Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier: kVXmzDFxhDH3R8F2l5ufUCjj35LQtUB93d3yEtWhgs8=
Subject key identifier: BA:76:E0:71:8A:10:F2:8A:49:CF:F8:5D:ED:F8:AB:78:83:DC:3C:34
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number: 061C
Signing time: Thu 30 Jan 2025 22:41:27 +0000
Manifest this update: Thu 30 Jan 2025 22:41:27 +0000
Manifest next update: Thu 06 Feb 2025 22:41:27 +0000
Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: SDafJYlLcHIOxW49SNcr7w3Ic31dlN0YHflXRTVOEC0=)
2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Validity
Not Before: Jan 30 22:41:27 2025 GMT
Not After : Feb 6 22:41:27 2025 GMT
Subject: CN=679c0017-13a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:bc:33:30:f3:be:ca:2d:08:09:ab:ae:c3:
21:55:a7:4a:bb:3e:6f:40:44:40:62:9d:65:57:72:
31:6b:34:38:38:c2:6b:89:82:d3:d2:18:4c:08:9e:
c3:5a:4d:3c:6c:de:15:56:c9:af:5d:2d:6d:8b:d3:
c0:b5:1a:43:e2:c1:98:95:68:98:97:45:b8:0e:86:
70:e7:14:f5:70:2c:68:5a:61:ee:ce:6c:cc:8d:5e:
94:4f:f7:65:f7:14:78:0a:9e:4d:04:2c:e0:02:51:
15:c5:d5:68:4f:17:69:3b:52:33:d3:86:b1:52:26:
fa:94:61:27:3b:65:cb:dc:37:78:6c:0a:1d:22:43:
d3:71:db:22:77:c5:1d:d2:7a:4a:3a:8a:96:59:b4:
ac:6f:cb:88:9f:bf:91:49:42:9f:c4:58:82:b0:db:
4b:35:a2:ff:e7:8b:89:d5:56:57:ca:97:ff:26:a0:
31:44:50:e2:6e:ee:98:68:0c:c6:d3:d3:ea:49:98:
e5:6c:74:b7:28:5b:86:91:02:d5:05:e6:a7:7e:0a:
d1:0e:40:7a:fe:02:a2:d9:36:0c:cc:7b:f5:f7:65:
f7:f1:cb:d5:fb:65:ce:2a:e1:f6:90:7e:19:b2:3e:
1f:15:aa:a6:dc:de:dc:be:ab:ea:8f:35:b5:6c:3d:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:E0:71:8A:10:F2:8A:49:CF:F8:5D:ED:F8:AB:78:83:DC:3C:34
X509v3 Authority Key Identifier:
keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:87:74:34:35:f2:dd:2a:46:5f:6b:90:85:80:e6:86:49:d7:
0e:5f:c2:ea:a8:fb:29:30:0e:6a:fe:b7:2a:b4:01:04:27:00:
de:9e:6c:ee:50:cc:31:38:96:26:72:e0:d8:5d:28:1b:2d:28:
0e:29:8b:49:e6:3d:cc:68:be:98:00:4a:c6:ac:9f:e1:59:90:
eb:29:22:12:99:20:92:70:b1:ce:b6:d1:71:92:2c:a1:ea:fe:
06:a9:aa:6c:c9:51:2f:79:01:20:ea:9f:31:79:eb:fb:ed:d0:
f0:4e:85:22:0e:30:fe:da:0f:42:91:4b:64:19:8b:63:d3:c2:
59:c2:a6:cf:39:1d:25:6a:b7:35:0d:16:30:84:ea:da:ff:60:
34:11:ea:67:01:7c:57:df:08:f0:96:33:fe:8d:88:a4:65:e4:
58:e6:1c:52:5d:23:8d:df:93:d2:50:be:96:90:8c:ba:9e:74:
07:f9:f9:6a:dd:c1:82:ef:ac:17:40:2b:01:16:1d:04:f3:5e:
89:8c:09:63:8c:36:43:0f:f0:d2:c4:f1:6d:ca:ec:73:a2:59:
65:e7:fa:c7:4c:b8:6f:58:da:f8:dc:0e:b5:84:1a:26:c7:ff:
d0:5b:c6:d8:d3:10:b8:52:64:99:68:ed:6b:60:e7:cd:be:1e:
ee:93:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:51 2025 by rpki-client