Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
File: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json)
Hash identifier: dVMoQlCb3MpAueAI6CgLy13otQGEJxecylkPP1+N/Ug=
Subject key identifier: 70:5B:E0:58:77:F4:2F:3C:D5:45:CC:0D:48:72:3F:B7:26:0C:32:DC
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
Manifest number: E2
Signing time: Fri 31 Jan 2025 04:45:59 +0000
Manifest this update: Fri 31 Jan 2025 04:45:59 +0000
Manifest next update: Fri 07 Feb 2025 04:45:59 +0000
Files and hashes: 1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: by1hwjXrW5/4d2x+UPwiGwpQnzoZtWgWHGQOj44fg0Y=)
2: 8BBDAB46651411EFBBCB6F31C4F9AE02.roa (hash: /I9CcLQXhCW4GEfreSLW1LTWj50i7vh8PtKD8gQU1UQ=)
3: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: pW8SIPuT5kOD4eZTF7di+hTXS7DwDK8pm89HGFANye4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Validity
Not Before: Jan 31 04:45:59 2025 GMT
Not After : Feb 7 04:45:59 2025 GMT
Subject: CN=679c5587-e8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:ef:81:0e:67:31:aa:ee:03:66:63:39:db:
9c:85:9b:42:03:06:b9:d3:e1:1f:6d:a4:82:48:f7:
68:6a:fa:50:2c:56:5e:44:80:62:6a:50:06:7d:03:
7f:03:63:29:14:9b:dd:1f:9c:14:b0:3c:0c:e3:7c:
c5:4e:a7:47:38:26:67:75:7c:da:48:12:dd:03:68:
f1:67:69:c2:95:22:bf:00:4b:86:4a:c9:4e:f7:86:
f6:66:f5:a1:92:de:3a:be:4f:23:0e:46:d6:40:bd:
08:65:31:ad:cf:01:76:1f:aa:24:7c:05:19:f7:8c:
7e:1b:6c:e3:03:23:37:ea:42:72:1f:05:23:63:d3:
97:ba:92:a1:1b:dd:8c:f0:2c:52:8e:8c:e3:69:dd:
84:2b:50:83:8e:58:ee:66:3f:88:d8:c7:c5:0f:f4:
35:ba:b4:2b:77:9f:f3:02:ef:1d:fd:58:f8:cd:5b:
54:a7:0e:ac:4b:2e:3e:d6:0e:53:59:13:91:29:c0:
1b:60:6a:ab:26:83:c8:cb:3c:18:47:00:5c:c7:0a:
41:a1:c2:4d:b4:66:bb:fc:21:80:21:13:f3:b2:b4:
87:ff:a5:99:11:c2:33:fa:84:af:40:83:2a:3d:04:
57:d1:88:3c:76:0f:46:97:ed:8a:e8:46:b1:4f:f1:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:E0:58:77:F4:2F:3C:D5:45:CC:0D:48:72:3F:B7:26:0C:32:DC
X509v3 Authority Key Identifier:
keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:cc:8b:05:7e:3e:67:56:6f:07:1d:01:78:d7:bc:83:fc:c8:
2f:0c:a4:c0:dc:cf:6f:47:36:30:db:d8:ce:73:34:5b:00:30:
d5:16:a8:9d:1a:9e:49:55:57:bf:c8:17:a0:a9:72:3f:11:02:
e5:4a:0d:e6:04:a7:5d:94:21:33:8d:8a:d3:93:07:f9:d9:79:
7a:6a:59:da:33:73:f5:9d:ef:f3:21:5a:17:c8:8d:76:0b:56:
6f:59:cf:f1:0c:60:26:3a:1a:b5:11:a1:c1:42:ea:e0:5b:fa:
af:74:a1:a1:be:0f:56:5b:87:76:ae:c7:42:83:b9:c3:20:76:
71:db:cd:b9:6d:5e:1b:63:3d:6e:28:e4:94:ad:8d:8b:d5:ca:
d6:64:3e:96:f5:e1:67:8e:83:f4:80:68:e4:78:46:45:98:4f:
eb:d3:80:91:d8:3c:ee:9c:a6:e4:49:23:41:3b:96:34:b7:87:
32:f3:8f:8e:8c:95:c1:7f:26:56:25:17:27:c2:e6:27:26:76:
34:87:cf:7a:8d:dc:81:80:bb:8d:78:bc:6b:a4:d8:28:8b:26:
a9:cd:37:f1:8e:68:a1:23:94:af:08:db:6d:cc:cd:94:f9:51:
67:76:a2:f1:0e:25:9f:3e:6e:7b:e8:c9:35:00:43:4a:5f:3d:
65:69:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:32 2025 by rpki-client