Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
File: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json)
Hash identifier: s2t6cMjktDupq0B2szv5Fq1a6RNut9U2jE1Sss9WwSg=
Subject key identifier: 8F:76:08:8B:78:00:0F:46:B6:DA:DD:42:23:C5:A3:DB:A9:25:61:FD
Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Certificate issuer: /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
Manifest number: BA
Signing time: Fri 31 Jan 2025 05:10:57 +0000
Manifest this update: Fri 31 Jan 2025 05:10:56 +0000
Manifest next update: Fri 07 Feb 2025 05:10:56 +0000
Files and hashes: 1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: +4s4fxY/NM6Ldv8qhZ87XccXrhqGinPhDITRmIaRksI=)
2: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=)
3: AC56C61497F811EF8D52DE75C4F9AE02.roa (hash: sHFvTnu8iiOhSTaoi08VnkboBzE+UHsLHvG1Rlt2ziw=)
4: DD3BD44A97F811EFA3214A76C4F9AE02.roa (hash: qmZEP9aC14nh+m/MAqOLG4I9jGYzcZX3SHvHLwpgPis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Validity
Not Before: Jan 31 05:10:56 2025 GMT
Not After : Feb 7 05:10:56 2025 GMT
Subject: CN=679c5b61-8884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:99:7f:9e:9b:ec:3d:c3:09:83:05:0c:47:
17:43:37:0a:2d:7d:35:c8:cb:14:de:05:b6:3d:35:
14:f6:19:4d:14:3e:ce:f2:0a:5e:9b:71:ac:a4:9b:
48:2a:de:1e:c1:e1:7f:c0:3e:4d:6b:27:e1:ac:0d:
cd:33:1c:9b:1b:c9:a1:fc:8e:e1:15:d9:6d:d8:13:
60:85:a0:ed:c1:46:3a:e2:1c:85:be:bc:60:4a:e4:
89:ef:a9:fe:15:f2:b5:51:84:0f:19:e2:62:ff:e0:
5b:a6:50:e3:c3:a2:bb:eb:1c:e1:89:e0:5c:59:02:
03:8a:50:fc:ef:e4:3a:9b:d2:11:59:2a:d9:bd:5f:
8f:85:a6:e0:73:a4:48:42:67:6c:92:09:92:d9:21:
65:45:51:be:e4:7f:e4:e6:a4:ce:07:ca:cc:44:e1:
39:ed:6f:d7:d8:1c:7e:fb:48:9c:b5:d4:84:09:8b:
24:3f:b1:a8:52:f5:1f:0f:99:91:b7:0b:8c:93:c7:
de:ae:b4:61:99:55:28:8a:e2:28:38:eb:7a:67:a7:
89:ad:43:00:b4:f9:c6:4f:4a:87:47:d7:ff:63:c9:
b7:99:f1:85:f8:e5:e7:92:ad:2e:49:dc:85:bf:49:
0c:58:32:6f:fd:35:8a:e3:40:87:13:fa:c7:cd:4e:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:08:8B:78:00:0F:46:B6:DA:DD:42:23:C5:A3:DB:A9:25:61:FD
X509v3 Authority Key Identifier:
keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c1:28:20:8e:cc:96:1d:1d:19:94:2b:8a:0d:ed:32:43:4a:
3b:18:1c:aa:d1:54:bf:28:df:8d:a5:da:8f:52:cf:65:bf:11:
b6:a0:43:04:59:fd:a9:ac:5c:4c:39:47:2d:62:a7:39:78:7b:
9c:70:79:ca:d6:90:39:6b:b1:49:44:26:b8:36:49:48:8c:14:
1b:8e:b6:3e:24:c7:e6:e8:52:cd:3b:10:8a:03:75:dc:7e:08:
e7:70:70:5e:23:29:f4:6c:88:ec:49:ca:4f:0b:48:47:16:14:
59:d1:a0:86:5d:6d:e1:1f:48:42:e4:42:8f:46:87:95:9e:6a:
c9:d1:f7:d5:a1:80:4c:af:5a:bc:60:41:8a:0c:11:17:3f:24:
4d:2f:f7:81:58:6f:d2:ea:55:e6:1a:81:14:1c:54:53:e6:ac:
f9:5c:c4:8b:90:db:c9:73:e2:2f:da:b1:89:90:f8:de:ac:d5:
5b:2f:d0:e2:4e:2a:50:6d:07:5a:82:49:19:56:22:65:01:f2:
f3:3d:b6:71:7a:a4:2f:04:7f:0b:ea:10:fb:9f:4b:22:f8:ad:
57:c5:ac:f8:23:52:2d:e8:46:d7:bd:c0:ba:bc:59:25:7d:4f:
dd:a7:4d:07:69:4d:28:5f:4d:fb:db:48:f1:85:ee:0d:6b:fd:
10:58:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:58 2025 by rpki-client