Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier: gCn1uQYxd61O8ORqYx7dqkRSpl4f69MT8r6MVVnNUFI=
Subject key identifier: 78:0A:58:1A:A4:84:11:3E:69:88:7B:F3:33:AF:B0:1F:CA:A3:95:1D
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number: D4
Signing time: Fri 31 Jan 2025 04:47:41 +0000
Manifest this update: Fri 31 Jan 2025 04:47:40 +0000
Manifest next update: Fri 07 Feb 2025 04:47:40 +0000
Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: ri04Zjy/tYe3/0yulB1vQzfKyRu4lk8f/Jj32dAa8YY=)
2: 4DE56C729CFC11EEAB12747CC4F9AE02.roa (hash: mysruuIRLLcAG8pNE1dadiI1EmzCf/RbCHMF1vboVEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Validity
Not Before: Jan 31 04:47:40 2025 GMT
Not After : Feb 7 04:47:40 2025 GMT
Subject: CN=679c55ec-bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:13:da:03:ab:bd:57:02:1c:02:f8:ef:fe:
c7:26:ea:1a:f9:f7:a7:25:cb:2b:ab:e1:dd:23:b7:
84:22:dc:cd:03:1c:b8:92:dc:fb:2b:3a:17:06:d7:
b6:83:2f:bd:f8:a8:ef:0c:f5:62:12:12:a8:8d:52:
43:a7:1d:a1:3d:9c:ec:69:06:87:bd:78:fd:df:db:
d5:aa:69:30:ba:a7:0d:ec:c1:dc:cc:8c:b0:58:64:
fa:f0:50:5b:c2:15:32:c2:c6:62:75:ec:44:dd:6e:
97:69:6e:90:60:f5:52:7c:8d:98:21:50:02:e1:1a:
7a:66:ad:68:6f:61:40:ec:d9:28:8e:55:91:dd:bf:
6b:aa:ed:de:3d:7f:33:70:ad:2c:93:ab:a9:97:60:
9d:09:7b:7b:1a:56:b4:a0:f9:df:b3:4a:a2:10:89:
36:5d:6a:b2:d5:c9:94:21:5b:e5:17:fc:29:ff:98:
e9:42:1e:5d:9a:91:9e:08:02:29:8d:bb:f5:5c:cb:
ea:9c:4f:d4:85:13:bc:1b:c2:b7:4c:5e:41:5b:52:
48:6c:6d:a6:f9:06:c8:9c:24:d4:df:06:3a:0c:6a:
b8:e8:ed:49:e6:18:68:1b:e7:35:45:0c:b9:f6:30:
a6:84:e7:ab:ce:3b:ca:94:81:0c:e1:9a:00:0f:97:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:58:1A:A4:84:11:3E:69:88:7B:F3:33:AF:B0:1F:CA:A3:95:1D
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:cf:a7:be:d4:c2:80:34:b5:42:83:df:94:90:4f:d0:1e:
65:2b:91:6b:a4:ad:94:8a:4c:dd:01:00:c9:d0:31:9e:ba:9b:
fc:b5:14:af:94:dd:a2:9a:b5:74:c5:dc:9e:eb:3d:3c:0a:03:
ff:d1:94:26:2e:b3:d3:45:47:70:e2:1b:2e:cf:0a:18:08:3d:
30:35:9a:54:b5:38:d5:81:83:19:52:eb:59:ad:53:3e:67:23:
0f:4a:68:8f:f5:6d:0b:1f:66:5f:4d:0b:7d:59:d1:3b:2d:e6:
73:41:b3:62:ce:58:fe:f5:aa:f4:5d:aa:db:cf:e9:b7:e9:05:
78:aa:78:83:15:7e:23:dc:8e:66:60:e5:19:12:c3:09:10:9b:
d5:55:e8:d7:1f:c2:ad:0f:cd:45:e3:7d:d7:27:cc:fe:90:4f:
cf:cd:e3:91:80:09:f3:c4:4b:d3:20:8e:21:92:c3:c1:c2:f2:
0e:4c:5c:18:d9:f4:90:3a:5d:63:59:96:9e:72:ca:3f:36:4e:
c0:2a:b7:74:fb:cf:ac:72:35:93:97:3b:7d:75:2b:42:f3:79:
70:3b:ec:ba:dc:e8:a4:b4:d0:ca:cc:df:91:3e:e9:dd:cd:e4:
38:a5:1a:14:b2:42:35:af:78:65:28:07:5d:60:7a:e4:69:16:
38:c1:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:35 2025 by rpki-client