Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json)
Hash identifier: KbczPSfdlkLW8ZCQv/b2FPTLrH18DSVSgbz/JTydOBk=
Subject key identifier: 6E:12:AB:22:9D:A9:37:70:07:DF:75:56:74:31:88:05:EE:69:6C:98
Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Certificate serial: 0443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
Manifest number: 0443
Signing time: Fri 31 Jan 2025 00:17:36 +0000
Manifest this update: Fri 31 Jan 2025 00:17:35 +0000
Manifest next update: Fri 07 Feb 2025 00:17:35 +0000
Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: DGfkhE+F3Zqog7Q70nyOwfLiV4t6mGm9bCAyRbS2aDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Validity
Not Before: Jan 31 00:17:35 2025 GMT
Not After : Feb 7 00:17:35 2025 GMT
Subject: CN=679c169f-9f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:5d:99:6c:97:31:1d:b3:ba:86:87:a6:04:
10:1c:9d:fc:bc:55:da:12:ce:b7:28:f5:0e:8a:1b:
0d:76:6a:c1:f6:09:88:35:bb:93:db:69:01:11:9d:
67:35:be:b7:9a:39:3e:89:cf:ea:cd:33:63:78:b1:
38:89:dc:be:0c:51:c4:c4:68:7b:82:09:8c:48:e6:
2e:b0:72:ef:63:c9:4b:e0:12:70:71:7f:1b:9a:34:
ab:3d:32:8f:6e:ec:03:d8:f4:8c:7d:72:0e:c4:d5:
52:56:41:06:30:d2:74:5d:84:c1:96:4d:e1:72:20:
8b:ba:34:4b:17:69:73:b8:37:df:21:35:f7:f3:1d:
1a:99:69:87:01:9b:24:b3:55:ca:78:6f:84:46:2a:
37:aa:d2:91:92:89:95:44:fc:a4:b3:b9:dd:70:c3:
b6:79:3e:42:44:ea:d4:ec:25:42:c2:10:5e:a3:18:
de:01:94:63:44:e0:1a:96:34:de:4f:aa:0f:87:07:
7a:cb:3d:d5:07:86:86:e2:25:c1:0b:e0:84:3a:70:
12:8e:cc:10:21:37:96:8a:dc:57:0d:7c:47:35:70:
e8:8a:e9:85:03:b9:2c:46:3f:61:46:c5:2e:c8:ac:
cc:c9:82:5f:e4:42:58:89:dd:8c:b1:ac:19:cb:00:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:AB:22:9D:A9:37:70:07:DF:75:56:74:31:88:05:EE:69:6C:98
X509v3 Authority Key Identifier:
keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:c2:51:b3:af:ae:ec:65:57:8c:b5:3d:fd:1c:9e:a1:1a:
77:47:20:ab:1e:c3:5c:3c:75:f6:6b:6b:b7:8a:03:e7:6f:d0:
8a:91:eb:a0:b6:22:7f:34:3a:38:dc:e0:e8:0e:d4:a7:2f:b4:
2a:2b:f8:c8:0a:bc:af:ae:32:db:b3:6e:c5:fc:e9:07:12:0c:
d4:47:67:6e:c3:ab:f1:78:45:32:d7:c0:4e:7c:2a:93:49:f7:
7f:5f:38:75:2c:5c:bf:0a:d3:6c:b2:3a:ff:87:67:84:63:36:
c7:1a:3a:9d:4a:7b:b2:c7:aa:be:bd:a5:2f:55:64:ed:82:2b:
84:ec:3a:ec:99:e9:b2:f5:82:cd:16:14:ad:31:91:cd:40:ea:
38:e2:3c:74:c1:28:49:de:74:d5:a1:4d:c4:2e:2f:6c:1b:2f:
52:8f:6d:52:40:02:64:e9:fe:45:43:44:dd:d4:f1:6a:09:50:
1c:64:7d:41:2e:92:a3:4b:67:3d:ed:a0:c9:86:93:e9:25:9c:
c7:dc:4e:de:8b:3e:fc:62:8b:cc:94:2a:6b:e7:cf:44:52:6b:
1c:c5:11:b7:a0:b4:71:ef:7e:cc:f7:d5:4e:ca:59:93:bb:29:
45:86:06:a3:85:d8:34:07:ea:c2:49:39:00:47:4a:20:a9:b6:
29:d1:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:31 2025 by rpki-client