Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
File: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json)
Hash identifier: 2MKnSDzA1rQ9furXvouz8J5JnzLyVP9IepxDp56CG6E=
Subject key identifier: D4:5D:9B:6C:3A:53:71:A0:AB:2C:85:07:78:19:88:9F:90:60:F2:A1
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 04:07:41 +0000
Manifest this update: Fri 31 Jan 2025 04:07:41 +0000
Manifest next update: Fri 07 Feb 2025 04:07:41 +0000
Files and hashes: 1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: ZU3+aCxHnC/izedZirMFikiH6zV7P6eMmVoSWLNIKmQ=)
2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: qiuU93Lc7YatLMlsGPtovUfT87zuHB3bZX8CwFGs5GE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Validity
Not Before: Jan 31 04:07:41 2025 GMT
Not After : Feb 7 04:07:41 2025 GMT
Subject: CN=679c4c8d-164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:9f:ca:3d:04:d0:31:57:4f:2f:37:5e:45:
bb:ec:af:78:c2:5e:7d:2d:57:e6:d7:b2:be:2b:8a:
54:64:ae:10:8f:56:13:01:0f:f7:3d:b3:d1:89:0b:
65:73:bb:c1:9f:ee:9f:70:27:d3:41:06:21:85:f6:
0d:2c:ac:c5:df:a1:fb:7c:a2:b2:55:a2:5c:71:02:
c1:97:d9:e1:ed:36:3a:4b:cf:55:fa:0d:16:8d:e1:
79:46:70:85:d7:4d:59:42:a5:54:f7:24:72:b2:56:
4a:49:44:53:63:00:25:d8:d2:8f:b5:84:4f:32:38:
f4:30:76:0e:c1:2c:48:38:0e:2a:6b:a5:49:9a:d3:
64:70:9e:5b:e4:51:5f:96:23:55:e6:a8:0f:ef:66:
78:21:94:89:95:a8:f1:cb:59:e2:9a:d3:19:93:dd:
e8:05:37:9e:6e:6a:78:a7:c0:55:ae:4a:b1:76:9d:
28:06:44:5d:fd:ab:9e:25:0c:99:f5:6f:d7:64:ba:
d1:94:2b:be:77:35:39:79:58:1c:f8:78:c3:8e:9b:
df:be:1a:75:0a:cb:d6:c3:0c:1e:49:39:1e:9b:c4:
d0:2b:14:15:22:36:b5:43:21:48:d6:71:f8:3a:1c:
b4:90:58:cf:76:ad:8b:e2:03:82:20:a7:c4:7d:9e:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:9B:6C:3A:53:71:A0:AB:2C:85:07:78:19:88:9F:90:60:F2:A1
X509v3 Authority Key Identifier:
keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:25:df:a8:7d:cf:33:b1:cb:3b:a4:8b:70:37:84:10:74:d8:
36:db:9f:ae:95:2b:20:48:86:95:75:3b:ec:1e:60:c6:38:5f:
b9:8f:b7:a0:95:ee:92:6d:80:d9:7a:13:8c:3d:2b:72:94:05:
cf:47:00:b3:9e:02:7d:a6:1e:75:b3:3f:a0:77:cf:c8:b4:32:
a4:38:eb:50:3b:a5:0a:76:7e:19:25:d1:a1:74:68:db:4e:47:
ce:d0:95:d1:8c:8e:3c:d0:1f:7c:a8:de:0b:0b:a0:d1:0b:27:
03:68:e8:bd:55:7f:4c:55:ce:59:63:e2:2a:14:ba:c4:21:90:
41:4f:fc:13:1a:46:da:03:6f:c4:15:86:b9:e4:86:80:08:e2:
2f:23:68:1d:8a:0b:91:dd:da:2a:46:2d:50:f2:20:f7:b3:12:
64:e5:47:35:3d:2a:32:df:ca:9f:df:48:9f:30:3b:c8:84:ea:
46:f4:7b:73:ec:ab:57:ad:96:ee:88:85:59:d6:b3:02:28:97:
aa:ad:e8:b5:e5:07:0b:83:69:33:ea:77:78:31:bd:8b:81:61:
92:d5:4a:7c:d8:55:88:d6:06:76:d1:04:7e:74:d5:17:4c:41:
59:ea:91:b6:06:a4:34:ef:3b:1c:d8:c3:4b:0b:cf:90:da:65:
b3:e4:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:21 2025 by rpki-client