Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier: x34AmcHVqdO6C3vWo9wPwj0AugGR3fPbK3XsLo4dtdw=
Subject key identifier: 2F:03:09:67:CF:49:86:9D:C1:1E:75:77:1F:D4:BE:0A:75:33:81:FF
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial: 0353
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number: 0350
Signing time: Fri 31 Jan 2025 01:05:33 +0000
Manifest this update: Fri 31 Jan 2025 01:05:32 +0000
Manifest next update: Fri 07 Feb 2025 01:05:32 +0000
Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: twznW5l4qKfl8UtvaJL0O/xxY37PNaXAxBI9xPeIT0E=)
2: 478248BEA05511ECABAEA234C4F9AE02.roa (hash: cArt6YUTsbYSvd5ig9TOlKQHhkid32MBiY+8srmpgT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Validity
Not Before: Jan 31 01:05:32 2025 GMT
Not After : Feb 7 01:05:32 2025 GMT
Subject: CN=679c21dd-dc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:81:0e:33:0a:84:86:8f:bc:04:2a:fd:08:
ba:6d:93:6c:c5:df:08:cc:84:f5:ed:36:36:03:29:
bd:e3:ee:f6:d6:6b:f1:d8:61:7c:c9:7f:45:67:05:
d6:21:04:ab:94:a3:d5:13:0f:e8:44:75:0f:2a:bf:
c5:41:83:41:89:ed:7c:90:54:64:cc:4a:11:91:76:
3a:1f:6a:10:99:05:f2:06:9e:6f:0c:b5:bd:83:b4:
a1:de:40:10:04:d9:11:87:98:71:d4:4c:f4:08:3e:
f0:0a:21:9f:8a:ff:36:c8:c9:08:74:33:67:f2:26:
a6:85:b6:1c:b4:c7:00:6d:f5:50:63:c6:b1:2c:d1:
c4:2a:bc:3b:ca:7a:d5:7f:8e:47:b6:84:62:51:f6:
36:7c:a3:1c:14:46:09:dd:dc:3a:fa:c1:47:6f:58:
0d:fb:71:4c:89:58:cb:b5:0f:a7:29:b5:6a:b7:99:
af:14:87:36:ed:88:83:1a:1f:ed:a9:8e:a4:d7:59:
85:8e:69:6e:11:a1:ff:19:46:0c:51:84:28:e0:5c:
0d:ee:11:d7:be:16:0d:af:b7:dd:34:8c:74:06:50:
6e:01:50:19:3f:38:1f:23:8d:54:2c:3b:53:ca:d2:
df:31:37:03:8c:e0:d6:22:be:8e:08:bf:af:c5:49:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:09:67:CF:49:86:9D:C1:1E:75:77:1F:D4:BE:0A:75:33:81:FF
X509v3 Authority Key Identifier:
keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3a:b5:c7:fe:35:36:16:a9:e7:88:95:33:5f:a0:7a:a5:a2:
e8:35:d8:b8:ad:8b:1f:55:43:f0:9b:c7:1c:78:9d:9a:86:99:
e0:76:e8:16:83:28:84:d8:dc:0a:d9:56:21:d5:03:4a:38:4e:
3f:73:a6:10:f4:ff:aa:ec:c7:14:7e:85:f1:aa:7e:cd:25:e8:
8d:05:de:bc:77:49:2a:b0:e1:5e:84:f0:95:a3:d1:96:6d:72:
5f:bc:3f:6c:d9:f5:58:1c:42:10:48:36:d7:c0:c4:f2:e1:d3:
9b:ae:2b:ac:9f:9b:4a:5f:91:69:7d:25:bd:e3:49:77:e8:30:
3a:ee:37:90:0d:52:0d:9d:1c:2e:14:b1:0c:c8:d4:96:20:b0:
fc:c1:b1:21:3e:3b:b6:82:b4:ce:44:97:8c:22:24:33:18:29:
f9:aa:23:2f:84:29:e1:67:e4:e5:6f:90:50:5f:9d:d7:88:db:
b2:ef:b0:b6:6b:8d:6e:b6:eb:2e:16:c3:74:eb:af:04:4c:2b:
a8:d8:cc:34:5f:4f:6e:e4:cd:56:df:27:cc:ce:d2:71:45:cd:
dd:c0:28:f6:06:fe:6f:68:49:b9:a6:1e:95:e3:05:49:43:5b:
16:96:a8:90:f4:a6:5e:73:bb:5b:e6:36:9b:a3:5c:d5:bd:d6:
8c:c0:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:58 2025 by rpki-client