Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier: ovZki8lSOYSZ/+GH8LdpucbzpMm+Oput/OI9h7zRYB8=
Subject key identifier: CE:D5:83:9D:6B:BF:A8:08:13:AE:3C:14:A0:6A:BB:15:BB:37:55:18
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial: 0BC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number: 0BBD
Signing time: Fri 31 Jan 2025 18:44:39 +0000
Manifest this update: Fri 31 Jan 2025 18:44:38 +0000
Manifest next update: Fri 07 Feb 2025 18:44:38 +0000
Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: rp2rQxhbXM6Bz0revrGy4/rL6A3ADGWHxRBWcvJz0mU=)
2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: t3eros23i5jos6SsnfnITnVUwueCJZ09uU5hK4xc9ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Validity
Not Before: Jan 31 18:44:38 2025 GMT
Not After : Feb 7 18:44:38 2025 GMT
Subject: CN=679d1a16-94f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:1d:26:8f:e4:c2:40:47:22:e6:22:51:f3:
91:2e:64:a6:12:18:b5:b5:a0:c8:05:4d:d8:f2:4c:
d2:cc:97:79:2b:6f:44:90:19:da:91:e9:b8:38:ed:
d2:12:d3:e5:16:0b:cd:a3:de:ef:64:d5:2b:53:c2:
0a:33:26:a3:32:12:66:7f:eb:d5:48:6c:95:36:d0:
1f:fe:aa:e2:fa:4b:17:0c:34:3d:cc:ab:37:22:f9:
0f:68:46:e9:40:ac:ac:2c:2a:d7:70:96:19:bf:9d:
1f:52:e6:b2:df:ef:48:85:63:cf:39:21:cb:53:dd:
c3:7f:7e:f2:50:44:b5:5d:05:82:b2:a0:1f:d5:03:
a7:87:a4:01:f9:b3:8f:dd:e7:1c:8c:83:bf:a0:6c:
77:42:b7:a7:ea:50:b3:7e:6a:d9:8e:41:cf:bf:9c:
92:d9:ea:9b:1c:a1:77:ff:64:62:8a:4b:b0:d2:c3:
97:f7:4a:fa:5a:c1:79:99:0b:d8:47:2a:b5:33:97:
d2:4e:4d:57:c3:93:e7:03:77:79:67:ba:0b:1c:3b:
cb:79:a5:42:e2:2f:cc:c3:8b:f9:b2:79:dd:8e:cb:
57:3a:ec:16:64:dd:1c:d9:e6:a0:48:d5:f6:bf:7c:
78:67:89:31:66:bc:86:90:e4:5b:bd:0f:ed:43:25:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:83:9D:6B:BF:A8:08:13:AE:3C:14:A0:6A:BB:15:BB:37:55:18
X509v3 Authority Key Identifier:
keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ba:4b:df:41:10:28:bf:32:b7:6a:00:66:29:b5:86:e5:ec:
5d:69:3d:79:b4:33:04:e9:fc:27:62:a1:b2:80:dd:8a:c6:3c:
b1:42:af:df:80:e0:b7:0a:bb:20:74:c3:c1:29:79:21:2d:ec:
5d:c8:a4:3d:0d:f5:eb:e6:fe:d3:01:a2:85:af:66:8d:dd:ec:
22:d8:d8:63:30:31:f3:47:eb:6f:f3:4c:7e:01:c0:32:bb:48:
87:94:91:87:9b:3c:a4:c7:72:53:0f:04:10:3e:35:51:17:4b:
21:04:9b:5b:21:e8:a3:a2:4b:fd:fc:9d:5c:9a:7f:be:5b:e6:
07:2b:0a:42:d8:6b:00:1b:88:65:6e:ed:57:c8:9f:c0:a6:42:
64:cc:88:bb:e4:d9:90:fc:ce:5e:92:5f:af:00:e7:50:64:a7:
47:23:a3:24:e4:e3:93:33:49:4f:48:6a:e1:ef:ce:94:dc:7e:
11:a4:b2:65:49:e3:66:0d:a9:46:dd:02:77:c1:a4:1c:ae:c4:
c6:a7:09:c4:04:75:de:b0:60:e7:c3:42:c0:02:e4:87:a2:60:
77:98:09:9c:20:04:99:44:fa:67:a6:05:af:10:0d:b9:4b:91:
42:8d:e8:a5:85:66:22:f6:41:e5:33:22:61:e0:fa:e8:d7:0d:
5a:7b:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:30 2025 by rpki-client