Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json)
Hash identifier: VE2fqTHs6sC+OFuwdKz8hUfRrPD5fYN9ULtcJWG/zzk=
Subject key identifier: 52:53:97:6B:C9:DA:B6:67:5E:FD:B0:F9:82:A1:F1:A5:CD:BF:65:F6
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial: 0528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
Manifest number: 051E
Signing time: Thu 30 Jan 2025 23:36:22 +0000
Manifest this update: Thu 30 Jan 2025 23:36:21 +0000
Manifest next update: Thu 06 Feb 2025 23:36:21 +0000
Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: f9Gv/3U0AQ/n8QsGT+W9aeBSSfKZ5z06skN9jMQLzOk=)
2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: QKEbNflHaMtrKPpklQ7n3QZ+8DscnEW1cfHLjHUSUv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320 (0x528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Validity
Not Before: Jan 30 23:36:21 2025 GMT
Not After : Feb 6 23:36:21 2025 GMT
Subject: CN=679c0cf5-2568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:1e:72:0c:06:87:56:ae:5f:f4:a4:e2:c1:
c6:bb:dd:29:06:6e:fb:e3:e6:47:75:38:e9:db:7e:
2b:28:b8:2d:8a:2e:c7:b8:0b:80:45:c1:17:0e:10:
57:58:ff:ff:24:45:ec:51:86:0f:05:d5:07:71:69:
70:f3:de:11:cd:52:2f:e3:a9:77:16:b1:42:f4:be:
1b:2d:20:e2:56:bd:7a:df:3a:0e:55:c6:6f:1c:10:
d8:3e:bb:bc:a8:6a:37:29:6d:0c:68:69:68:c8:dd:
19:f0:12:3c:b1:d9:7f:44:4c:b7:bf:d3:37:66:21:
0a:f5:25:8d:5c:42:f6:0e:6c:71:c5:f2:01:e3:38:
20:57:45:c8:82:23:20:f0:ff:58:d6:3f:3a:06:14:
99:c4:bf:82:88:b3:72:eb:db:65:42:7b:92:19:93:
01:a4:c3:5c:ab:a7:c4:7d:52:23:c6:88:39:8c:86:
df:d8:2a:0a:fd:06:4e:f9:b6:85:39:19:86:a5:00:
e7:f8:72:d4:e0:2a:b8:16:e2:0c:d3:cd:48:d6:bf:
65:c1:1c:9d:17:3c:fc:96:a9:d0:3c:65:8c:f2:66:
f4:14:e4:11:a3:b1:c4:b0:4f:4e:94:65:c3:2a:85:
9f:7b:ac:38:2e:8e:a4:3a:63:80:44:a0:43:3e:ec:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:97:6B:C9:DA:B6:67:5E:FD:B0:F9:82:A1:F1:A5:CD:BF:65:F6
X509v3 Authority Key Identifier:
keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:84:f8:71:b5:a3:97:0d:1b:a1:a0:3b:d1:48:63:da:6e:49:
6a:22:31:cc:a3:cc:8a:43:84:83:9e:00:ad:de:d1:b1:d2:44:
1c:08:00:52:35:5e:25:c3:66:23:5b:19:45:2e:f8:e8:82:17:
fa:e8:bd:f0:58:1e:8f:ab:17:70:a6:5f:c1:6b:1d:76:10:79:
1c:e6:aa:41:f6:99:b8:03:0e:8c:bf:d4:15:c8:87:3c:ab:08:
5d:fd:06:2f:5e:c2:65:54:ff:5f:eb:94:f0:a6:31:63:53:d1:
7e:03:97:08:e2:7d:13:e7:53:0d:be:73:22:54:10:db:ca:13:
10:66:36:e6:a5:98:be:e9:9f:16:47:40:2d:82:4a:bb:04:bd:
b2:0d:74:cf:ce:5a:7b:0c:62:a9:09:65:0e:b2:37:33:2e:31:
9f:86:53:67:da:be:6d:d1:ae:49:66:43:1c:0e:33:55:96:2e:
25:27:bc:c1:fb:27:d3:ee:c1:9a:94:04:f9:b1:16:2c:c2:62:
5a:44:37:01:f9:9c:8d:d7:44:0e:f9:4f:03:50:ff:f1:c4:bd:
cb:51:fc:83:c0:9a:9b:05:15:09:d7:3f:1c:87:2b:0b:6c:5d:
19:33:c2:68:5a:e4:a4:28:34:bc:c6:5a:42:11:41:a5:d5:01:
82:94:bc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:52 2025 by rpki-client