Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
File: 79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json)
Hash identifier: uDOuEMAl0G3rhDs04FDut6kiK6plYdY//oKFfkz7lG8=
Subject key identifier: 1B:7A:5F:72:E6:BA:E7:01:E2:1B:07:3A:9C:E9:06:BF:79:A2:68:FD
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
Manifest number: 016F
Signing time: Fri 31 Jan 2025 03:06:53 +0000
Manifest this update: Fri 31 Jan 2025 03:06:52 +0000
Manifest next update: Fri 07 Feb 2025 03:06:52 +0000
Files and hashes: 1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: skd5VxGx152uLjaQBNUv16laxW/2N4/9j9gCFP+5Sa8=)
2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Validity
Not Before: Jan 31 03:06:52 2025 GMT
Not After : Feb 7 03:06:52 2025 GMT
Subject: CN=679c3e4d-cdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:b9:67:5b:6d:ea:71:eb:1f:86:a8:ad:a5:
9e:b1:b5:14:70:31:b7:8c:e0:91:37:ea:d3:01:7b:
d8:d1:4a:62:97:21:af:40:bc:3b:c7:68:ec:df:3a:
67:6c:10:1e:da:9f:53:c1:09:4d:18:76:2c:81:20:
22:c7:0b:98:af:b3:9b:7b:88:67:ca:4b:e9:4d:1e:
10:59:3c:09:6d:2a:24:3e:26:72:f2:b5:38:5d:78:
a2:10:4c:84:1a:ac:38:13:4a:83:71:ad:b4:88:94:
59:33:52:ab:90:2c:ad:1b:62:ab:c8:8f:d0:e5:88:
15:af:3a:84:10:02:58:58:ea:0a:b8:a8:1e:46:b9:
72:91:24:07:0c:8d:de:c0:ba:e0:7c:d4:c4:15:b6:
3f:84:67:64:b0:af:99:1c:97:40:1f:07:75:10:32:
87:6d:4c:f4:6e:c4:d2:11:af:f6:10:00:e0:a8:59:
79:b2:64:3b:f2:28:e7:8b:be:c8:62:21:a2:f9:88:
0e:ef:03:37:06:f0:b0:ee:77:8e:a6:14:79:dd:8e:
a2:6c:4a:91:36:55:d7:94:6c:8b:32:bb:63:19:e8:
af:34:85:99:75:a4:b7:66:94:71:bb:6c:f7:4f:b2:
c7:1f:5f:88:dd:3d:78:d4:e3:a0:e9:5f:08:71:32:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7A:5F:72:E6:BA:E7:01:E2:1B:07:3A:9C:E9:06:BF:79:A2:68:FD
X509v3 Authority Key Identifier:
keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:09:8a:81:63:5d:d0:7c:c3:97:e8:de:f2:23:10:0f:e2:4e:
74:dd:c7:8b:42:b9:96:0b:aa:7b:2b:5e:ad:b0:3b:ef:bc:49:
9c:be:a0:ed:f5:c5:bb:85:c9:db:f5:99:45:0d:94:9b:60:66:
a0:2e:5b:ba:3f:71:f6:f3:df:f0:8b:ca:83:23:d5:bf:2a:e0:
ff:64:95:ab:35:ce:f1:a9:43:34:6e:d5:c7:42:fe:a5:c3:d3:
94:13:ed:6f:05:24:16:56:b2:e2:b4:d5:e2:aa:42:03:ef:b5:
55:10:ac:54:12:3c:cd:5c:5a:7e:b1:b9:78:ad:11:74:12:ed:
a0:6d:c6:72:6c:18:6e:42:64:fd:a3:16:bf:57:a7:5e:02:2c:
c9:d4:d0:c7:8d:c7:a7:c6:cb:9a:9d:ef:d3:eb:1c:25:49:b5:
fb:40:89:0e:8f:36:91:bf:01:2d:70:a0:95:53:00:1b:c2:23:
7b:5f:77:be:2b:35:f2:0a:7a:13:9c:16:bd:f1:ad:8b:c9:f7:
68:a6:e3:86:de:24:49:88:72:02:b3:a8:37:59:02:ff:39:30:
cd:4c:be:38:87:60:eb:01:fc:c3:00:ee:fa:78:2e:5e:f1:93:
cc:30:4b:75:b1:ce:5b:a8:0d:ff:74:e6:05:16:40:bd:f8:14:
a2:7f:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:45 2025 by rpki-client