Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier: vEl7xX3myYn1P7YzkGd22jlDCHPS4mMKjpNcbH9xMdg=
Subject key identifier: 46:FA:29:70:1E:46:BB:E8:1E:2B:F6:D8:DA:8E:E5:AB:DE:A1:ED:56
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 0F5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number: 0F3C
Signing time: Fri 31 Jan 2025 17:33:57 +0000
Manifest this update: Fri 31 Jan 2025 17:33:56 +0000
Manifest next update: Fri 07 Feb 2025 17:33:56 +0000
Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: mnpuU/vROVxc8DHuX6AQxoY4R9hwXrbLZiJDy/ZiIkU=)
2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: Wgl12J3aO6xtiEgwwFNRQx2lXEcg0zHav6fTzt5T3BE=)
3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: Ox9R9PiD8T0HlZTCVj50DkgG3vmsXlU+75pqLoh4Z1Y=)
4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: gl6wFA8dPzIoLv1TnXCbO0ajqlLPYVSjBbHWje+e0k8=)
5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: 55sVOk6/UnAp/fexIIaN6RRwH8HC98g4QsPN92ZTKEc=)
6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: Qd2fS017bmmI4dqXgfO7lOJxE7pdpoytjHBgfsVzSRw=)
7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: mILgjaEaplyNRnR3VkJIbJkHq2ArOnJINitmDYzwuDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3935 (0xf5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Jan 31 17:33:56 2025 GMT
Not After : Feb 7 17:33:56 2025 GMT
Subject: CN=679d0984-30ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:51:1b:76:ec:9a:16:db:8a:77:a6:c0:2a:
22:f8:58:71:a8:e3:95:51:32:63:98:9b:89:0d:e5:
05:bf:85:4c:72:bc:92:ae:cd:2f:59:bc:60:35:98:
8d:b3:d9:48:31:52:38:6e:ee:91:20:19:d7:3d:1f:
64:6b:92:43:9b:11:ba:73:e1:53:b3:13:12:ec:a1:
70:0b:8b:c9:4e:88:a0:ab:e5:21:40:f8:f2:80:2d:
6d:8e:13:47:50:86:c0:5e:1b:98:0f:54:5f:db:5d:
42:e6:9a:be:7d:0a:58:a6:05:88:1e:64:9d:f4:6d:
83:d4:d1:e8:cf:fb:5e:45:ab:52:fb:45:6b:10:fe:
0d:ea:70:7a:7b:7e:09:04:36:e7:7e:77:11:65:43:
34:91:2f:b5:c9:1e:6b:e4:a1:20:cf:63:ba:23:d2:
df:dc:a7:27:82:66:e6:85:7f:22:12:3f:b1:ce:06:
e8:61:69:2c:74:91:57:8b:b0:02:77:80:6e:f4:66:
17:e0:2b:d9:f2:6f:c9:14:90:39:14:c0:fa:77:7b:
f0:60:fe:65:06:55:58:18:3f:75:a3:a7:e6:46:43:
70:91:7c:2c:84:96:8c:7f:0e:b1:18:d7:86:4f:53:
57:74:91:73:ca:68:98:23:2f:77:de:36:26:01:ab:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:29:70:1E:46:BB:E8:1E:2B:F6:D8:DA:8E:E5:AB:DE:A1:ED:56
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b3:ac:e0:14:4d:01:c2:18:8f:9f:18:52:1c:23:4f:eb:d3:
71:ef:16:60:a2:42:12:0e:b4:2c:db:cc:2f:a4:ff:72:a0:04:
ff:7d:f7:96:16:4e:82:be:d4:a0:a9:58:39:44:4e:62:19:36:
64:b1:ae:2b:bc:d3:6c:d0:b0:d8:60:ae:29:b2:bd:03:cf:fe:
cd:ae:50:f8:f2:4c:e2:c6:54:2f:9d:ee:39:9a:0b:32:36:86:
2b:7f:85:43:3e:cd:e3:d4:5c:eb:f8:d4:7c:d9:b2:13:de:8c:
59:e1:5d:de:08:24:36:4e:d0:66:4b:c5:6d:ba:9e:ea:26:73:
ac:64:35:40:27:c6:cd:77:77:86:4b:96:de:3b:fd:0a:d6:26:
c8:17:de:2a:90:1e:c5:59:c8:8e:9d:9d:84:33:40:f7:3f:a5:
4f:d8:d9:63:76:7d:1b:e4:3b:57:60:08:2a:a6:26:cc:4c:14:
c1:8e:5f:b3:e2:bf:14:fc:39:4a:19:9f:0b:27:d8:a6:7a:94:
2e:ca:f8:a6:9c:03:29:9c:0b:b4:45:a7:dc:86:e3:05:eb:f1:
b6:08:2e:b8:23:eb:33:20:4d:8d:a5:73:c5:8f:b5:00:d4:0d:
13:3c:a7:a4:e9:cc:93:da:9c:b2:81:d8:27:cb:2a:6d:cc:d3:
5f:0e:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:21 2025 by rpki-client