Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json)
Hash identifier: Q2hasu505Ptcsk7FbcXUjpatuO1FApvd2YMZ+Tv51sI=
Subject key identifier: 2E:54:53:B3:B4:9E:0D:AA:08:DA:55:4A:3D:CD:6B:D5:CF:58:46:4B
Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
Manifest number: 239F
Signing time: Fri 31 Jan 2025 16:22:19 +0000
Manifest this update: Fri 31 Jan 2025 16:22:18 +0000
Manifest next update: Fri 07 Feb 2025 16:22:18 +0000
Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: PJD3tAcOgGs0IBhnEgZKgLBjd1klY54FpJKP8a6iEaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Validity
Not Before: Jan 31 16:22:18 2025 GMT
Not After : Feb 7 16:22:18 2025 GMT
Subject: CN=679cf8bb-ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:c6:05:01:4d:9c:5a:28:f8:d0:8c:3e:de:
33:89:ed:f0:f9:b9:e9:96:a7:01:3b:74:5e:5b:7c:
0e:0f:e4:00:30:39:d3:02:bf:bd:f7:64:7c:47:7c:
65:17:5f:49:1c:90:45:7c:87:8f:4e:52:6c:65:0c:
8d:10:2e:72:fc:44:49:0a:2c:6d:d2:38:c0:bc:7f:
e4:24:64:cf:51:85:30:60:07:bb:f7:b4:37:26:78:
d8:3f:a1:5f:e5:7a:f9:aa:49:7b:18:ca:bc:1c:84:
b5:ac:bb:f4:ca:a5:8a:96:84:14:77:73:ba:2f:00:
d4:a3:5c:1d:fd:26:03:fc:b4:7c:f9:df:4d:29:4d:
60:56:93:79:2d:f5:fe:97:04:31:ab:60:95:62:48:
7f:3a:30:80:23:0f:ce:5e:ba:fe:4f:ce:e3:8e:dc:
a9:5d:7f:5c:a8:d3:ff:06:68:0b:00:e8:4c:62:28:
db:79:01:fa:86:6d:b5:b3:9f:ad:3c:5a:3b:2d:1e:
93:a1:1e:49:8b:72:d0:dd:19:bd:77:5f:ad:60:88:
43:86:51:0e:09:70:8e:b5:c0:70:36:5b:4e:1d:bb:
c4:51:79:56:d5:ba:a3:b7:59:88:78:98:e1:ab:1b:
21:b2:78:2c:5c:05:13:11:cc:4e:92:11:e5:d1:b2:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:53:B3:B4:9E:0D:AA:08:DA:55:4A:3D:CD:6B:D5:CF:58:46:4B
X509v3 Authority Key Identifier:
keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:fe:08:ff:26:4b:c8:41:88:60:42:4b:7d:5c:6a:3c:91:
58:07:c4:6a:3d:8f:66:7c:57:74:da:9e:0f:02:32:c9:ed:e7:
fb:46:81:10:4f:4e:cf:c0:da:a4:a8:fb:c4:83:53:fe:95:d7:
18:2e:61:e5:13:05:80:d9:73:15:7b:8a:10:0e:06:45:77:e7:
5d:e4:72:73:61:bc:7e:87:ab:c2:b5:86:b8:9b:6a:f3:df:48:
63:83:8d:0d:fa:b4:ba:26:2c:2f:8b:38:74:68:03:e6:2a:a2:
f4:91:43:94:98:34:7b:68:7d:d2:0c:ec:f7:d9:d5:4a:3d:d2:
8e:51:5c:85:49:0f:6b:bc:ba:6d:fa:65:db:e6:0b:76:e5:5b:
6a:b2:b7:f7:a9:c4:2a:c3:fd:42:d4:ca:51:35:f8:48:ea:a7:
ec:6b:c1:ec:76:6f:37:07:da:46:10:48:b2:e3:e3:8d:e0:b3:
11:ac:1c:67:c9:b9:16:d5:2a:15:ec:87:45:d5:e9:f6:63:8d:
08:a5:73:96:94:98:fd:6a:ca:38:0d:c5:98:cc:52:31:ac:43:
40:33:fb:cb:25:11:56:1e:80:6f:40:32:d4:70:f0:d3:15:b8:
cb:ff:00:4d:c8:9c:cd:d4:04:74:df:bd:ab:38:23:b0:b3:fe:
fc:a0:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:21 2025 by rpki-client