Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json)
Hash identifier: 38sp7IVqgMcwcN0CFnVvJZ8ty8dtJWCJ6o9/c65HIEM=
Subject key identifier: 49:6E:3F:9F:55:C4:CD:7B:76:90:5A:2A:54:1C:DB:97:3B:E2:2D:B9
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial: 0BFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
Manifest number: 0BE9
Signing time: Fri 31 Jan 2025 18:38:16 +0000
Manifest this update: Fri 31 Jan 2025 18:38:15 +0000
Manifest next update: Fri 07 Feb 2025 18:38:15 +0000
Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: Q8Chtsn3A8Sx8i8UlTuAuNVeK9E/LjjMniJyaZ+t5qo=)
2: 2D0509BC078511ED87041524C4F9AE02.roa (hash: mkLhDheVvSZEQXdMpQZm/3lb3eLuVbKFGeKtwuwQQaM=)
3: 8045C26A3B3E11EC94B9CE0BC4F9AE02.roa (hash: I/1YYRZufm+Qc/8Hh8/4oZUCrPLEFvhM/LrJmE0hiuA=)
4: 2BA0624C078511ED87041524C4F9AE02.roa (hash: 1RZU0spXmvxzBxOJllCgbla9KxLkGAPl5bLUojUqNcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Validity
Not Before: Jan 31 18:38:15 2025 GMT
Not After : Feb 7 18:38:15 2025 GMT
Subject: CN=679d1897-e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:4f:e4:43:8a:b7:51:31:50:06:5d:8b:b0:
fb:d8:1c:04:ec:a8:2b:54:13:cc:ab:90:9e:bf:98:
9c:90:80:b4:40:76:2c:d2:33:ef:ec:d5:a5:90:58:
2c:96:e7:46:98:5c:f1:c7:8e:fe:4f:08:8d:04:7b:
31:96:12:03:88:75:34:82:3f:11:ea:b0:e0:de:db:
6a:fa:8c:7f:9d:ec:1d:11:b1:a3:42:39:b8:52:f5:
7f:63:c8:cf:75:fa:d9:66:6a:e3:41:8c:d3:ca:1f:
b5:24:2a:14:b2:13:d6:fc:7a:b3:7b:af:95:59:1a:
c1:1f:a2:1b:e8:9b:65:00:fa:a5:8e:fc:89:de:61:
83:3a:3f:53:33:d8:8f:af:65:c4:66:c6:30:0e:63:
45:79:24:c7:a1:29:91:0c:70:80:8d:15:ca:86:4b:
3c:8a:d2:c0:f4:41:e0:9b:25:9e:87:da:d1:18:fa:
f3:77:53:dc:c9:cf:9e:cc:e2:34:3b:81:4f:66:0e:
7d:5a:c9:e1:09:94:1b:4f:7b:bd:7a:76:db:15:a7:
89:0e:79:a7:9d:85:35:2b:b7:a2:51:c7:7b:66:28:
c1:34:ca:cf:73:07:1d:29:78:f6:b0:0a:45:5b:09:
a7:40:ad:f0:ea:23:ba:fa:ff:3b:c5:51:1f:f0:eb:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:3F:9F:55:C4:CD:7B:76:90:5A:2A:54:1C:DB:97:3B:E2:2D:B9
X509v3 Authority Key Identifier:
keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:29:08:9b:63:f3:46:97:ab:d5:6f:c7:da:19:0c:ef:42:
83:b9:03:bb:a8:db:8f:6d:4c:ab:46:35:d8:40:d4:71:2d:59:
a1:6d:ea:ac:40:7b:c3:84:28:93:79:7b:c2:0d:fc:c0:41:a4:
ad:55:7b:46:f1:70:bf:16:ca:25:ed:ef:b3:e5:dc:32:1c:00:
80:a6:6f:6c:2a:30:48:55:2e:29:2c:27:4f:0d:d0:a3:79:22:
49:6b:85:87:96:81:9e:47:16:28:85:c4:96:47:74:44:cf:84:
5b:6c:ee:e0:18:fc:ac:75:1e:2e:f9:79:30:79:d9:12:f7:25:
98:21:36:31:f1:d7:60:c4:0b:9b:80:72:85:53:f2:9a:81:0c:
2e:a6:7a:02:ee:71:43:6c:7d:87:68:59:4d:ea:7a:40:e1:d5:
ee:fc:36:58:09:43:66:ad:bf:23:31:94:9d:e9:15:23:2a:9a:
54:d3:52:99:af:5b:fd:67:55:5b:ad:0f:cf:39:c6:27:8e:20:
f6:9a:ca:18:ff:67:d0:60:c9:93:a7:85:5c:3b:93:71:c0:0d:
15:b9:a1:48:95:4a:28:77:e9:08:6d:a9:80:fa:24:14:d4:cf:
23:75:57:0c:36:87:be:31:4d:2b:ff:58:47:de:bf:fa:62:23:
b3:0b:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:27 2025 by rpki-client