Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
File: knWZPcnEM_JdNYCsd-OV0GaWSD0.mft (raw, json)
Hash identifier: 5guMqpO8olNXWfvpp7lngl5TFAv93LgoY9CuKkLl6K4=
Subject key identifier: 78:B8:D3:2B:E4:1D:B2:B2:6E:59:C2:96:2E:02:6A:E7:C6:4A:9F:10
Authority key identifier: 92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D
Certificate issuer: /CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
Manifest number: 06A4
Signing time: Thu 30 Jan 2025 22:10:43 +0000
Manifest this update: Thu 30 Jan 2025 22:10:43 +0000
Manifest next update: Thu 06 Feb 2025 22:10:43 +0000
Files and hashes: 1: knWZPcnEM_JdNYCsd-OV0GaWSD0.crl (hash: X/pJBSn3x5GU4Scj3AlE7WS5kH7KfbC3sUwHoH1B4/k=)
2: 57BAE77C517D11EB8949D438C4F9AE02.roa (hash: W8Pbilr3L/+CfQDONlD1s3S+g13SAXBwRt28BIl7t2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
Validity
Not Before: Jan 30 22:10:43 2025 GMT
Not After : Feb 6 22:10:43 2025 GMT
Subject: CN=679bf8e3-5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:f6:a1:9e:c8:68:96:d9:c0:7e:20:af:47:
3e:7b:d5:78:89:71:c9:d1:02:7d:f8:1b:0d:02:40:
1d:f9:71:e9:12:62:17:9f:0a:cf:0c:4b:4f:60:aa:
93:ca:8c:e5:31:32:07:18:64:32:b1:1e:e7:43:65:
b6:c2:1f:df:3f:52:98:2f:28:60:93:54:e6:ee:37:
53:00:80:4b:b7:62:8c:72:ca:48:ce:42:b7:fb:dd:
ce:89:84:31:4c:03:b3:03:05:2e:b9:40:50:af:4d:
d1:4f:9b:ea:57:97:e7:2b:30:c5:00:ef:04:75:58:
32:97:85:e4:9b:04:58:9c:d6:1b:96:88:62:4e:58:
08:0a:e4:b1:86:3e:8e:04:f7:5a:45:0b:01:37:35:
06:b7:07:a8:48:c0:36:3a:be:94:d7:22:15:84:37:
59:c7:7b:e0:e7:b7:4d:34:8f:c9:b7:17:e3:20:b5:
ca:b0:a8:ae:62:2d:16:ee:7a:b8:dc:8e:3e:0b:d6:
c2:0c:1c:6a:ef:ba:9a:47:ab:4f:ef:79:30:ac:c6:
4c:fa:62:ef:ce:67:60:8b:38:90:b9:e9:7b:99:c2:
18:01:05:0d:1f:33:16:a1:51:ae:77:54:75:46:94:
2b:c3:a5:bc:7a:7c:f0:0f:18:d2:da:a2:26:fa:ff:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:D3:2B:E4:1D:B2:B2:6E:59:C2:96:2E:02:6A:E7:C6:4A:9F:10
X509v3 Authority Key Identifier:
keyid:92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:7a:bd:91:44:69:5b:eb:e2:9d:d8:5e:64:22:f8:e2:a5:30:
2e:2e:22:50:57:64:56:19:a2:bc:1e:4c:38:b7:83:b0:d0:2c:
64:94:3d:5a:5f:31:7c:07:e8:1b:72:b7:2b:82:99:cc:04:eb:
31:1c:d9:70:3e:3b:1b:94:0e:56:7c:68:45:4c:ef:f9:24:41:
01:5a:7a:b7:b8:68:b1:29:5c:b3:21:53:44:0a:c7:78:5c:21:
e3:e4:5e:d0:35:6a:f8:6c:a0:e6:04:79:f8:ca:03:bf:43:53:
ab:58:20:e9:f7:07:0c:54:bd:34:86:8a:36:cd:51:c0:21:cf:
cd:08:63:34:8e:9d:f8:d5:70:89:92:96:0d:63:4f:c8:fa:da:
89:f4:39:92:ae:71:66:e6:ca:fd:14:12:fc:cb:99:fe:4a:a5:
76:e7:d0:ea:95:b7:87:e2:9d:54:5e:93:00:5a:82:bd:6b:bb:
20:54:d7:71:d5:f3:fd:76:0c:58:c0:32:b8:ea:6f:19:d1:5e:
5a:34:f9:a7:ab:67:1f:37:f1:5e:ff:03:5a:45:85:56:6e:b8:
64:82:96:ca:f9:9e:8d:65:e9:ed:a3:30:25:a1:a3:8a:42:b2:
0f:03:60:fb:db:82:d4:c5:3e:e4:35:66:77:4c:00:88:bc:77:
cc:6a:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:07 2025 by rpki-client