Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json)
Hash identifier: lUBs7OZ4CBHEf48r+rPkQQkzKbeWGSg0XduNH2dltig=
Subject key identifier: 3E:B5:2D:95:E9:69:32:07:48:F8:BE:68:4E:ED:51:88:F6:B0:5E:E2
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 1638
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
Manifest number: 15FB
Signing time: Fri 31 Jan 2025 16:46:39 +0000
Manifest this update: Fri 31 Jan 2025 16:46:38 +0000
Manifest next update: Fri 07 Feb 2025 16:46:38 +0000
Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: vk2LgLg7veLcX00nAJrtqPhuoqUX7L0alxsoRyKjeo4=)
2: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: pak3Iy8E0gYpnvDkmWBebcI4LeVYUCjbRqic1+nKIXc=)
3: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: v+Ks9nZk5YSGi8jwz8W2ujGkO89h3nHyAUbCbrfDviU=)
4: 13E506A05F8D11EFA0D0E63EC4F9AE02.roa (hash: 5aHwyh7mKf3mabB3+B/ULHUMzqLd6tPgtR4X65Nue2c=)
5: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: Adsar2w8VAjS3SUaIO5TAhSv+c7iSEo6NtUlziAok5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5688 (0x1638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Jan 31 16:46:38 2025 GMT
Not After : Feb 7 16:46:38 2025 GMT
Subject: CN=679cfe6f-9661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:47:66:0a:19:db:d4:1b:3c:65:03:4d:bc:
fa:dc:db:2c:97:e3:dd:37:c6:e5:64:b9:e0:8f:0d:
cd:10:6a:69:ec:1b:58:88:8f:34:6a:be:08:1c:e1:
06:5f:96:b4:dd:96:e0:1c:68:97:43:04:15:1b:58:
be:e0:44:fb:88:9b:a3:cf:ac:dd:e9:b8:fb:77:c4:
47:d8:96:76:ba:3c:32:6a:58:ca:1e:a4:14:ba:0f:
09:31:b0:1d:1b:2e:69:44:a4:86:33:77:ac:ed:50:
ca:14:3f:1c:23:96:54:1a:c3:d8:87:4e:a9:07:3a:
e8:48:08:ea:63:d1:cb:63:8b:d7:53:8c:df:17:63:
eb:6a:04:9b:8d:c2:16:a3:77:83:8f:0a:b4:bf:50:
52:34:d1:e5:42:fd:d7:2f:d6:20:a4:75:5d:f3:fc:
a0:2b:4d:64:aa:3b:db:e1:8f:7f:e2:cf:ee:18:7b:
a0:9d:42:81:37:8f:02:ff:50:d2:ff:27:33:69:c9:
a7:bc:80:c0:01:57:14:01:12:20:66:1c:62:07:ce:
15:dd:c2:08:29:d2:83:40:19:58:fa:65:ab:cf:1a:
df:43:e6:1c:83:33:db:a3:e8:e3:56:e4:53:46:d7:
30:e7:0d:66:7a:25:b7:54:9b:ab:b6:7f:23:65:65:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:2D:95:E9:69:32:07:48:F8:BE:68:4E:ED:51:88:F6:B0:5E:E2
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e4:53:49:ac:89:f3:f6:3b:13:27:22:29:a5:2f:0b:97:31:
1b:f4:1e:24:2e:18:27:c3:a7:ff:4a:06:5b:b1:11:92:2f:20:
45:63:18:a8:95:af:cd:6e:fe:99:08:da:3e:ba:92:d1:96:b3:
f2:17:bd:60:1a:b7:1a:6e:06:b3:03:19:c4:5f:56:d9:ca:3e:
fe:98:50:88:bf:fc:96:7f:3d:74:12:ad:ec:52:15:7f:84:7d:
94:a1:5c:1f:fe:02:43:6e:44:15:eb:8b:2f:5e:0f:4f:71:35:
0d:c3:ab:1a:5a:97:f8:3e:10:04:e0:c3:dd:a0:9c:63:cd:11:
ca:9e:08:d0:f3:af:2c:72:ea:48:b3:41:fb:cb:ab:12:45:83:
a1:43:5d:b8:6b:10:91:4b:9d:f8:0c:80:02:c3:db:69:00:05:
5f:05:41:cb:b7:5d:8e:fa:91:3b:e7:33:1a:40:4f:34:b3:63:
fc:95:cc:ee:9b:2c:4c:ec:57:f0:f1:e7:6c:3e:6e:81:13:f4:
a3:3b:1d:30:7f:67:b2:aa:18:21:7f:c7:e7:b9:0b:1c:2e:bc:
ed:04:4f:2b:08:ae:bf:f6:03:39:2d:05:b7:02:42:0c:c3:cb:
20:1b:66:77:7f:b0:e0:48:f4:1a:67:d4:87:28:b5:e4:1f:59:
12:e7:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:45 2025 by rpki-client