Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft
File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft (raw, json)
Hash identifier: iftBXDDCAGQZf+3LRsjqf6QA/xvUN6QQXFEHT4CBLyI=
Subject key identifier: 1E:34:FF:5C:E7:BB:2A:7C:AD:BE:61:8C:BF:43:4C:8F:DB:0B:43:53
Authority key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B
Certificate issuer: /CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft
Manifest number: 07
Signing time: Fri 31 Jan 2025 07:15:19 +0000
Manifest this update: Fri 31 Jan 2025 07:15:18 +0000
Manifest next update: Fri 07 Feb 2025 07:15:18 +0000
Files and hashes: 1: Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl (hash: rK5od7fnk6x4CxT9bIIoYxoiwHF249XOzrphJGxljeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B
Validity
Not Before: Jan 31 07:15:18 2025 GMT
Not After : Feb 7 07:15:18 2025 GMT
Subject: CN=679c7887-b731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:3a:18:c6:c6:98:a4:9e:11:b7:a9:53:bc:
ba:5a:ea:f1:f4:84:e7:7d:4a:5d:d8:9b:b1:a2:3c:
4a:fa:ac:10:93:22:ed:06:c9:cc:4c:ff:bf:40:36:
95:b7:27:d5:d1:29:1c:6d:1d:b3:9b:68:fc:82:3a:
22:83:ad:4d:db:39:af:5b:41:d5:79:d2:3f:a9:11:
80:c2:b7:8b:3b:87:de:c3:09:f3:8d:7f:c5:36:50:
87:73:06:21:71:95:2a:37:2d:a3:d0:6a:a2:ea:d1:
7e:0b:49:ef:7e:8d:3c:66:b4:9a:fe:f4:1b:aa:ce:
f7:49:de:50:35:55:0e:be:e5:c2:1e:0c:8b:ce:f3:
49:00:d5:d6:7d:28:b8:25:1d:e5:f1:44:2a:6d:28:
26:5f:ef:d8:cf:9e:e6:3c:23:47:b7:04:5c:fb:d7:
eb:a7:1b:73:42:70:52:3d:d0:67:e3:40:97:87:72:
4d:31:70:69:eb:57:26:91:e5:c5:8c:67:e6:c1:89:
33:a4:ae:76:c0:5d:45:a8:06:d9:e8:8d:f1:ab:e6:
21:3c:1d:50:0b:63:bf:e3:34:b8:0f:33:d9:4c:38:
16:cf:25:27:10:aa:3a:68:18:5d:f3:3a:92:52:a1:
c5:ff:a4:f8:a4:56:90:db:f8:08:11:8f:b4:be:73:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:FF:5C:E7:BB:2A:7C:AD:BE:61:8C:BF:43:4C:8F:DB:0B:43:53
X509v3 Authority Key Identifier:
keyid:36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:0f:6a:c9:9a:c8:19:8a:3c:fd:c3:64:81:49:a4:01:3b:41:
42:f7:96:68:82:f9:1c:c6:72:d7:39:54:a9:2d:01:94:ec:ba:
5f:65:1a:f1:29:fe:fa:c9:c1:04:bb:42:1a:53:79:cc:2b:1c:
f2:77:21:12:fa:78:2b:32:e5:b0:02:23:31:3c:2d:91:66:e1:
a3:3a:c5:4a:c9:c7:65:c0:9e:ea:67:2e:8f:92:6c:3f:9d:8a:
a1:6b:39:b9:8a:3c:3e:7e:ab:54:86:dc:d5:62:12:c6:56:23:
ef:0f:fa:d3:37:6f:f2:b2:1c:c9:ea:ce:8e:17:71:40:09:6e:
97:43:2c:a9:b3:f5:c0:84:a1:5f:09:ba:a1:5d:c7:6d:63:83:
46:8d:0b:62:76:78:be:cc:4e:f1:05:73:fb:fb:ae:b3:6a:14:
5b:21:40:40:e1:5d:0c:d1:f7:ab:eb:70:0e:a1:07:83:20:43:
a1:f9:54:b0:37:25:f0:d1:2a:2c:67:50:d8:78:f0:09:89:79:
88:fe:94:16:00:bc:89:2b:4c:27:86:c2:1a:a2:6e:d1:df:b8:
1d:d8:59:48:7b:19:95:41:34:88:4d:3e:ec:e4:0d:0f:f0:26:
00:3a:2f:d7:8d:d5:76:ca:0b:51:45:8b:52:d7:d2:f8:d7:57:
ee:dc:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:28:03 2025 by rpki-client