Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: eeOx7+uDfZxwFz2i+KEvNWXfkvU+sGCVkDBxlIrHx3E=
Subject key identifier: 68:58:70:F5:2E:3C:B3:9F:8D:B7:E1:3A:08:EA:6D:57:AD:D4:D1:64
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 01A0
Signing time: Fri 31 Jan 2025 02:33:27 +0000
Manifest this update: Fri 31 Jan 2025 02:33:27 +0000
Manifest next update: Fri 07 Feb 2025 02:33:27 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: EwFXrk19JnuvE9qUN5FqrJaDhwWlPylabDqTZZk2Ej4=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Jan 31 02:33:27 2025 GMT
Not After : Feb 7 02:33:27 2025 GMT
Subject: CN=679c3677-d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:63:be:ec:ac:06:03:f5:c8:53:f9:07:21:18:
4c:81:b7:d5:b7:ce:e4:e3:56:8e:b9:c9:78:e1:7a:
4d:31:11:1a:95:b6:96:b0:29:27:04:a0:d9:0f:2d:
eb:51:51:ab:80:e9:ea:bf:27:a6:fb:66:08:ef:9f:
eb:fa:4d:6f:a2:84:d3:ac:60:fd:9b:a4:20:19:a3:
37:c8:39:a6:7e:a3:1b:3d:9d:17:f6:5e:1c:8f:1b:
90:50:44:77:81:f5:db:07:63:31:a1:58:5d:5d:c7:
76:19:25:70:fc:ed:83:10:10:50:1e:99:52:72:92:
93:de:11:69:7a:11:60:67:bc:ff:69:b4:56:93:c1:
10:7a:b3:22:ba:eb:4f:16:5c:1b:5a:a7:e0:10:1a:
3b:80:41:b5:d1:8a:1f:fd:ae:17:fd:57:cc:de:58:
6f:dd:7a:5d:19:df:9b:3e:14:5b:1b:bf:8d:a1:f8:
6e:b3:cd:36:51:81:7c:87:af:7e:6f:f7:57:cf:c6:
04:4d:39:00:da:d8:64:12:f4:e4:73:ee:42:d1:45:
2e:84:3b:7d:5e:fc:23:10:2a:75:35:f2:78:51:d1:
f2:0c:71:13:19:95:cc:03:e6:b2:c4:ab:3a:cb:8b:
59:13:f5:bf:9a:ac:e8:52:89:09:56:3b:62:ba:a7:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:70:F5:2E:3C:B3:9F:8D:B7:E1:3A:08:EA:6D:57:AD:D4:D1:64
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:27:a1:76:f8:95:3e:20:ee:ef:01:01:7a:c0:87:ed:44:
ac:47:c3:65:db:a3:6e:4d:e5:a2:49:6b:9b:69:ce:17:d7:c5:
7c:2c:65:bc:dc:47:be:4c:67:88:fa:a5:bb:a7:d0:f2:9f:b5:
53:e4:5e:f7:c6:4e:36:96:5a:d3:42:40:8f:45:e9:54:84:e4:
ef:c1:51:7d:75:4b:78:1b:b2:12:68:d3:7c:c7:cc:32:dd:47:
fd:31:81:0c:fe:91:a4:c3:3b:95:a5:be:f3:99:90:de:a1:9a:
ec:ce:b6:1d:cf:a2:e8:5f:e3:55:87:32:6b:0c:5a:4d:49:87:
48:14:00:44:bc:59:ea:33:94:9e:55:f2:25:2f:a5:79:82:93:
70:a3:00:5b:d5:cc:c3:55:d4:db:a0:f1:ec:1a:1c:d5:8b:98:
51:a4:1e:e1:32:f9:d0:c8:46:07:35:91:22:4a:f6:1e:be:e9:
e5:0a:61:00:64:02:8f:a8:84:c6:a9:c8:48:f2:0e:d6:dc:95:
68:50:3f:f6:ab:c9:e2:89:97:7b:30:d3:f9:ca:cd:7a:36:1e:
16:4f:e6:80:82:ea:ae:8c:e7:a1:df:14:1c:83:ce:4e:60:43:
15:91:d6:a4:a7:8d:cf:d4:d5:cf:05:5c:e1:f0:70:06:2b:a9:
59:6e:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:36:27 2025 by rpki-client