Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier: iVGvz/ZEqAbvHQnS3I7/FDWtycKHZdZx9mA7MZgh89g=
Subject key identifier: 6E:79:70:1D:28:E0:5D:31:47:92:5A:BD:ED:33:0A:B9:EA:B5:B5:52
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 06:20:37 +0000
Manifest this update: Fri 31 Jan 2025 06:20:37 +0000
Manifest next update: Fri 07 Feb 2025 06:20:37 +0000
Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: FOPqdtecwEvLeGQUh6IO0lAq5oz81+aIQb/mgxrZiGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Validity
Not Before: Jan 31 06:20:37 2025 GMT
Not After : Feb 7 06:20:37 2025 GMT
Subject: CN=679c6bb5-1e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:1d:81:30:a5:66:07:2c:06:c7:dc:75:36:
c8:10:e6:75:fd:d8:86:44:1b:15:c2:dd:d8:ef:24:
86:65:60:34:21:01:3d:c8:08:e9:37:71:a7:01:44:
09:c1:1f:fc:12:21:e4:3b:56:c3:5c:44:44:22:f1:
aa:60:00:1f:4a:35:48:ba:31:21:86:02:1a:d3:28:
77:06:43:00:e0:65:41:a5:7f:1f:5a:af:ac:a1:72:
8b:7d:d0:7a:58:52:27:90:3a:e8:08:98:1d:b6:1c:
8e:6d:9f:86:0e:e4:ef:59:8b:64:21:dc:fe:c5:43:
97:c4:77:f1:8d:2d:c3:b0:a2:5c:d9:3b:51:44:82:
38:c5:47:d3:d9:c2:e7:53:3d:66:0b:8f:45:75:ff:
a5:17:60:90:35:34:c6:ef:76:11:bc:24:97:e3:4b:
6f:73:05:45:4c:76:7a:f8:78:05:56:b6:5b:a1:3d:
2c:35:6b:1c:75:a3:09:97:23:6a:16:e1:d5:0a:fc:
52:14:3e:52:fb:37:3d:c6:e4:8b:e2:74:a0:dc:cf:
c7:5b:d8:3c:de:10:74:ed:92:78:88:c4:6e:31:52:
ec:8a:88:69:ec:10:9c:12:40:28:fa:1f:4d:42:dc:
75:f9:9c:cf:ab:4a:80:1d:f4:8b:96:7a:24:5a:70:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:70:1D:28:E0:5D:31:47:92:5A:BD:ED:33:0A:B9:EA:B5:B5:52
X509v3 Authority Key Identifier:
keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f6:e2:e4:22:d0:06:07:82:1f:08:3d:64:21:a5:48:74:88:
a7:62:9c:22:bc:2b:f7:31:93:d3:4f:b0:7d:ac:38:98:35:de:
4a:b6:3e:e0:0a:ce:53:0e:0f:f1:d5:4f:ac:3a:11:dd:5e:a6:
d9:29:ff:f8:f7:1b:20:3f:c0:14:26:1e:ff:ed:49:0e:db:9c:
b2:20:4c:72:d4:24:1c:4a:11:76:a7:f5:5b:28:e6:50:35:67:
b6:63:bd:81:62:34:72:57:62:d3:d9:95:bf:ba:13:5f:d7:f4:
4f:96:aa:86:7b:ab:34:71:23:00:c8:20:84:6c:83:1e:de:22:
dc:83:4f:82:64:d2:eb:c9:35:5f:d5:b5:96:83:87:62:61:00:
4a:1c:74:5d:ec:6c:83:e6:11:db:6a:dd:a2:82:3d:b1:5e:1d:
e1:49:65:3c:b7:a0:28:af:ed:d7:21:ae:55:e6:6f:d0:26:b3:
d5:f7:f8:63:71:ad:ea:9c:84:45:67:60:75:7a:5d:7d:31:14:
f9:f8:f0:d4:e6:84:b8:64:fa:32:07:ab:49:34:79:b3:db:e2:
8a:93:3d:0e:3a:cb:42:3f:54:f4:3e:16:dc:34:b9:fd:8b:55:
de:3d:51:88:dd:26:39:b5:57:1a:63:37:41:93:bd:ec:0d:9b:
a8:ee:d7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:59:33 2025 by rpki-client