Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json)
Hash identifier: QP1uofn1yKx1QmLQPYuYfluKL0WMWeKSkjoyyGp5jSg=
Subject key identifier: 97:58:B4:FE:75:DB:B7:35:12:F2:BD:CA:5A:C2:1F:09:FE:3F:0E:E4
Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
Manifest number: 0C0E
Signing time: Fri 31 Jan 2025 18:25:17 +0000
Manifest this update: Fri 31 Jan 2025 18:25:16 +0000
Manifest next update: Fri 07 Feb 2025 18:25:16 +0000
Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: 13T5Vs8CClGroy2PRXp768rvkVXBi+zx832hpdOcbRo=)
2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2GXsJ3lmpDTCyJ0+6RHbUPHuhr06/ng834HAohqlZ5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Validity
Not Before: Jan 31 18:25:16 2025 GMT
Not After : Feb 7 18:25:16 2025 GMT
Subject: CN=679d158d-e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:a9:81:1d:f6:ce:68:e0:36:25:2b:48:1a:
02:07:0a:4c:29:90:78:24:1c:30:ea:81:0c:c7:77:
98:b5:94:85:12:7c:64:de:ad:9e:d0:9e:be:44:c6:
a6:a8:44:07:1b:ec:e5:d1:4c:67:14:11:3a:5e:49:
82:c8:be:db:39:a2:27:97:ae:5d:8f:72:ca:8b:a3:
2f:2f:14:f6:bf:d5:04:d5:32:5e:ff:d0:3a:c4:6e:
1d:33:32:f9:1e:52:ac:99:d7:e8:de:7c:2a:62:82:
77:dd:60:dd:12:5f:61:b7:9c:6c:9a:40:cb:e6:1c:
74:fb:f7:71:09:f5:df:d6:4c:3c:1f:1e:4d:cc:39:
16:4c:1f:cf:6d:da:ec:1e:d7:13:8e:b1:76:ce:1c:
82:c9:24:19:d5:b2:23:f9:53:50:fe:f9:bb:02:5d:
0c:7f:ba:6b:9d:44:73:1b:4b:c1:74:31:17:3b:f6:
1b:94:53:ce:c7:9f:5d:d4:06:3a:49:2e:7d:5a:9b:
2e:7f:4b:5f:1e:df:23:3b:8f:16:5a:a6:0a:01:91:
7b:31:86:3b:e3:c3:ea:bb:c1:2a:79:22:3d:37:ce:
f9:bb:8d:a8:b6:80:74:5c:71:af:3e:8d:fe:03:66:
36:da:b9:d6:89:fe:85:ee:23:bd:5f:f9:57:f6:37:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:B4:FE:75:DB:B7:35:12:F2:BD:CA:5A:C2:1F:09:FE:3F:0E:E4
X509v3 Authority Key Identifier:
keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:cd:fb:32:ac:98:7d:98:d0:a6:df:98:78:e8:24:24:c1:b1:
45:6f:62:b1:fa:dd:2b:f9:6e:2d:18:f7:8c:f7:4a:df:0d:ed:
bb:56:a0:93:a1:77:44:8e:c6:06:2d:d7:89:59:c9:01:bb:83:
46:61:4e:13:61:0e:1d:a4:f2:09:f6:52:42:02:0d:66:aa:aa:
a8:eb:69:41:d7:ae:23:e2:8e:f7:41:01:df:86:40:25:56:43:
29:d9:a8:49:5a:4f:f6:99:47:f9:f8:9e:fa:75:c8:62:bc:2a:
49:c6:b4:7f:2f:4a:00:5f:52:f9:58:5e:c3:7b:ba:d6:50:7c:
f8:86:c0:f1:d8:90:22:3b:36:3e:33:c0:d2:95:fd:ac:3e:2f:
16:b4:61:42:8a:d1:8a:dd:9f:fd:ff:2c:a9:8a:57:40:c2:e1:
8a:69:9c:d3:df:75:a2:81:04:9a:b3:18:79:92:ee:83:6c:50:
d8:03:8d:5c:c4:12:27:0c:4a:f8:62:a8:47:45:e4:1c:ca:ba:
2d:ca:ae:4e:6d:88:03:22:55:23:44:bd:91:d3:48:f6:d0:63:
2d:f0:c5:6e:c6:20:68:66:b1:da:5d:6c:97:2e:dd:ed:88:82:
43:98:58:92:d1:fa:39:be:ff:ab:f7:41:81:96:8e:7f:5c:32:
39:63:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:48 2025 by rpki-client