Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json)
Hash identifier: KzVC+aHrvWzviWFRBAzCCEZQUP9U/75dkPK9+YUmYyo=
Subject key identifier: AD:AE:73:28:29:63:3A:B1:87:B2:43:99:4E:2E:1C:8C:E6:CB:2F:57
Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Certificate serial: 02B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
Manifest number: 02B1
Signing time: Fri 31 Jan 2025 01:34:22 +0000
Manifest this update: Fri 31 Jan 2025 01:34:21 +0000
Manifest next update: Fri 07 Feb 2025 01:34:21 +0000
Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: dHPJtQrbLs8shbEyTK4H6f6pwzRJWeoiD9CNbxHAGZM=)
2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: kgM5o3dXNIi7eIMjv0bZ11gFzEgmzlkUXlFL5nbPJ3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Validity
Not Before: Jan 31 01:34:21 2025 GMT
Not After : Feb 7 01:34:21 2025 GMT
Subject: CN=679c289e-a469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:30:7c:1e:47:d6:83:ca:bb:7b:c9:17:b8:
ac:35:f3:7c:8f:2e:39:df:bf:99:3c:d1:2b:c1:53:
aa:d3:b5:7d:e1:4f:34:52:b7:1b:9f:91:a4:42:35:
a2:08:66:49:88:a4:cd:b1:62:18:39:1a:f8:f1:b3:
38:26:14:07:5a:95:de:1f:dc:1a:7a:0a:a4:dd:fa:
da:45:14:f8:a1:b4:ff:a2:c4:eb:66:98:ec:90:03:
73:43:10:87:4f:1e:12:87:bb:ce:11:a3:b9:1c:18:
ac:e8:0a:b0:e6:26:7a:8c:89:20:db:bb:32:d2:e7:
b7:82:26:eb:eb:14:3a:71:aa:34:32:bb:b5:3c:ab:
8a:f5:19:62:ef:cb:6c:62:e6:e2:84:7e:70:88:a6:
85:6c:78:68:b0:03:5f:e3:74:b9:fa:85:32:19:de:
7e:3b:b0:d0:12:57:dd:63:db:4f:df:cc:e1:fd:fe:
3f:b4:fc:5f:e1:d0:55:a4:a6:9c:b7:33:57:23:4d:
31:9d:d5:cf:ad:ec:c5:f1:0f:c5:da:7a:ce:61:c0:
a8:87:92:d7:97:05:75:b9:a1:97:45:34:5a:ca:70:
a2:66:91:66:79:11:c1:4b:5c:5d:17:fb:70:96:b6:
d5:29:34:94:75:3b:7d:d1:95:91:83:09:a3:c1:46:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AE:73:28:29:63:3A:B1:87:B2:43:99:4E:2E:1C:8C:E6:CB:2F:57
X509v3 Authority Key Identifier:
keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:ec:4e:65:35:d7:ce:66:8f:d3:b5:27:93:a8:20:b9:af:
c3:d4:64:e6:fc:4c:af:14:ea:e1:61:64:a7:fb:24:29:7e:93:
b8:81:df:b3:dc:0f:ac:5a:ca:9c:70:1d:68:cf:70:7c:a2:f8:
d4:6d:a3:9e:b8:15:5d:77:34:99:bf:aa:c7:30:83:b8:1c:1b:
f3:d0:14:b1:56:f0:56:67:9a:40:46:fc:90:aa:c7:e1:b6:7f:
2e:13:d2:b9:17:93:c2:65:42:dc:98:27:08:9b:f9:57:53:fa:
ad:ce:5b:97:7c:90:89:0b:c9:af:b9:99:66:3f:85:45:e5:81:
82:5d:a9:db:81:69:ce:82:2f:37:6a:f3:cb:bf:38:af:95:50:
08:b7:22:d6:19:e1:ff:e5:25:72:a8:d1:6a:4e:3f:91:09:36:
ff:e0:04:7f:e1:36:cb:88:bc:d8:fb:7e:2e:f1:cc:cc:63:42:
9f:37:58:c1:e1:44:c0:8b:68:29:9f:95:ae:8e:6a:25:d3:27:
79:29:56:2b:51:d7:c9:63:89:32:96:f5:7f:8d:bf:1e:97:d8:
02:7f:33:23:81:e2:2e:55:6b:34:6c:a0:1b:2c:fb:9e:38:46:
ed:ef:3a:ef:31:a3:f3:76:cb:a4:33:ba:0d:60:e0:70:e6:14:
49:0e:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:46 2025 by rpki-client