Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json)
Hash identifier: 3iRMgMbKWoei5ScPWlsy0Tac21Q3gUcahMnadRmHVVI=
Subject key identifier: A3:1B:BA:D9:82:BD:AF:FD:D4:8D:E0:A6:63:3A:84:7F:AF:35:B2:54
Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Certificate serial: 0410
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
Manifest number: 0406
Signing time: Fri 31 Jan 2025 00:45:13 +0000
Manifest this update: Fri 31 Jan 2025 00:45:12 +0000
Manifest next update: Fri 07 Feb 2025 00:45:12 +0000
Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: Y0UWn5xSo75NAuDH6G6w02BSGAuXDzF5958vGnPDf7M=)
2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Validity
Not Before: Jan 31 00:45:12 2025 GMT
Not After : Feb 7 00:45:12 2025 GMT
Subject: CN=679c1d19-6492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:ba:a2:9e:07:96:9d:2c:f0:d1:c4:29:1e:
dc:ce:85:ed:63:29:be:1f:11:19:5c:e4:46:cb:5d:
62:c8:8e:22:29:84:1c:1a:b1:f5:c3:ef:cf:62:e7:
b0:42:38:29:9e:15:86:17:de:9e:bb:1b:f8:47:c5:
a5:13:c5:98:f8:d9:9c:ec:87:7e:64:d2:69:69:ff:
99:93:4d:5c:18:5e:e9:c1:aa:be:9c:73:87:48:ef:
64:f3:10:88:a3:8b:32:32:65:eb:00:05:ce:a4:91:
6e:b1:f4:85:63:c4:4a:8b:34:b5:ac:17:51:9e:fe:
0d:ab:0b:e9:5c:84:b2:7a:69:c1:12:4d:78:2e:04:
c0:ea:6e:68:0c:55:43:29:f5:f3:0a:c5:ee:16:ec:
b1:32:66:05:d2:fa:f9:df:b8:0d:26:e8:d9:39:17:
0f:2e:04:06:e8:10:c3:be:14:c0:b7:ea:11:4b:44:
b4:df:ab:88:ef:08:b5:72:b6:c2:26:94:bc:d0:be:
e7:3d:9c:ad:22:7f:ec:90:33:d7:ac:f6:72:d4:bb:
0f:13:4d:42:d7:48:32:d3:37:22:05:d1:45:d8:77:
8b:8c:f4:f3:0c:58:91:40:7b:4a:02:f8:4f:84:32:
1d:3f:df:fc:16:31:1a:3e:83:b7:c5:71:57:71:d0:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:BA:D9:82:BD:AF:FD:D4:8D:E0:A6:63:3A:84:7F:AF:35:B2:54
X509v3 Authority Key Identifier:
keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5a:41:66:b9:94:70:65:b1:9c:08:9b:a3:94:9a:14:46:53:
b9:9b:68:27:dc:d0:9a:8a:20:6b:ce:cb:5a:b7:95:d0:f6:24:
18:0b:c2:1d:e1:91:d8:62:db:39:8a:fb:19:3d:4f:e1:5d:bd:
47:7a:c3:7e:48:00:2e:23:58:d5:05:17:11:af:ff:6d:4d:3d:
13:e8:6d:fd:51:91:0c:83:80:25:d3:2b:49:cf:d2:28:74:04:
ab:d9:12:6b:5a:8b:0c:96:5d:50:e5:9e:33:24:74:b5:14:f5:
e2:86:7e:ab:05:c1:bc:3f:01:5f:2b:04:97:90:6d:85:03:50:
4f:0f:ed:a8:45:b4:ed:3c:d6:ad:67:a9:7a:03:51:38:b1:19:
e7:ac:41:57:48:89:6b:eb:1e:90:7e:ad:89:6a:07:16:2d:ba:
45:d0:4b:08:48:2a:f4:52:5c:d2:06:80:6a:aa:10:75:38:a7:
49:e6:b5:48:14:26:4c:18:e5:b5:f7:e0:6e:50:ee:9f:44:4f:
84:55:fd:87:a4:ab:99:e7:82:da:96:a0:6a:c9:0a:ed:9d:25:
85:96:81:0a:d5:24:28:d6:80:a2:c4:07:34:d9:32:24:fe:77:
ed:23:d0:ce:13:a5:25:f9:75:aa:5c:27:c7:7e:01:b9:60:76:
63:f5:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:05 2025 by rpki-client