Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft
File: myAvlYUe_EtkzjtAnGxgSzW0mNg.mft (raw, json)
Hash identifier: FRrEl5de7uaw0qR0LSJt6FMoScG7e53V5dk6KMzUlas=
Subject key identifier: 18:0F:ED:8A:FB:2D:D5:E8:10:76:3C:2C:BE:67:01:2A:F7:41:E4:3C
Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8
Certificate issuer: /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8
Certificate serial: 097E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft
Manifest number: 0972
Signing time: Thu 30 Jan 2025 20:15:08 +0000
Manifest this update: Thu 30 Jan 2025 20:15:08 +0000
Manifest next update: Thu 06 Feb 2025 20:15:08 +0000
Files and hashes: 1: myAvlYUe_EtkzjtAnGxgSzW0mNg.crl (hash: gKJtZU7cMe8DGMdnF8NyA8swNVA9cKI75NWO1ZxEc04=)
2: 1EEB10267CFB11EBA8C7B009C4F9AE02.roa (hash: O77zp6ks0TqxaDAkJp4Lm1+BoJkZNosQNYkw2uGOZ3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430 (0x97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8
Validity
Not Before: Jan 30 20:15:08 2025 GMT
Not After : Feb 6 20:15:08 2025 GMT
Subject: CN=679bddcc-6b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:8e:2b:2a:42:16:07:1f:5f:0a:d8:53:6e:
52:72:4e:05:a2:d7:9c:42:2c:3e:96:94:e0:a2:00:
f5:6f:b4:f0:cc:42:1c:a7:6e:31:14:f7:85:70:76:
00:0b:d6:c8:8a:8a:55:e0:8b:a4:b5:58:37:6c:a4:
7f:b9:31:ec:29:57:b7:b1:0c:3e:ef:a5:6f:5b:63:
24:45:58:21:6b:8a:4f:74:53:5d:72:e3:b9:e2:30:
c5:89:d1:d1:18:34:f0:c9:c4:6e:f3:58:58:12:09:
2f:a7:a8:05:b9:92:88:d1:0d:d3:5c:db:b3:d4:6e:
a7:38:df:6c:2a:53:d4:7d:51:f7:54:13:39:24:5f:
02:34:06:12:92:d5:24:1d:80:18:a2:43:33:ba:29:
48:ee:7e:d8:4c:fe:14:d8:70:03:97:8c:7c:20:46:
4f:d9:21:37:3f:27:11:e4:94:e9:9f:1a:fa:ea:4b:
4d:f2:88:37:da:bc:e9:20:9b:8c:0e:0c:d1:69:7f:
66:46:3c:6a:7d:f2:61:36:30:85:79:9b:46:d1:78:
01:f0:a0:eb:6a:80:78:d6:c1:73:0b:60:bf:71:b2:
5a:57:64:b6:8f:20:fb:0e:d7:a8:db:44:02:7d:26:
62:74:4f:5f:e3:37:ae:ce:33:9f:b5:e5:32:76:45:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:ED:8A:FB:2D:D5:E8:10:76:3C:2C:BE:67:01:2A:F7:41:E4:3C
X509v3 Authority Key Identifier:
keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:fa:6e:70:30:7c:11:91:78:60:8f:c5:6f:02:8c:8e:b9:
0f:d2:63:b2:ca:f1:bd:14:4c:ca:2b:10:3d:ca:5c:a7:73:4b:
c7:5b:61:3e:98:5c:f8:41:24:9e:e6:ba:6a:f4:31:74:39:91:
96:c6:e0:76:44:b7:9c:29:23:5b:2c:f3:0c:4e:91:27:3f:16:
48:11:f4:2b:64:a8:51:d3:6f:4e:38:a9:84:2d:00:b8:7a:93:
dd:7a:37:3e:c9:07:85:4a:0c:81:51:a5:7d:bd:64:8a:e6:95:
ab:8b:bf:1a:18:20:93:3c:75:38:86:90:e7:c8:1e:b1:de:e4:
d4:d2:3d:1a:cc:cc:8c:f7:f5:64:02:07:8b:e7:51:36:92:25:
04:f9:97:1a:4f:a4:4c:ce:8d:8b:aa:30:14:fc:9a:30:c7:27:
39:d7:ce:90:ee:0d:e7:cf:f2:0a:db:5a:19:0f:87:06:09:55:
2f:b8:c1:38:7d:b9:a6:fe:83:19:38:f7:b3:68:8c:e1:fd:ea:
bb:c4:21:0b:f2:70:cd:d1:2a:f8:e9:21:2a:93:17:25:b0:df:
93:3b:52:0e:0b:4e:4b:62:b1:09:41:f3:b7:07:6d:0c:de:cb:
ac:5e:8f:f2:95:23:ab:d3:22:cf:1f:c4:0e:3a:eb:b1:e4:be:
b3:75:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:40 2025 by rpki-client