Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier: Co2LhE8o2MdM0O36BAVl8Qveud8R9JZJmW6+ypha9ow=
Subject key identifier: C3:1A:7F:DA:EE:06:8E:53:7A:B5:A6:30:B4:78:F1:80:C7:D7:41:07
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number: 0627
Signing time: Thu 30 Jan 2025 22:37:23 +0000
Manifest this update: Thu 30 Jan 2025 22:37:23 +0000
Manifest next update: Thu 06 Feb 2025 22:37:23 +0000
Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: vKICNl0pEIz/ptohq0biw2mkU9OEYPlHRuQyQ1ELVko=)
2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=)
3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Validity
Not Before: Jan 30 22:37:23 2025 GMT
Not After : Feb 6 22:37:23 2025 GMT
Subject: CN=679bff23-c4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:2d:1e:4b:71:24:a8:99:29:ab:9f:a6:b2:
08:72:57:da:96:99:6f:de:e4:07:ca:d7:27:59:09:
db:23:dc:be:b8:be:14:3d:d7:7e:5b:3d:93:23:0c:
44:38:76:5e:06:1d:67:58:b8:06:12:d0:03:c2:fc:
67:aa:89:e6:de:78:b6:40:fa:69:fa:61:f1:65:7b:
fd:65:bb:28:65:f6:ba:2e:a8:cd:cf:c0:7f:33:a5:
7a:40:34:39:56:0f:73:71:61:58:b9:38:f8:5d:8d:
04:68:4d:29:36:f5:7c:e0:7a:58:fc:ce:77:f2:9b:
b0:ad:1d:b9:81:85:03:4b:9c:d9:49:62:85:d9:ac:
d8:ee:cf:c1:31:be:8a:90:fe:c3:54:42:ae:88:6c:
1a:2c:a2:42:9f:c9:f4:ae:92:c7:b1:5d:b2:ee:4a:
32:f4:c3:39:66:2c:ea:c8:23:02:53:1c:a3:68:4b:
16:91:dc:2c:f6:32:d7:3b:8d:ad:53:4c:47:5e:ac:
e9:c2:0e:1a:82:bc:f9:11:8d:ba:1c:e0:b8:9d:26:
c8:14:59:ad:53:93:80:86:e9:d7:0e:e2:e5:6e:f9:
6a:94:a8:6a:8e:8b:44:d1:a5:70:3e:46:ac:b0:f5:
e5:eb:40:db:62:3b:61:65:64:87:f9:41:15:dd:09:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1A:7F:DA:EE:06:8E:53:7A:B5:A6:30:B4:78:F1:80:C7:D7:41:07
X509v3 Authority Key Identifier:
keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:23:9c:fb:e1:0a:6c:43:84:19:68:ce:fc:ed:86:ad:a0:
1d:c0:2c:a3:8c:e2:a4:2d:17:6c:85:22:8e:d1:76:65:fd:3f:
6f:f8:3f:c7:4a:9c:76:c4:fa:66:33:a9:78:dd:9b:8c:f9:3c:
f3:b7:08:c3:76:30:00:61:77:74:90:11:a3:ae:4f:02:70:82:
42:1d:08:38:e2:a3:1b:52:26:e1:d6:45:39:c2:dd:35:54:7c:
64:c2:5a:07:1e:82:48:91:df:cb:39:d5:27:f4:ad:67:e4:ca:
81:8f:88:9a:1b:74:e8:6a:98:bb:21:65:e5:6b:75:2e:c6:fb:
24:02:27:f4:26:63:60:c7:79:62:85:54:36:13:58:5c:44:dd:
ef:fa:45:40:d4:a8:67:bf:99:18:bb:91:9a:49:4f:eb:bc:4f:
b4:ef:0d:c8:57:9d:11:f2:de:05:60:a0:61:ed:e7:05:5a:21:
ac:10:e1:18:79:9e:a3:75:ee:c2:d6:ca:ca:52:96:82:f3:6f:
88:ac:54:30:5b:84:b2:29:4b:b9:68:a6:12:a4:07:41:3f:3a:
b0:93:07:dd:07:7e:34:bc:63:15:e6:dc:16:76:ae:bf:9a:b5:
40:e0:40:9d:bc:24:42:31:8f:1c:01:e8:3c:6f:58:dd:3f:50:
65:dc:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:39 2025 by rpki-client