Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json)
Hash identifier: 4m2Zi/41NAdJJL2lHYg2z/0lTp/1/5VhRkiBYXDCarg=
Subject key identifier: A5:DE:17:F9:D9:BA:CA:48:DA:1A:AB:B5:2D:1E:93:2C:6F:9A:83:D3
Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
Manifest number: D8
Signing time: Fri 31 Jan 2025 04:46:19 +0000
Manifest this update: Fri 31 Jan 2025 04:46:19 +0000
Manifest next update: Fri 07 Feb 2025 04:46:19 +0000
Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: vEHVu2GUWtATP2DUSTNKtSV8KioUpgENHCWMIJvCrLI=)
2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Validity
Not Before: Jan 31 04:46:19 2025 GMT
Not After : Feb 7 04:46:19 2025 GMT
Subject: CN=679c559b-2967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:f1:84:c1:0d:92:71:4b:45:fb:50:60:7b:
7e:b3:6b:d8:48:c5:ac:58:57:09:2c:6b:87:66:e2:
b6:ae:8c:15:9f:63:2a:8a:36:28:34:78:1d:b2:fe:
0c:3b:96:1e:ef:1e:d2:58:fd:58:ad:ca:2e:4d:fd:
97:50:a0:56:32:4d:95:23:b6:54:71:9c:7a:4d:80:
d5:2e:50:45:50:2f:7f:1f:8f:4a:8d:6f:68:c7:21:
99:b9:d1:80:54:6d:75:5b:b2:8a:d4:2b:3e:f2:62:
2a:87:f8:f0:24:19:25:67:89:81:74:f0:3a:45:b3:
68:72:b1:90:4b:ec:1a:77:eb:29:93:43:22:24:d9:
04:0b:ab:91:4f:b1:6f:4b:9e:fd:f1:b9:50:20:35:
f9:56:54:64:da:0e:a0:98:cd:9c:4b:e7:d6:d0:81:
be:8d:0f:60:2d:a6:29:fc:65:3d:08:1f:05:48:7a:
af:36:96:74:66:29:d0:59:51:7e:ab:bf:9f:ba:60:
73:f4:36:75:0b:db:f0:da:53:17:0d:e2:42:f1:08:
b1:ab:13:6a:66:fc:46:36:37:5e:d3:a5:ce:66:8e:
91:ef:2c:8f:90:a8:5c:f0:aa:4f:ba:5a:fe:54:ab:
99:ae:5e:f0:9c:76:40:46:2b:ed:6c:c9:1e:79:98:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:17:F9:D9:BA:CA:48:DA:1A:AB:B5:2D:1E:93:2C:6F:9A:83:D3
X509v3 Authority Key Identifier:
keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:3d:5b:89:d7:ef:e1:36:37:61:52:42:2f:f5:0b:0e:0d:
60:3e:7c:8a:d0:11:95:77:96:0e:1e:d1:d1:09:e1:c4:4b:9d:
8e:49:1d:5e:39:31:12:29:5f:d8:7d:d8:52:29:22:c4:1d:fe:
0c:61:db:e2:91:ba:c2:bd:2d:08:4e:50:dd:fb:14:df:41:07:
a0:24:b0:e4:eb:11:fa:9a:63:98:ee:1d:91:7a:3d:1c:91:20:
bd:30:33:8a:55:c0:2f:bc:f4:9f:58:d2:ae:62:dd:5a:29:62:
ce:b8:f5:ca:a7:72:88:2a:5a:18:b3:51:23:b1:78:91:26:07:
b6:38:2e:05:2b:8d:f4:d7:81:23:57:cf:66:30:f3:1a:1d:5a:
61:c5:86:fe:ae:da:0a:68:df:10:29:e7:e5:ce:39:63:23:17:
ef:54:2e:47:7f:a2:ac:35:b3:27:01:39:0b:86:fe:c7:b2:c6:
78:0d:45:96:d0:b2:6d:a7:b3:ab:41:fa:fc:9e:29:b7:02:0e:
16:5c:50:80:10:dc:d4:9d:6e:e7:af:99:98:d2:c5:27:b6:6e:
a5:9f:9f:f2:89:ea:3c:37:64:76:fa:70:45:a7:1f:60:67:a5:
f4:5c:68:44:26:bb:3e:2b:b3:4a:7a:c9:a0:84:bf:d3:5b:50:
f5:f1:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:55 2025 by rpki-client