b:22:22:
2c:19:d6:1a:d5:f8:64:a0:57:b9:26:4c:8e:c2:74:1a:33:e9:
e0:a5:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:37 2025 by rpki-client