Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json)
Hash identifier: h/BgfJLcCJ5T/cVonQdZX/pnh6XdZI8W47U2w94OyGY=
Subject key identifier: B2:B8:C0:77:BA:79:63:A3:32:20:88:AF:D6:59:88:A3:7A:A6:86:19
Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F
Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
Manifest number: 22
Signing time: Fri 31 Jan 2025 06:55:11 +0000
Manifest this update: Fri 31 Jan 2025 06:55:10 +0000
Manifest next update: Fri 07 Feb 2025 06:55:10 +0000
Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: CTxOS45bhwyiKOzMP/VyjpIXL5dGP87ZzjiaYDSw+Jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F
Validity
Not Before: Jan 31 06:55:10 2025 GMT
Not After : Feb 7 06:55:10 2025 GMT
Subject: CN=679c73cf-7549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:2f:b5:a7:25:96:25:05:5a:09:f5:29:61:
30:94:d9:9d:fa:32:e6:7c:20:49:5e:cc:3d:12:60:
4e:65:ed:1c:00:42:e3:02:db:dd:53:ff:09:9f:fc:
5b:6a:cf:aa:21:9f:fe:47:27:8a:6c:02:fb:a2:24:
d5:f2:97:31:b0:c0:fd:2b:5f:81:30:da:7c:0f:f7:
ca:03:17:44:02:ca:2d:74:95:5a:28:25:42:f4:e2:
37:bc:23:89:9e:a9:f3:35:24:26:0c:7d:cf:d8:0a:
b5:77:fa:ab:d1:57:7b:05:74:5f:a6:60:e3:79:b6:
9d:0a:6d:cf:d4:d8:ea:44:3f:76:a4:ed:22:e0:38:
35:d3:22:46:94:02:86:8d:18:d7:43:d9:a0:72:11:
09:05:fd:6f:94:07:b0:b6:94:ed:bb:23:88:bb:ca:
e5:f3:c6:13:4f:64:14:04:ff:fc:84:36:84:7b:6b:
9b:cf:a2:59:ad:45:39:52:7f:89:27:47:39:22:59:
db:8f:82:5e:6d:2d:9d:8d:e3:20:ea:6d:95:5f:8c:
02:33:0d:ce:31:98:ba:41:34:49:c2:34:52:54:f7:
32:eb:d8:f1:bc:c8:d2:b4:2c:96:5a:e4:8b:e8:df:
e5:b9:51:0e:93:61:01:d2:75:d8:bc:86:f4:4b:4d:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:C0:77:BA:79:63:A3:32:20:88:AF:D6:59:88:A3:7A:A6:86:19
X509v3 Authority Key Identifier:
keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:a0:12:cb:22:75:ee:12:0e:df:e6:97:cd:26:5e:3a:c1:
60:52:f3:2e:24:7f:5d:f4:6e:21:9d:88:ba:ed:eb:98:d9:fe:
f8:5c:71:45:e4:8b:b7:4a:11:4a:0c:ba:7e:6f:c1:8a:19:c0:
01:c9:ce:bd:9c:d4:c6:20:4b:e6:24:fc:5a:bc:a1:96:bd:62:
df:71:56:55:eb:af:af:f3:a1:79:21:1a:7c:ff:dc:e2:58:48:
91:e8:67:2e:29:c5:d3:99:28:4e:96:41:f3:6e:07:f2:d3:58:
35:0b:e3:58:d2:54:4e:1c:e4:ee:7a:d3:3b:8f:ea:2a:2f:e0:
10:32:7b:fe:86:4d:79:84:4a:45:6d:c0:9d:80:7b:b6:83:65:
ec:42:1b:b1:35:8a:23:4b:c0:b3:88:60:4a:57:90:8b:92:19:
5c:a3:54:be:ce:53:6f:9e:86:36:de:73:c3:14:01:4b:a1:e7:
0e:16:3e:59:99:f7:36:09:62:1d:3a:6f:9d:52:a2:97:5f:cd:
9c:9a:7c:63:20:6c:86:76:79:ab:7f:98:0f:08:8b:8c:11:5a:
bd:29:4e:9d:61:3e:ee:e3:2d:fc:15:0d:6a:92:94:50:34:7d:
20:a6:f1:35:79:d7:b8:bf:a7:5c:ae:50:ce:50:1a:76:b5:17:
6b:96:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:55 2025 by rpki-client