Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier: FgjdgQKjiTalpuhn31Cq4ZQFk/9q7xjrqt60bZya9zE=
Subject key identifier: A6:07:E6:2A:0F:46:4D:30:18:FB:2D:4E:6C:FB:C2:3B:6B:CA:47:9E
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number: 0157
Signing time: Fri 31 Jan 2025 03:22:14 +0000
Manifest this update: Fri 31 Jan 2025 03:22:14 +0000
Manifest next update: Fri 07 Feb 2025 03:22:14 +0000
Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: U3nE/pA+qZmPDJJlTweJSZ68RJlRdWn1jza1BhHAmh4=)
2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: 95TYzLOqwMphVUCVsji8mDMvFKrsCaokY8ysHX5ZUv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Validity
Not Before: Jan 31 03:22:14 2025 GMT
Not After : Feb 7 03:22:14 2025 GMT
Subject: CN=679c41e6-971b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:06:3a:d5:2c:6a:29:6c:0f:e5:5e:ba:41:
f0:1a:0c:e4:9b:25:fc:ac:36:56:d6:35:14:cf:8d:
f0:1c:de:b6:3f:0c:4a:ed:b4:d2:bb:35:15:57:87:
5f:30:03:26:89:28:d9:75:6b:48:ba:a5:c2:33:bb:
f1:d8:6a:c2:74:4e:71:43:da:aa:5c:bd:e9:1c:3f:
5d:d8:93:8f:ec:90:c5:63:20:12:26:19:d2:37:eb:
20:53:dc:4d:25:fe:4e:2d:6b:35:ce:de:90:b2:45:
bc:b2:aa:87:4d:85:0a:9f:ef:8f:52:a0:eb:ec:fc:
4d:44:b9:cc:5c:97:9d:d6:36:46:60:41:03:3c:b2:
f9:7b:47:83:46:a8:17:1c:14:3f:b7:18:c3:31:25:
03:10:81:c5:41:0a:84:9d:58:4e:ef:da:2a:d1:f3:
52:e5:ac:8e:b1:ec:82:98:80:10:47:58:a1:d6:4c:
b2:32:f6:7d:56:04:ec:10:19:1b:5c:80:81:a1:85:
9b:d9:e3:8c:00:6b:56:bb:f6:88:68:f2:34:6e:d1:
f0:1e:01:d4:7b:7f:15:f2:e3:cc:b0:00:85:a4:ac:
60:3a:65:17:a8:03:0a:11:0a:eb:04:52:12:e4:d9:
f8:2b:7a:ea:f1:a0:b5:ae:b4:3b:05:52:7b:8b:c6:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:E6:2A:0F:46:4D:30:18:FB:2D:4E:6C:FB:C2:3B:6B:CA:47:9E
X509v3 Authority Key Identifier:
keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7a:e2:ac:e3:24:97:46:98:4a:c4:0e:89:51:ec:c6:de:6c:
6e:cb:b6:71:3c:ef:2d:19:c2:5c:5b:14:9c:c1:63:86:21:b9:
43:b7:ac:10:65:c3:df:1c:06:ed:5a:36:a5:fc:ee:8a:c7:f4:
a8:f9:3a:c5:7b:46:55:9f:e5:56:4c:82:8e:68:09:dd:a6:90:
14:f5:55:26:7e:fc:78:98:ba:49:5f:07:e8:64:38:40:18:91:
7e:51:53:d8:33:92:50:1b:45:c1:5f:8a:b2:dd:ad:fc:f9:9a:
3f:29:32:7c:b4:26:46:34:81:8a:17:68:50:f1:8a:0a:59:50:
cd:fb:01:ec:0e:9f:e7:bd:75:b0:82:42:8f:fe:04:1e:b4:f4:
9f:4f:f2:bd:a9:60:a9:ce:ce:2c:51:83:89:69:1a:d0:6f:14:
6d:21:bd:16:0f:dd:f7:09:4f:23:f8:96:8e:40:10:3e:26:03:
9e:73:86:50:a7:6d:cb:e8:b7:41:1b:c9:1e:cf:ef:86:fd:c7:
25:fe:f9:d7:07:1d:0f:52:81:e0:55:85:6c:3c:a9:5c:99:35:
8c:f9:3e:f6:fb:4e:64:2f:91:23:bc:37:cc:44:bd:f7:81:d4:
3c:00:ee:ee:0d:53:95:df:07:f9:8c:9c:fe:b6:20:a2:0d:7f:
61:68:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:24 2025 by rpki-client