Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier: YaLKV85vcgdT5JYPGyFP5RZbSPFzcONLDR78UJfc6t4=
Subject key identifier: 1A:6F:FD:22:5A:5B:1A:83:33:96:1A:45:C3:E2:87:D4:97:30:B1:14
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number: 014F
Signing time: Fri 31 Jan 2025 03:25:15 +0000
Manifest this update: Fri 31 Jan 2025 03:25:14 +0000
Manifest next update: Fri 07 Feb 2025 03:25:14 +0000
Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: KXX0Mv3u+5InhL+U7NA+FQl2pLvhm6XMgixWUN7dgOI=)
2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=)
3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Jan 31 03:25:14 2025 GMT
Not After : Feb 7 03:25:14 2025 GMT
Subject: CN=679c429a-5576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:31:d5:1f:1c:cf:85:15:e2:af:e8:b8:79:
65:c5:2c:36:77:1b:84:ab:1a:45:76:44:fd:8c:b4:
0f:da:fb:4d:ea:8d:9f:78:9d:32:3c:aa:d5:7e:c3:
eb:56:8a:27:58:a9:d1:03:de:f9:89:2a:98:50:8b:
47:0d:37:9e:52:c7:7a:2c:5c:65:f6:3f:64:1f:61:
00:0d:6f:63:df:3d:06:bb:00:23:f7:12:0b:39:7d:
83:bf:57:77:7c:43:8c:b9:50:8c:be:d8:83:45:90:
bf:1a:62:68:af:9a:c9:36:d1:f2:e2:02:e9:da:72:
ee:da:a2:5d:c6:5b:5b:30:3b:2d:e0:64:89:a2:cc:
9c:20:ea:ae:29:d4:08:e4:ee:fd:65:96:f4:dd:f1:
c7:ba:ff:fa:11:d6:7e:27:f1:af:8c:cc:74:97:89:
ef:86:7a:25:9b:06:35:22:44:f7:35:6e:a4:2a:ab:
a6:10:67:d0:95:a2:f0:5e:b4:5f:a9:2c:48:88:04:
5e:74:41:38:e6:62:a3:d4:14:35:27:69:46:77:26:
6a:11:e0:20:b7:5a:37:d0:0d:f5:d2:b6:f3:c3:ed:
7d:a1:da:65:f8:2a:66:39:65:ee:17:4b:e5:9b:76:
04:ff:eb:50:67:cf:1f:7c:d9:f5:09:8a:d7:2f:12:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6F:FD:22:5A:5B:1A:83:33:96:1A:45:C3:E2:87:D4:97:30:B1:14
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:1b:44:22:4c:22:82:95:e4:ec:07:b7:c5:e8:9f:25:a5:df:
65:e0:56:00:1f:0d:a0:a7:89:93:e3:bf:3d:9b:e5:00:07:e0:
0e:be:e7:a1:f3:e0:58:e9:65:f8:61:c4:6c:b8:5b:5e:c6:47:
f7:9e:8d:76:7e:b7:e8:b2:8c:e0:63:bc:f1:2e:9d:3c:34:0a:
98:52:fd:49:be:81:2f:cc:77:00:53:17:fd:b0:88:6b:72:c9:
bd:75:fe:41:89:96:e7:c6:4e:20:9a:a3:32:93:19:a4:b9:19:
f9:d2:f6:d4:18:4d:ae:6f:4f:c9:ba:32:af:d6:72:bc:34:c9:
61:3b:e8:48:9e:85:f3:70:4c:3c:ae:03:b8:8b:6f:25:71:27:
17:8f:23:69:8b:f0:e1:22:10:9c:a2:47:d6:2f:2f:81:44:4d:
0e:c1:a2:c9:e1:a6:7c:0e:12:a7:74:cc:a3:6b:2c:71:37:f3:
05:88:1c:4b:8c:33:aa:77:39:cc:e8:0b:f2:74:c9:10:66:66:
74:83:4d:97:f6:a6:8d:52:80:fd:cc:d8:2b:53:0b:c0:5d:84:
31:2e:c8:7b:6e:f1:38:77:ca:77:b3:dd:3e:5d:a9:cd:69:e4:
17:9d:40:a4:a1:d0:69:bf:4a:54:c9:84:f1:96:77:40:2a:c4:
07:62:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:55 2025 by rpki-client