Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json)
Hash identifier: wHozf00/8/+3rLMcKExLAl3uZrYqoBkE8iSiF6Fd/I8=
Subject key identifier: A4:64:90:75:A1:73:7A:5D:02:D1:37:46:CF:0A:5E:A7:B8:0B:A9:B9
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
Manifest number: E7
Signing time: Fri 31 Jan 2025 04:33:57 +0000
Manifest this update: Fri 31 Jan 2025 04:33:57 +0000
Manifest next update: Fri 07 Feb 2025 04:33:57 +0000
Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: tNdUQCBWiZiqjN4DuMtQRPcmbcyjveL4lr1bLfdq+aw=)
2: E7021416B54B11EE86895416C4F9AE02.roa (hash: vzHahXAFIekcStIbFKvBTMDftL9nSsfmNUK1qbKIERQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Validity
Not Before: Jan 31 04:33:57 2025 GMT
Not After : Feb 7 04:33:57 2025 GMT
Subject: CN=679c52b5-bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:f7:09:48:16:e3:0e:a7:ea:d9:ad:70:e3:
a2:52:6e:d3:1c:f7:0e:8a:fe:24:e6:c1:83:f8:8e:
8e:02:7a:1c:8f:ec:72:bd:0f:57:ba:96:d5:ef:6d:
37:63:6f:b7:99:14:9a:ae:1a:70:af:40:f1:af:2e:
a5:73:e6:1e:65:d1:cf:60:85:e8:ba:fd:a3:ef:51:
88:63:4c:2d:46:18:fd:cd:4d:32:ba:c7:91:30:cb:
51:dc:13:c8:8b:93:a7:d7:9a:07:39:64:cf:5f:75:
c8:80:e3:74:fa:3f:a0:8e:c0:54:76:5d:be:8d:89:
bd:33:ae:a5:0a:8d:81:86:bb:74:9f:92:35:3a:d3:
cf:e8:d7:72:99:95:93:e6:ef:93:cb:e2:92:9d:5b:
a9:13:77:fa:3a:93:a6:cc:96:28:34:1a:de:85:64:
3c:2e:6f:8c:ba:bb:51:34:c8:9e:77:6e:08:1b:95:
0a:7e:35:4f:92:41:d2:4e:48:ff:f5:1c:5e:bc:76:
34:7a:51:b8:74:d8:38:9a:a9:3e:d8:40:a8:df:45:
45:ce:85:10:d4:8d:97:1c:aa:aa:33:6d:36:a1:19:
42:8e:3a:c1:3f:c5:5f:51:0e:57:5a:4c:05:9f:5f:
91:ae:e2:3b:62:c7:22:f5:a2:fb:a0:73:7d:96:ee:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:90:75:A1:73:7A:5D:02:D1:37:46:CF:0A:5E:A7:B8:0B:A9:B9
X509v3 Authority Key Identifier:
keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:66:09:70:74:75:5b:ef:a9:c7:76:6d:85:45:37:be:ae:
07:c9:fc:8f:20:72:38:c2:b1:75:0b:84:b7:2a:5d:d6:61:bb:
7a:00:81:a9:f2:6f:6f:a7:32:e0:68:4e:3c:b9:b4:1d:cd:9a:
d8:fb:a4:9f:85:7a:ea:d0:e7:af:3f:2e:66:66:bb:0e:22:f0:
a7:9c:53:09:9d:80:cb:57:31:39:d7:5b:71:71:4d:db:06:38:
83:9e:e5:fe:e2:50:1d:0a:d3:f2:f6:1d:dd:65:98:aa:af:6e:
51:67:ef:3d:82:96:f5:09:21:56:ff:de:b6:4b:a3:38:66:df:
f8:20:dd:39:09:34:9e:97:d4:87:e6:aa:44:2e:fd:0c:c7:ea:
89:ee:e3:6f:2d:5c:19:9f:89:ba:12:e2:31:49:2a:54:6b:3f:
d9:ac:2f:4e:18:c2:14:67:b8:68:42:4d:d9:2d:85:af:7c:f6:
05:1b:2f:df:dd:16:ea:dc:54:c9:e1:42:29:10:7f:91:e2:30:
d1:68:46:f5:75:3e:b8:3e:e4:0c:cc:6b:83:a7:db:1b:59:ce:
e9:32:ad:aa:78:c9:c7:6a:bc:67:71:fd:2b:54:7a:3e:7f:83:
38:f2:e4:f5:19:ef:b3:b8:1b:65:0f:c0:29:f1:89:9c:52:4a:
88:16:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:16:15 2025 by rpki-client