Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json)
Hash identifier: UglyscmkN8mpB6B9Qol7gv8oIMMwoZ4g662hr+tB9HU=
Subject key identifier: 9D:11:8C:A2:05:9D:09:8C:A1:B3:64:CA:BA:BE:FE:04:00:4A:B8:5D
Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Certificate serial: 1AC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
Manifest number: 1A9C
Signing time: Fri 31 Jan 2025 16:21:08 +0000
Manifest this update: Fri 31 Jan 2025 16:21:07 +0000
Manifest next update: Fri 07 Feb 2025 16:21:07 +0000
Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: gJnPponZz+EndEndUjU3VmFCxV1o2H/3xEBeN/DF7uY=)
2: DC3B90E4520011ECA6088714C4F9AE02.roa (hash: tVOP8LyZJ77JRBIkUucA79A27boRokWrzqFOTarPZXk=)
3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: HcXFJpDWZcmR/k4nnUkzVGlWv0kfSW5A6hP7Nj80qKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6851 (0x1ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Validity
Not Before: Jan 31 16:21:07 2025 GMT
Not After : Feb 7 16:21:07 2025 GMT
Subject: CN=679cf874-e27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:b5:8d:d6:5b:13:88:92:61:61:6f:f6:8a:
2b:52:9a:9d:6c:88:e7:15:4c:c8:1b:f7:96:ff:8a:
73:45:dd:2a:79:88:d2:57:0a:88:96:17:90:1e:01:
54:a9:07:2e:01:49:89:19:8d:f5:04:a5:69:de:68:
0f:15:fa:84:1e:3b:33:6d:ea:a3:d8:ad:41:a4:2c:
f6:55:1a:2f:b7:70:8e:39:ce:1e:c4:e2:29:6a:08:
86:7e:03:ce:d3:a7:02:ba:19:c8:84:68:14:d9:56:
12:9f:a5:50:a2:21:c4:c8:5f:2c:9e:fb:3f:fc:1e:
f9:e1:c8:5a:e7:65:59:7a:49:c7:72:e1:dd:f2:b3:
87:b5:2c:74:7c:e7:f4:83:24:71:d4:ba:9e:b7:95:
a8:4f:90:f5:2b:f0:01:8a:25:be:cd:54:e3:60:39:
58:67:44:00:1f:8f:c7:f1:41:b5:ac:ef:d2:63:1d:
0b:21:de:b2:cb:49:69:81:d7:8c:64:74:76:e8:8d:
e4:fa:53:6f:fc:ca:3a:85:18:40:4e:86:a8:9e:a8:
53:7f:81:1d:f0:be:d7:e8:64:ba:17:e1:79:0c:11:
53:c1:a4:b5:82:df:21:97:02:15:d2:26:67:c7:ce:
0b:4b:e9:cd:2d:7d:59:3d:50:85:cc:ac:56:ce:9b:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:8C:A2:05:9D:09:8C:A1:B3:64:CA:BA:BE:FE:04:00:4A:B8:5D
X509v3 Authority Key Identifier:
keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:89:73:6e:a0:d1:cc:e2:30:1b:be:35:f4:42:f3:1a:76:cb:
f0:2d:19:e3:52:73:04:ec:7d:49:79:f5:54:68:3d:a6:fa:13:
43:d0:c8:e2:f0:54:c8:fb:7e:01:dc:b9:bd:ae:aa:85:70:98:
45:ac:0d:4d:59:c9:ab:f6:7b:96:61:c3:9e:5d:0b:a6:0e:d8:
b5:12:64:c1:f7:93:1a:14:e2:71:b0:56:63:89:99:df:8d:35:
55:a3:26:e6:ab:bb:13:65:3c:9b:db:28:1d:34:77:53:4d:78:
7b:84:7e:42:36:7b:db:02:e9:07:33:7b:95:78:af:e4:cf:9f:
17:f7:a8:72:79:5d:a3:9e:cd:54:23:ed:2f:b9:33:d7:b8:06:
ff:67:93:cc:93:21:83:f6:31:6b:ee:c4:75:ac:75:ce:08:9b:
36:81:95:e9:3b:a6:2e:52:fb:26:8f:2e:8c:0d:26:7c:2f:20:
f0:45:01:8e:05:dc:0a:91:d7:48:31:83:bb:91:a8:72:81:9e:
e4:4d:b5:21:f0:3b:0b:ce:15:62:4c:31:bc:46:55:96:03:cc:
da:36:49:5a:66:d4:b0:5b:be:74:f6:80:84:a3:1b:8a:11:36:
e5:8f:c4:40:25:d5:f2:db:62:79:f8:73:42:3b:18:91:5a:3e:
23:c6:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:50 2025 by rpki-client