Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json)
Hash identifier: iIM6IWpBNRyp4O0iUwVDJoSdkN7XzRP/Yk8Q/CDgJ4c=
Subject key identifier: AF:08:48:62:1C:57:C4:AF:73:33:16:80:42:32:87:A2:E7:B6:94:F5
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial: 09D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
Manifest number: 09C1
Signing time: Thu 30 Jan 2025 20:06:40 +0000
Manifest this update: Thu 30 Jan 2025 20:06:40 +0000
Manifest next update: Thu 06 Feb 2025 20:06:40 +0000
Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: zhi6hv/Vj6l3zt47W+T0MxhuYlacPdhYgIDFKA9Hc0o=)
2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: menbjtgG3OL9FP2gHIv3HpKwGpwOaKUkt24pbDLYnNA=)
3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: bMJemH5ceUwe7SSoHueO95SQnaFhnEbPA4cUZ9QObys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Validity
Not Before: Jan 30 20:06:40 2025 GMT
Not After : Feb 6 20:06:40 2025 GMT
Subject: CN=679bdbd0-601e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:b1:2b:70:3d:62:44:df:4a:2f:0c:bb:37:
16:a6:d5:42:b8:e9:79:f7:78:fb:3b:5a:db:2d:df:
a3:b0:3b:79:c9:96:70:5a:7d:83:5b:fb:c7:c9:4c:
12:40:8b:78:e3:20:da:d5:ea:51:45:53:e6:05:1e:
e5:7f:57:58:e3:5a:91:9d:ee:8d:6b:cf:ce:b5:24:
fa:4c:dc:d1:a1:fd:27:90:85:71:cc:e5:93:e1:e0:
8c:47:a3:73:7f:1d:43:b1:bb:6a:d9:2f:16:09:45:
a0:f8:bf:fd:df:e2:cb:24:27:2a:de:a0:12:d5:b5:
e8:9b:fd:0a:d4:b2:24:81:52:f9:7d:46:d6:cb:7f:
f6:4f:e1:35:71:4c:e0:dc:d6:db:f5:fe:63:d4:dd:
4e:6a:da:b4:a4:8e:be:2e:7a:f7:f8:77:36:c4:5d:
c2:86:43:20:d5:f5:f5:17:4f:ea:9b:1f:4c:3f:9d:
7b:b4:96:33:73:3b:42:15:98:70:f8:44:91:22:cb:
f5:87:42:64:a7:0d:b3:e1:63:98:13:8c:ad:49:49:
9e:fc:77:16:d7:84:aa:b2:36:77:8a:f3:c3:28:75:
ce:11:21:4f:b3:14:ca:0a:00:aa:ef:f9:80:f7:c6:
8b:3c:d8:0a:92:5d:9a:dd:33:b0:e9:a4:b9:3d:ff:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:48:62:1C:57:C4:AF:73:33:16:80:42:32:87:A2:E7:B6:94:F5
X509v3 Authority Key Identifier:
keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cb:1d:09:52:03:fe:d0:6d:ee:45:93:c5:43:9e:cd:c7:3e:
01:5b:3d:24:03:c6:f2:d4:f8:3f:77:9f:fb:50:51:30:39:c8:
58:33:06:6a:c7:da:b2:1a:f5:ee:86:be:5b:36:40:46:50:b2:
b3:70:c2:71:95:99:f0:82:01:c5:38:19:df:52:17:3f:a5:12:
a4:4f:e8:0a:59:14:8a:69:9e:d6:d1:05:ac:be:0b:48:5b:9d:
1f:46:30:1e:c8:84:dd:b0:77:99:48:41:07:27:d1:47:94:0c:
11:ee:5d:cb:42:45:3f:86:7d:d3:26:4f:77:15:a8:bb:99:b7:
de:a4:8e:60:e4:c2:17:b3:a6:ff:3a:8e:5e:ce:d2:44:34:94:
4a:fa:ec:a6:10:72:fd:ae:b7:8c:c0:bd:f8:83:60:bf:72:08:
79:52:8e:14:7e:06:67:8d:3a:d0:5d:f5:10:40:3c:ef:76:16:
be:ea:0f:6a:55:29:cc:40:8b:02:2c:e8:21:3f:b7:d5:07:4c:
4d:bb:39:2b:0a:e0:7a:94:55:8c:84:8c:82:05:68:46:05:ce:
4f:31:95:c2:2d:90:e3:65:f7:51:13:d8:d3:4c:9e:74:f1:13:
c6:73:f9:26:53:a0:25:52:81:09:a6:d0:94:8b:53:3d:7b:16:
2f:17:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:54 2025 by rpki-client