Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json)
Hash identifier: iC8SSNZkrZ84asOhWrgumg/GZceiquOj0LlwFAIA6aI=
Subject key identifier: 06:4D:AD:81:71:3F:A1:DF:81:3C:D3:FE:BE:80:43:C1:CC:13:AC:36
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
Manifest number: 02EF
Signing time: Fri 31 Jan 2025 01:23:46 +0000
Manifest this update: Fri 31 Jan 2025 01:23:45 +0000
Manifest next update: Fri 07 Feb 2025 01:23:45 +0000
Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: dr93HuSyMJiirsCRFsfw36YUsU4CZYjQB0a6y7Tyeow=)
2: EE17560EC6C211EC87251528C4F9AE02.roa (hash: HMDalHghoswUvAah8/E8KIPgvtV+nIQu8too/dBJyyg=)
3: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: yAY/Xp66VBMbd2Lc5/zcmj9DVNGz6j22BacFuet4uZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Validity
Not Before: Jan 31 01:23:45 2025 GMT
Not After : Feb 7 01:23:45 2025 GMT
Subject: CN=679c2621-90d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:04:bb:1d:72:e9:60:1a:88:6d:56:ca:95:
72:17:f2:b5:04:2d:73:5b:40:32:80:3c:d7:72:63:
69:d2:db:db:e4:7d:73:8e:e9:1f:8c:5e:08:21:7f:
ef:ed:d1:8b:f1:9c:14:cf:86:51:a3:01:8d:55:c1:
de:b2:9c:c0:31:dc:bb:ae:02:48:80:f5:2f:cc:2d:
e1:93:6f:4d:5a:76:66:c2:2e:a7:68:01:dd:75:57:
90:64:ba:5c:a1:e9:12:1c:42:05:d2:8b:95:76:49:
cd:72:84:71:97:3b:36:aa:64:5c:cd:70:64:62:a4:
32:0a:93:2d:a3:15:92:20:48:7d:d8:37:ce:85:70:
3f:39:cd:78:49:d7:6e:65:a4:e0:e4:de:ea:b7:65:
a9:c2:41:0e:1a:9c:d5:b9:48:ac:21:10:0f:10:8c:
c5:36:5b:b3:05:dd:26:bc:1b:77:cb:63:0a:7f:0c:
17:f2:6c:12:70:c0:af:b9:27:bc:f9:cd:ca:cc:22:
c7:13:47:c0:f5:52:23:da:2f:bc:bc:e7:77:0d:d5:
99:6e:33:33:ff:02:b7:04:c0:8c:32:3e:38:1e:06:
d5:ee:ae:24:10:1a:99:92:ce:73:cb:b4:be:e4:a8:
04:fe:42:a7:26:4a:5d:b6:2c:99:b5:49:19:fc:92:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:AD:81:71:3F:A1:DF:81:3C:D3:FE:BE:80:43:C1:CC:13:AC:36
X509v3 Authority Key Identifier:
keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a9:82:81:8f:37:47:2a:ad:4c:51:f5:f2:2a:8f:ca:f4:d3:
ac:d9:93:f4:53:f2:fc:4f:bd:cb:38:81:7b:9f:ce:61:55:1b:
f2:7e:4b:e6:95:30:f0:a9:36:1a:ae:4d:be:09:4f:81:d1:7e:
3b:2f:11:72:c4:16:69:7a:4e:1c:41:98:a3:b2:5b:54:dc:a9:
08:d7:c6:5e:87:3c:c0:2e:6a:eb:c2:85:dc:61:a9:d1:30:02:
c7:9e:7c:df:e5:f5:dd:d4:b6:98:f2:db:c1:2c:9f:3f:f6:f6:
1e:84:ed:3f:09:bd:5c:4b:bc:b2:9e:71:8a:96:04:e7:b2:65:
aa:8d:9e:41:e4:ef:c8:43:14:2c:77:18:75:44:fc:ae:c8:f8:
35:8c:aa:f6:ea:85:fa:48:ef:3f:36:ed:62:2b:92:aa:34:a2:
22:5f:1f:de:0c:b4:1f:61:d7:59:05:33:38:3c:cd:42:87:49:
d6:53:ad:bf:ec:88:19:cc:0f:f5:09:a2:05:d9:80:2e:62:c2:
9e:b9:b0:d6:2a:92:77:7b:95:d8:5f:86:e1:2d:1c:62:70:8a:
c2:09:b0:2b:62:86:d9:81:4d:c9:56:5c:20:9c:c6:ac:9e:b6:
89:e1:80:4a:53:83:3e:9a:d4:83:36:59:11:25:00:ea:89:80:
a4:ce:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:37 2025 by rpki-client