Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json)
Hash identifier: kusRfjcQVG8Cxaj5JbhgmoTzWNXpPyiYdvINsiOJPbw=
Subject key identifier: 59:CE:71:B2:51:EA:10:76:E2:42:BF:CB:AE:1E:76:D8:6F:30:32:6C
Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C
Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
Manifest number: 7D
Signing time: Fri 31 Jan 2025 05:46:10 +0000
Manifest this update: Fri 31 Jan 2025 05:46:09 +0000
Manifest next update: Fri 07 Feb 2025 05:46:09 +0000
Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: FKPB7669g9C3pKnhDpTTHEkGwmFmLsPlwEz6wCg5/yU=)
2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C
Validity
Not Before: Jan 31 05:46:09 2025 GMT
Not After : Feb 7 05:46:09 2025 GMT
Subject: CN=679c63a1-bf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:83:03:6e:25:f3:fe:d7:ce:1e:e1:7d:a0:
9c:b7:71:79:3e:80:8c:da:c7:64:98:35:27:8e:e3:
ef:aa:48:89:3c:89:ea:e1:4c:d6:41:5f:1a:e3:b8:
4c:36:0d:a7:b6:cd:50:65:1d:11:52:e7:f7:e6:1e:
bb:4a:12:f4:3c:31:2c:58:f0:82:9e:a1:91:40:56:
69:aa:28:a5:30:75:91:ae:f1:6c:66:63:70:64:45:
73:21:19:ae:b8:32:ca:23:22:34:5f:76:41:0c:f3:
ae:2c:fa:d1:a7:a6:85:f5:2d:6f:db:3d:58:f3:92:
63:22:8d:52:b4:af:a8:c0:37:02:34:7a:ed:1a:f4:
eb:64:3e:24:29:e5:20:69:63:b3:46:2f:f8:f9:58:
0d:7a:24:a3:8d:a0:f5:df:83:ad:aa:33:42:06:82:
1b:68:8d:9b:7d:b6:70:9b:7b:00:8b:45:5a:60:76:
de:8a:d5:38:61:7b:9f:45:88:fc:92:04:4f:1d:67:
4b:8c:b0:51:89:26:77:64:6e:28:b2:25:4a:f2:69:
56:56:09:f0:92:db:d1:9a:15:49:5c:62:15:92:7b:
91:2f:c0:e2:e6:3c:a8:d9:02:67:8e:59:99:35:1d:
5f:7c:cf:62:94:6d:0f:98:22:7d:86:f0:ad:5b:3e:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:71:B2:51:EA:10:76:E2:42:BF:CB:AE:1E:76:D8:6F:30:32:6C
X509v3 Authority Key Identifier:
keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cc:d5:72:5b:a5:12:54:3e:2f:38:c3:01:32:92:db:eb:31:
23:84:b3:98:eb:80:ca:3e:36:61:23:ed:99:1e:a1:de:f0:1c:
0c:03:cb:4b:e0:e0:ff:23:ad:6a:6a:12:57:37:6d:58:87:66:
be:50:e9:cb:bd:ad:40:d9:5f:12:73:f9:89:8d:2a:07:a5:2b:
a2:5b:32:2b:af:48:8f:8e:5c:d5:db:ec:40:c7:1f:a2:34:95:
e3:44:64:a2:2c:91:2a:2e:95:40:84:e3:26:3e:0c:2e:54:45:
85:b2:a6:87:98:c9:67:ee:cf:b7:0e:42:db:a9:a7:df:9e:43:
3f:84:90:fa:17:42:46:1f:c2:eb:3d:ab:4a:9a:92:23:c2:83:
c8:ae:d2:47:2b:39:22:e4:2d:8b:28:15:68:8c:94:0e:56:6d:
81:75:27:c4:a8:43:55:44:91:60:13:64:48:3d:68:66:39:93:
6f:7e:85:be:e7:a2:69:4d:3d:1d:43:78:bc:ed:f9:f4:83:fc:
53:ee:17:28:f7:eb:c0:3d:47:29:9e:ca:7d:46:c1:5f:2b:2e:
17:e0:4e:52:68:7e:bb:22:26:88:bf:d3:90:fd:7f:99:86:55:
1f:37:f3:c2:28:1c:92:47:bd:2c:7e:74:fc:6b:df:1f:53:30:
f0:bd:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:18 2025 by rpki-client