Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
File: ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json)
Hash identifier: LtNdRvv9SrGs+idAHJBw1eGA19lRwFj8Bj6BK9OZWFU=
Subject key identifier: 3B:01:5E:22:B8:A4:29:ED:B5:87:23:8F:EF:3B:B0:68:BC:4E:2A:90
Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Certificate serial: 0690
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
Manifest number: 0688
Signing time: Thu 30 Jan 2025 22:19:14 +0000
Manifest this update: Thu 30 Jan 2025 22:19:13 +0000
Manifest next update: Thu 06 Feb 2025 22:19:13 +0000
Files and hashes: 1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: G5RxkBNVzXZ80PWM0f2hmp7+rdL2YQbYBkXWoYjOlfc=)
2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: WLTZjRNFNOpt4obFHZLuXm6PcfO8k1Rl/GXdIhTWuLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Validity
Not Before: Jan 30 22:19:13 2025 GMT
Not After : Feb 6 22:19:13 2025 GMT
Subject: CN=679bfae2-80de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:16:11:70:c1:50:a2:a3:64:04:66:d7:b3:
61:a3:eb:7c:3b:7b:d4:29:1b:be:04:94:af:66:50:
dd:2c:26:d0:ef:72:ba:b7:45:03:17:c2:56:5a:77:
d9:3a:e8:d3:4b:9c:46:d4:28:1b:90:7c:b4:ae:6b:
33:a0:65:3d:3e:e7:77:74:e4:e8:66:36:9f:bf:0a:
63:c5:cf:27:fc:66:4c:86:26:0e:d3:dd:16:a3:08:
e5:d5:bb:b9:b0:fe:17:24:d9:56:68:e4:16:fc:91:
18:81:51:e8:0c:ef:23:bc:34:9b:d7:e7:f9:4d:dd:
22:c8:7b:f9:ad:68:bb:aa:21:ec:94:67:55:96:d7:
91:c0:6a:25:8d:66:19:4d:f4:74:67:c4:52:3b:b4:
29:31:db:44:7b:bc:79:ab:4a:04:66:90:b2:23:76:
eb:a0:ed:ea:88:fb:91:94:19:0a:e7:c2:b5:7e:0d:
e5:c7:1c:d8:1c:23:7d:2b:e4:ec:f1:6e:0c:f4:e8:
66:00:8c:54:3d:24:81:26:55:96:b6:a7:5c:c0:10:
c8:20:bb:c4:72:06:5f:fa:f6:40:f8:99:f5:76:76:
9f:7b:f0:1d:fb:89:82:af:94:b3:a3:f4:d5:cf:7a:
56:fd:e7:ee:b8:b0:1b:84:ff:02:b0:e9:fa:e8:4c:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:5E:22:B8:A4:29:ED:B5:87:23:8F:EF:3B:B0:68:BC:4E:2A:90
X509v3 Authority Key Identifier:
keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:66:a9:1e:6f:fd:35:f8:8c:bd:30:2e:33:89:a1:68:47:
b7:49:0b:bb:39:fb:35:bd:0d:b0:53:25:0a:18:23:ec:33:57:
fa:32:16:75:01:82:5d:2c:8a:ce:c5:d4:7c:76:91:10:4b:9b:
2f:62:47:23:12:59:dc:90:0f:dd:c7:d5:6c:61:51:0a:a4:89:
01:c6:70:24:27:ac:9b:62:32:42:bb:64:f9:71:5c:e8:5e:4c:
8b:36:65:92:18:a9:5d:c9:b4:71:e6:b2:eb:b9:35:a5:62:f5:
6b:5c:cc:88:9b:a9:31:37:4a:28:86:8f:26:1c:b8:05:67:0e:
1a:62:d5:09:75:ea:3e:8e:a3:bf:dc:f2:b0:e2:47:45:2d:3c:
12:60:c0:0a:4b:4c:00:1a:a2:66:9b:99:75:e0:80:82:f3:8b:
c7:3b:92:ab:c5:e3:47:d7:96:26:a6:06:f8:77:db:ab:59:c9:
5c:e7:bb:70:ab:fc:8d:87:46:dc:a5:ea:48:31:b6:1e:41:1f:
11:6e:93:e2:0f:70:b3:7c:79:ed:14:4a:4a:02:ff:84:18:b4:
a5:c8:45:0d:9f:40:7c:7f:ac:8a:9a:4b:a5:93:d0:35:0a:ae:
b1:9e:77:79:1b:4e:10:79:4e:5a:78:a5:ed:a7:c0:f8:49:9a:
2b:14:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:30:00 2025 by rpki-client