Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier: 5+mLTbKfXqJjxiSmrOkg8K4P6/kZEUo889ZfxLuFzbI=
Subject key identifier: E0:AA:D2:8D:F5:B0:1E:CF:64:29:34:C9:B5:4A:39:E6:BD:07:0B:21
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number: 83
Signing time: Fri 31 Jan 2025 05:42:46 +0000
Manifest this update: Fri 31 Jan 2025 05:42:45 +0000
Manifest next update: Fri 07 Feb 2025 05:42:45 +0000
Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: b935Z+m3d+VEOaFEsihHAcjI8syOHk8UbK5hwYS9l/E=)
2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Validity
Not Before: Jan 31 05:42:45 2025 GMT
Not After : Feb 7 05:42:45 2025 GMT
Subject: CN=679c62d5-a47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:8a:bc:30:a6:76:76:36:f8:8e:b3:7e:ce:
85:3a:3f:7a:79:94:5a:9d:d3:71:4e:d7:bd:58:83:
0a:27:d9:6a:97:20:92:bb:fc:c7:83:f0:43:f0:e2:
be:70:01:f0:bf:4b:fa:f2:04:f9:ec:e6:53:dd:fd:
a0:7d:dc:b8:74:d8:83:75:d4:6d:1c:d6:64:26:5c:
76:d5:6b:6d:e7:34:4c:12:48:6d:91:70:5d:c8:c9:
75:fa:c9:c8:39:95:ab:f3:84:89:ff:67:a3:f1:38:
4d:a8:2a:ef:fd:df:07:95:a8:34:d2:8a:80:a1:4b:
35:4d:35:98:a2:92:ae:80:6a:ec:fc:64:f9:80:5a:
38:a5:39:16:8a:38:ca:8e:b2:16:88:2c:f6:7e:7a:
57:f5:2c:58:0b:ae:9d:41:a9:4e:af:d7:09:e7:07:
01:7a:9d:7f:3f:cc:cd:53:0e:fd:3d:48:ac:84:28:
c6:4b:76:fb:29:58:93:c4:e5:c9:fa:c9:a9:84:de:
03:bf:15:f0:65:3e:8b:6f:d3:27:db:94:1d:27:29:
c3:46:9f:bd:e5:f0:40:73:e1:c1:14:ce:7d:f7:7b:
b7:b5:ca:a3:9e:fc:33:c0:d9:92:bf:b2:60:93:30:
0b:dd:76:83:cc:b6:ef:7d:11:fb:48:d6:86:0c:84:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AA:D2:8D:F5:B0:1E:CF:64:29:34:C9:B5:4A:39:E6:BD:07:0B:21
X509v3 Authority Key Identifier:
keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:cc:39:c1:48:bc:90:00:57:a4:3e:cc:d0:aa:67:a6:66:
9e:2c:01:4f:58:dd:cc:aa:fd:dc:c9:f8:65:8b:ba:86:ce:a0:
91:cd:9b:f7:a6:9e:64:c8:f5:72:72:89:45:5a:5a:e3:94:e3:
44:b6:4a:79:22:4b:ca:cf:3d:09:0c:f2:d7:0a:76:fe:6d:c4:
b8:bd:3e:4c:9f:dc:d2:68:75:0c:e0:29:66:b2:d0:42:8e:54:
d2:ff:a9:b4:17:5a:5d:86:7e:35:0f:7c:65:2f:8c:29:bc:7b:
94:5f:d4:31:e9:56:e4:c1:b8:49:75:95:fe:10:5b:14:63:bf:
0d:68:03:cc:28:af:0f:0c:8a:19:e1:24:ac:67:cb:13:a8:0e:
fc:98:6b:ea:36:8d:60:55:2d:b0:0b:11:5d:f7:3e:24:ad:5a:
4b:db:91:7b:c1:c4:1d:59:a8:a2:b6:4b:f0:22:88:0c:39:58:
34:8b:61:37:3c:3e:ff:6a:83:ce:f4:44:82:ee:f1:97:ca:04:
fd:cf:60:0f:e6:84:88:6b:8b:63:46:57:07:eb:c6:50:1e:74:
9d:ed:66:0f:6e:fc:69:e7:63:c4:e0:f4:21:8b:b7:2e:cc:62:
20:16:ca:e7:48:51:d2:8b:6c:d7:cd:d3:c6:44:d8:56:ff:79:
37:95:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:52 2025 by rpki-client