Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json)
Hash identifier: vGFdbbS4xSWd4HvDa/nkQoI2cQ/9+xFlwqXpBwlidRs=
Subject key identifier: 7A:FA:52:D4:75:31:4E:22:85:23:50:3F:1D:58:CD:20:49:07:C5:A8
Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Certificate serial: 1B11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
Manifest number: 1B04
Signing time: Fri 31 Jan 2025 16:18:48 +0000
Manifest this update: Fri 31 Jan 2025 16:18:48 +0000
Manifest next update: Fri 07 Feb 2025 16:18:48 +0000
Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: gj9jUW8OpvGKBBdLDjHsKtB7yz06Yz7LHxWTisrWwhU=)
2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6929 (0x1b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Validity
Not Before: Jan 31 16:18:48 2025 GMT
Not After : Feb 7 16:18:48 2025 GMT
Subject: CN=679cf7e8-188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:b2:ed:36:25:13:c7:74:ad:6d:5a:2c:12:
ce:12:38:82:67:82:e2:6e:f7:4f:72:76:a2:6c:7c:
8f:35:50:77:54:49:28:44:6b:23:ae:3e:0b:58:6f:
96:ab:10:0a:ea:41:e9:ad:8a:24:f5:f9:da:57:06:
ff:44:f3:14:d9:ff:60:f9:b8:39:b6:2d:bb:12:81:
66:fa:3f:3b:88:c3:88:d5:98:f8:21:83:f5:8a:cd:
d6:b2:20:fd:d6:bf:98:0b:44:8f:cc:f5:3a:17:13:
54:37:d8:4c:4c:04:58:b7:30:49:b8:26:e0:3d:f3:
16:3f:18:5e:39:f2:07:73:e8:da:43:96:26:96:a8:
e0:2c:ea:2c:25:71:7a:a2:ba:81:74:94:f4:15:5f:
e0:13:5d:07:66:6f:2e:ab:37:06:e8:68:7b:f6:66:
5a:a9:d7:83:9a:02:c4:41:e0:57:2f:7a:cc:07:eb:
82:f2:ce:0c:7b:23:d3:bb:d5:17:8a:27:a8:61:f1:
0e:04:3b:d2:56:06:ac:af:3a:db:27:49:2e:9b:fe:
0a:1b:14:13:4e:37:6b:a9:74:2b:48:87:fe:2d:68:
10:0c:bb:d8:72:f8:5c:28:e3:37:13:62:64:7f:4d:
a1:0a:7a:6e:2e:4c:26:c3:3e:80:16:07:11:e0:91:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:52:D4:75:31:4E:22:85:23:50:3F:1D:58:CD:20:49:07:C5:A8
X509v3 Authority Key Identifier:
keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:95:c9:bd:cc:82:4d:8a:af:4e:3e:ec:39:06:83:09:69:
e2:eb:41:35:a0:25:ac:0b:f9:2d:9b:94:bb:64:07:bc:d2:6b:
ee:de:d7:c8:91:e9:27:da:5d:11:80:05:e8:ab:1b:bd:59:d0:
6f:e9:8c:12:29:6d:47:ce:ca:ff:71:d8:e8:78:89:4e:76:69:
45:6b:29:9a:2c:74:42:a7:77:a7:be:51:8e:2a:63:b7:bc:da:
50:ef:1f:3a:02:f4:a0:fa:75:3e:ab:66:40:7c:9f:e0:4a:b0:
69:8b:bc:67:d1:ab:6a:7b:e8:eb:94:7a:3f:71:fb:1e:dc:b9:
88:34:ab:34:4f:ca:93:72:13:2c:b0:6f:3c:6a:17:1f:80:80:
eb:94:77:a8:7c:13:7f:e3:e6:a5:fe:48:f0:12:4f:7f:cd:02:
61:ce:e6:ea:d5:37:a0:a2:66:a5:fa:b9:1f:eb:aa:a7:a8:72:
95:0f:6d:51:cd:86:e5:45:72:49:ed:13:fb:77:a3:df:57:11:
4d:c5:1d:9c:c2:2d:5e:ee:43:8d:b0:01:17:4a:36:3b:96:5e:
a4:9b:26:c6:2f:29:b2:b6:b9:7e:46:54:47:49:39:c2:0a:4a:
63:70:87:67:66:8b:bf:ca:38:c0:d2:a0:eb:9c:10:44:34:f1:
9f:d8:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:27 2025 by rpki-client