Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft
File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json)
Hash identifier: 7sWGuUTNRFxjSKzYQZvUyhpxbh5VB7bWTizEfVSDEsQ=
Subject key identifier: F4:D7:57:D2:A6:47:0F:D0:9D:D2:20:61:AD:A4:DD:31:D1:C6:27:D6
Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB
Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB
Certificate serial: 1198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft
Manifest number: 1182
Signing time: Fri 31 Jan 2025 17:12:56 +0000
Manifest this update: Fri 31 Jan 2025 17:12:56 +0000
Manifest next update: Fri 07 Feb 2025 17:12:56 +0000
Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: 8sGTl8vOfos5Tl9aBkXt18IBMR2hUkLhALqqqvC/8wk=)
2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: v7RjiERJ+UaXKwbiabeVpDMvLEWGvJ12a2mTucr6CA4=)
3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: TVhSAgEvsJfuZaOVoxgSaRmJu5V64CD24chcx4Ly8ag=)
4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: ScKShaSanQZL0Fzy7Q3PEdRjE3XVz96AGuDEeuPLE9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4504 (0x1198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB
Validity
Not Before: Jan 31 17:12:56 2025 GMT
Not After : Feb 7 17:12:56 2025 GMT
Subject: CN=679d0498-33fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:e8:aa:df:48:a2:04:69:0c:e6:dd:e9:20:
0d:b4:5b:a2:54:23:aa:65:54:1a:76:b0:89:91:5e:
03:be:a7:cb:ba:cc:fa:75:73:8d:a3:e1:e5:41:50:
6a:5f:85:2f:46:fc:c7:e2:bc:ee:c3:32:1d:88:f7:
fb:67:00:cb:1b:63:71:26:83:a7:96:13:50:85:c7:
87:f4:fd:89:14:ba:c7:bc:64:88:25:16:35:e0:92:
5d:d9:5c:29:f6:1a:b2:92:79:59:2c:cf:eb:4d:a2:
6d:10:ca:04:cb:cc:1a:fc:ff:c2:80:9d:cd:35:07:
97:fe:9a:ea:63:d7:0b:4e:0e:60:29:48:e5:58:38:
4f:a9:6c:0e:fd:63:2c:46:e1:36:93:e1:63:d4:04:
3c:ce:59:c2:d0:0d:e0:8c:33:95:79:fa:b7:55:71:
66:44:db:03:55:14:dc:eb:1f:9a:0e:37:26:0b:b6:
3a:a5:ef:41:f8:b0:27:b2:ee:27:28:8a:46:6a:5d:
0e:09:1c:45:25:2e:85:59:65:8c:2f:62:64:d5:5d:
84:b9:27:5a:2a:56:8d:1a:b3:cf:2a:ab:b9:37:3c:
ca:d8:ee:c6:51:b6:ce:53:89:03:ef:c9:6a:86:8b:
9a:4b:dd:82:89:b2:17:a7:25:d0:98:82:56:9b:a2:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:57:D2:A6:47:0F:D0:9D:D2:20:61:AD:A4:DD:31:D1:C6:27:D6
X509v3 Authority Key Identifier:
keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:77:ef:a8:5c:29:a4:1e:f5:81:8d:d7:9a:0d:13:47:ef:
e1:6c:2f:77:29:db:cd:f9:17:07:75:78:61:36:9d:b3:b3:78:
ff:77:e1:db:62:31:02:54:72:7c:b1:fc:92:3d:8b:07:12:a6:
b4:d3:94:76:6e:31:d5:3e:dd:c9:9f:dd:90:60:21:49:94:3a:
50:68:36:48:da:54:71:d6:24:36:bb:b0:ff:65:69:75:9b:4b:
b6:17:f6:49:1d:41:cb:52:f6:4a:89:0c:7a:98:71:93:cc:89:
22:8c:99:89:e4:dc:3a:7b:58:35:63:ed:f4:a7:36:1b:05:0a:
8c:98:d5:63:71:bd:9a:da:62:60:3f:4e:6e:d3:22:7a:b0:85:
04:20:61:27:b0:9e:ea:73:5a:e8:9b:3d:ec:b5:7e:2b:e4:c3:
39:41:b1:b8:87:7f:dc:f4:2a:b5:3c:54:41:38:fd:52:75:a8:
f0:8c:f8:97:a7:57:bd:38:e0:35:9c:0b:f2:a2:75:2d:c1:f0:
f0:11:d7:4e:e5:b2:77:d0:30:4e:8b:a4:0c:ed:00:db:07:a0:
f0:76:cc:a4:1f:36:c5:ce:4f:2f:9e:e9:21:62:37:94:cf:21:
e0:39:f7:f4:8b:52:ca:4a:05:96:e3:46:0d:d2:d2:5a:b4:d1:
16:70:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:58 2025 by rpki-client