Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json)
Hash identifier: 4Ec54s5JSJeFOBbCgPrvVUoj5u2YdBipEgzAU9Szaf4=
Subject key identifier: F1:87:86:D7:A4:15:E7:6D:1E:5E:8A:4B:B7:64:C0:37:81:59:35:A8
Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
Manifest number: 0176
Signing time: Fri 31 Jan 2025 03:06:32 +0000
Manifest this update: Fri 31 Jan 2025 03:06:32 +0000
Manifest next update: Fri 07 Feb 2025 03:06:32 +0000
Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: K1L0I53f2JF8rfV6Uk+bdfCqCCgR0STlnfw1AxK9Eas=)
2: 98152E6C480111EFB2976238C4F9AE02.roa (hash: gp0c0TAvNcGzlWuq4DB/NpWsaDumiulUkd34eH+poTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Validity
Not Before: Jan 31 03:06:32 2025 GMT
Not After : Feb 7 03:06:32 2025 GMT
Subject: CN=679c3e38-9742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:db:05:83:44:97:0e:46:11:6f:5b:56:35:
c5:13:2f:76:b1:63:b9:ec:9d:eb:b8:7f:9e:76:5c:
4b:ad:83:dd:12:ee:92:e3:de:85:ad:bd:b4:3c:26:
05:a1:e6:1f:33:b3:f6:18:16:1a:07:c4:4c:1d:79:
e4:a3:d4:a9:3a:23:28:b4:8d:e5:99:a4:1e:21:eb:
fc:1e:dd:aa:c9:c3:b4:52:55:e2:c6:07:cd:59:7e:
36:a3:aa:12:a4:e7:14:c3:ba:78:b5:98:91:a0:22:
5f:e6:f8:ab:16:ca:e3:e4:81:c1:1a:73:8f:65:9b:
9b:4d:2f:1d:ad:cb:30:17:60:30:8b:b7:e3:73:a1:
6c:d1:a7:8d:3a:4e:e8:d1:1d:bd:c6:06:e9:3e:86:
58:fa:b3:73:a4:e5:5f:78:1f:5b:ed:91:59:82:50:
74:a2:4f:e2:14:33:18:1b:24:cd:a2:40:d4:24:aa:
d5:c6:7c:0d:f3:9a:88:4a:04:a4:52:6b:69:14:80:
e3:24:48:af:05:d6:87:5e:3f:82:a4:bd:03:66:43:
fb:62:00:a9:37:98:b9:2d:79:0f:08:1a:69:5e:4f:
bc:ce:1c:72:bf:21:3d:d0:b4:40:c7:0a:cd:db:4b:
c6:44:76:03:04:f4:9b:2e:5c:ac:4c:64:c1:70:3c:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:86:D7:A4:15:E7:6D:1E:5E:8A:4B:B7:64:C0:37:81:59:35:A8
X509v3 Authority Key Identifier:
keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:d7:b7:7e:62:71:6f:06:df:67:51:b3:04:7e:ea:47:c4:
b8:54:6c:32:29:5f:ec:ee:f0:2f:4d:95:2e:f3:1f:02:2e:4b:
e6:bc:15:7a:72:27:72:a8:22:f7:92:cc:44:1d:c2:21:e2:2b:
55:28:c9:f2:f8:e4:20:cf:23:2a:d1:c0:e5:e3:ec:d6:b7:a5:
6d:d6:a4:d7:ad:07:41:73:68:e3:5f:df:29:c2:92:1a:23:51:
9e:66:e2:96:c7:37:23:46:17:b5:22:b6:26:03:5f:24:a1:cf:
11:c0:8f:c7:4c:bd:4b:b6:dc:33:12:3f:59:04:c1:22:e9:71:
93:a8:e8:3c:d4:23:f9:99:7b:11:0d:5d:0c:7c:0d:7d:63:b0:
a5:c7:a4:d4:5d:1f:ff:ab:38:9f:33:8f:7d:3d:6f:f1:8c:a5:
0e:6b:e1:da:85:40:82:d9:18:af:98:58:d7:a1:7b:48:33:80:
34:b4:51:14:a3:9e:e5:85:ff:be:52:b6:65:19:ac:89:de:ef:
01:0b:37:9a:c5:f1:f5:4d:37:45:a7:3d:a6:94:f3:59:8c:8f:
ef:63:2f:72:d8:07:ac:87:f5:17:f3:c1:ae:f1:f2:ee:7e:ce:
b2:26:b3:7e:e5:09:87:d5:44:97:68:1c:5b:20:12:ba:01:fb:
00:5c:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:01 2025 by rpki-client