Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier: iV1QfJ/KmlvtETikVuzEOjEkrWE2bALErRQo2QNtV8g=
Subject key identifier: FC:8E:A9:78:BE:CA:29:3F:EA:D2:D3:72:48:74:6C:24:BE:75:85:C7
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number: 0203
Signing time: Fri 31 Jan 2025 02:11:16 +0000
Manifest this update: Fri 31 Jan 2025 02:11:16 +0000
Manifest next update: Fri 07 Feb 2025 02:11:16 +0000
Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: yf3roSN2WOPQLYH0FSu/4W+xirPf+D/zdlf3lXiDzJo=)
2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: DDdOGJKEKYKXbDa5vtjLSsnRV8BgpNNS0rM4LZRyfrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Validity
Not Before: Jan 31 02:11:16 2025 GMT
Not After : Feb 7 02:11:16 2025 GMT
Subject: CN=679c3144-390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:9b:2f:24:1b:7d:73:31:34:50:7a:d9:38:
df:79:a4:36:3e:82:c2:56:04:7b:60:cf:5e:a3:61:
f7:a3:b6:54:cb:52:e2:89:99:b5:52:35:fe:c5:5b:
4a:57:b0:59:b1:a6:9e:d5:2c:6c:04:d5:9d:b5:b8:
aa:4f:81:76:31:41:c0:7d:3d:85:e8:69:fb:9d:94:
ec:f6:06:96:de:d7:b6:fb:67:85:b1:5f:c5:db:78:
15:5b:a4:42:85:18:30:98:c1:6f:78:c1:6c:d1:85:
fb:4f:51:46:37:58:8a:e1:91:bc:c6:1b:87:87:f0:
39:17:58:b3:19:b8:ac:b4:bb:33:e4:15:4f:d3:8e:
a3:f9:06:7f:14:0d:06:3a:3f:ad:9d:9a:cf:fd:a7:
9e:85:58:94:4a:fe:6e:c4:9e:cf:cc:08:47:7e:26:
95:da:6e:00:1b:91:6c:c7:01:69:ac:cd:a5:1c:1d:
a1:17:f1:11:5f:b2:0d:b5:bb:bb:9a:f3:88:9f:d1:
90:2e:c3:78:67:6c:6d:19:17:5b:01:84:05:77:08:
d7:89:d5:39:96:c6:86:f0:56:7b:db:f0:03:62:8d:
01:9e:6e:ec:97:84:fc:98:a2:6d:45:44:fc:cf:cc:
c3:a9:3c:21:5b:3e:52:bb:c6:f3:01:42:ea:55:36:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:A9:78:BE:CA:29:3F:EA:D2:D3:72:48:74:6C:24:BE:75:85:C7
X509v3 Authority Key Identifier:
keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:03:24:ca:d4:ab:f9:26:e2:5e:90:c3:36:6b:0c:40:e6:
ac:d0:19:7e:a9:70:c1:36:d7:b2:05:72:38:dc:40:0b:ef:fb:
61:62:f5:34:0d:0d:eb:b0:d3:a0:e3:35:36:f2:97:bc:57:ac:
93:3d:28:92:fd:42:76:13:db:a2:99:78:17:df:60:60:2e:04:
78:9a:ba:02:3f:3e:64:52:f4:ab:27:47:9d:23:16:29:b4:3f:
55:a4:0d:9e:ac:99:f1:c5:b9:bd:93:73:e1:ee:c9:f6:1c:c3:
50:8a:66:6e:23:27:e0:e6:7c:b4:c9:32:52:0d:3e:58:cb:3b:
91:f2:f0:c7:38:25:1f:51:66:3e:fd:5f:e0:e4:57:61:6f:5b:
62:f7:90:b1:0f:fe:72:f9:fe:fc:95:e4:8a:84:47:98:be:c0:
78:2f:6c:0c:8b:3e:2c:df:68:9a:6a:05:4f:e9:af:9f:71:89:
f6:9d:c8:11:60:eb:82:25:f4:a0:d2:e3:ef:b4:74:d5:44:8e:
ca:2a:ad:d1:95:f4:56:5e:9d:ad:a6:de:08:bd:5f:e4:eb:c1:
83:d6:4e:0b:a9:df:0a:c2:05:ac:16:e0:f6:e0:8c:e8:46:20:
dd:e5:30:cb:a0:83:4e:f4:bd:74:a5:36:2b:18:c1:d4:51:b2:
e3:fc:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:18 2025 by rpki-client