Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json)
Hash identifier: /NYIyGQq3/inWpp8gW9HUuIQ/NxwI1NREEI4+28KqLA=
Subject key identifier: 5B:E2:63:E3:DB:FB:81:D2:11:80:26:01:6D:7C:3D:08:6B:E6:A6:44
Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
Manifest number: 0598
Signing time: Thu 30 Jan 2025 23:12:12 +0000
Manifest this update: Thu 30 Jan 2025 23:12:11 +0000
Manifest next update: Thu 06 Feb 2025 23:12:11 +0000
Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: ZxK3L45vGgxcpZDIeRqUyH95QW9yKoCZqfvKHgGcgsw=)
2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: qJ0j3BEtvoKonhv9iV5ZjKTQCrlGnl70ygABsp5AhIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Validity
Not Before: Jan 30 23:12:11 2025 GMT
Not After : Feb 6 23:12:11 2025 GMT
Subject: CN=679c074b-4cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:b5:37:a5:48:e7:71:80:61:ab:1c:f3:27:
82:4d:5b:51:07:c5:f7:ac:1f:a3:e4:48:35:7e:63:
21:cc:b6:c4:b1:ea:d2:f0:d0:2e:e3:97:28:bd:f1:
38:bf:42:13:66:d2:db:59:fc:30:74:81:41:31:76:
3e:29:d1:9a:8d:3c:0d:e3:cb:d8:d9:83:92:01:62:
7a:12:e6:1b:11:f5:e0:c3:c4:b6:b1:79:bc:67:9c:
eb:e3:36:2d:71:0c:94:08:84:1a:e0:9e:5b:4f:9d:
7e:19:e2:34:84:3b:4a:b3:2f:77:9c:98:c0:cd:c2:
6f:5f:09:06:30:1c:c9:ed:d0:bf:cb:74:7d:34:5e:
f3:a2:d7:f7:47:53:4a:bb:0e:6e:43:19:b1:07:10:
8b:9b:c5:22:5e:09:d2:25:eb:7b:9e:35:8d:51:43:
68:ce:87:e4:96:f5:5e:ec:c3:47:fd:c7:5a:4d:26:
7b:1c:4b:09:24:07:76:9b:da:6d:0f:69:d0:87:bb:
98:73:86:ce:c6:8d:47:86:30:f1:d8:0e:42:14:1d:
16:c1:48:f1:74:46:3b:51:99:d5:4c:ec:57:7f:03:
8e:02:2c:47:32:ab:e2:36:83:70:c8:e8:b9:6e:a9:
d3:29:fe:70:c3:89:0a:2f:dc:58:7f:14:ca:0b:0d:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:63:E3:DB:FB:81:D2:11:80:26:01:6D:7C:3D:08:6B:E6:A6:44
X509v3 Authority Key Identifier:
keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b1:a0:40:8d:d3:86:c0:b8:bd:e3:fb:0b:44:94:33:12:39:
e5:1e:73:99:59:5f:aa:25:35:bb:43:2f:a1:d7:79:f9:1e:f9:
f4:fc:39:f1:32:ab:dc:83:66:12:13:47:27:2c:bc:60:dc:35:
81:d0:87:a4:be:c3:80:a1:65:09:76:a7:1a:86:e8:69:af:55:
28:47:50:77:ef:39:dd:fe:18:3f:4b:5a:8d:19:9b:24:6a:d4:
4a:a2:60:27:be:65:91:ae:91:6a:22:e0:99:85:4b:dd:ed:77:
f2:c9:ee:86:fc:44:72:fa:40:fc:da:85:22:30:ce:ed:17:ae:
66:50:54:c9:52:20:a5:5a:72:90:44:4e:f0:e2:b0:3a:53:04:
e9:80:fc:36:e1:58:7e:35:89:0c:d0:b1:9c:8f:25:d6:22:6e:
e5:81:55:13:f6:8b:34:d0:8c:ca:74:e5:83:09:81:22:00:19:
90:11:19:4c:0b:a6:4f:99:1e:fd:b3:6d:f9:e0:08:fe:3c:4f:
b4:3b:33:38:c1:3f:d5:c0:3a:15:31:90:e6:05:9e:fb:a0:1d:
68:a6:fd:cf:22:30:45:01:81:17:95:fc:72:92:31:ae:99:82:
96:19:b0:bb:28:47:8d:71:ea:7a:df:ae:7c:83:79:9b:a0:d1:
4a:07:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:10 2025 by rpki-client