Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json)
Hash identifier: 3Pt3vS3KStvooFNymW7XvUMm0ia9Qh1udc6Hnl9jElQ=
Subject key identifier: 86:63:7E:2D:94:B2:A7:5C:00:5D:D5:56:F8:C4:5B:9A:7E:C4:96:4F
Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Certificate serial: 07D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
Manifest number: 07CD
Signing time: Thu 30 Jan 2025 21:01:28 +0000
Manifest this update: Thu 30 Jan 2025 21:01:27 +0000
Manifest next update: Thu 06 Feb 2025 21:01:27 +0000
Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: pRvcegNbh8L9cJlkiKAuEtJbopEPimTanIQdG0pCVac=)
2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: OYa6pZQjPMNNTwycOThVBVCHRmNZFoJ1RzY6PDCzyqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Validity
Not Before: Jan 30 21:01:27 2025 GMT
Not After : Feb 6 21:01:27 2025 GMT
Subject: CN=679be8a8-e493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:b2:5a:3c:fc:01:d0:4f:46:ac:5d:25:41:
6c:0e:6e:43:60:3e:50:a8:5c:d9:28:cb:92:2e:cf:
24:2a:0a:d9:d3:9c:f5:cd:78:0b:c3:b7:23:c6:b7:
18:7a:7c:8f:5f:1b:98:44:63:f3:af:a7:d1:df:a4:
6d:3a:82:33:d6:44:0c:f0:f1:59:c6:c7:0a:08:60:
a7:1f:d3:2d:c4:e9:42:bc:6d:3e:5a:e4:28:41:92:
a0:b4:27:41:1d:b8:6b:ab:17:1f:be:dc:e5:f0:6d:
0e:9d:ef:33:24:f1:eb:02:75:c2:ab:2d:55:e9:68:
55:2b:0d:69:44:3c:35:43:88:96:b6:7f:60:c6:ce:
5d:19:f7:52:92:9e:eb:e2:fa:4e:0e:d5:be:e7:cc:
fc:10:40:f3:c3:f8:7a:ff:46:69:79:cd:2c:ae:a7:
b6:ef:0f:05:cc:1a:e8:df:fe:96:b6:dc:09:8a:fd:
62:4e:99:57:b7:63:25:be:c5:32:a4:9e:b0:55:35:
2d:1f:3c:75:f3:7e:37:81:1d:6e:6a:92:d5:82:d2:
45:e7:18:b8:c6:de:8e:94:15:10:11:a4:1d:80:99:
af:af:b7:ac:6f:9d:68:14:88:39:a6:59:ca:dd:b7:
93:6f:9f:41:66:37:a8:b2:2f:d5:66:d8:f2:41:87:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:7E:2D:94:B2:A7:5C:00:5D:D5:56:F8:C4:5B:9A:7E:C4:96:4F
X509v3 Authority Key Identifier:
keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:42:69:43:48:78:bd:c9:29:2f:78:93:f3:0a:50:8c:a5:7f:
d5:d6:13:e8:ff:d5:af:7e:f3:c1:76:dd:ac:58:47:6d:a1:f6:
97:8a:85:a0:55:e8:e9:e7:ed:8b:c5:66:6a:b6:a0:1b:58:0b:
df:a2:ac:ef:75:64:47:7e:24:f4:b7:5d:ff:90:85:f9:f4:37:
dc:cd:87:9a:84:e8:4f:18:03:71:f6:d1:40:c8:86:86:15:53:
cf:25:e1:b6:ff:0f:b3:4f:ef:79:b6:77:fc:86:4f:ba:01:ae:
6c:96:b1:ac:e9:0d:65:f2:a8:b5:74:a2:49:17:93:59:8a:49:
d4:14:0e:cb:6f:a7:8a:7e:a1:f1:c6:ba:cc:3e:0a:45:53:83:
68:72:b8:ae:f8:b6:20:e2:51:ed:21:5d:38:68:0e:48:ae:b9:
55:44:92:9a:79:fa:e3:91:38:ab:1b:59:5e:e6:57:80:00:e5:
3c:ef:81:06:16:f9:63:54:fa:cc:0d:f2:f9:fb:c5:83:f2:97:
de:36:09:5f:84:aa:69:b6:19:aa:ae:90:06:31:32:7e:2e:10:
2f:a5:bf:9b:c6:46:61:94:3a:38:39:50:34:7b:2b:d3:72:81:
f4:a4:4e:4d:4a:c2:a2:d9:35:bf:82:94:5f:d7:e9:ee:b5:c5:
57:38:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:13 2025 by rpki-client