Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: krZ1vrh15EsbfbIq0SXYbw5vyxG66CHUa6x432AdR5M=
Subject key identifier: 84:7A:82:EF:F3:EA:BA:C3:19:80:FD:16:5A:B7:74:A2:EE:AF:FC:A4
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 05:04:07 +0000
Manifest this update: Fri 31 Jan 2025 05:04:06 +0000
Manifest next update: Fri 07 Feb 2025 05:04:06 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: m1BVYeV/WbbcDxqnwBtiMYo1RrV5cT6rXlLBQaQPQ/8=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: 3GOqN8PMZ/cxFE5yg/l01rtznIl/3wsy8K8LEuE8lEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Jan 31 05:04:06 2025 GMT
Not After : Feb 7 05:04:06 2025 GMT
Subject: CN=679c59c6-367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:38:b9:0f:da:99:3e:f6:eb:55:ca:6b:64:
54:49:01:63:5f:56:77:a4:c1:9f:98:aa:28:a0:c8:
01:7b:72:96:e5:7b:5b:a9:ae:b4:2f:7e:85:b7:f2:
9a:bb:f8:d5:8a:64:5d:0a:ff:e1:15:c2:4a:7d:4a:
e5:5a:c0:bf:b7:c8:8d:57:6c:17:df:44:4a:3b:0d:
14:b8:da:ee:14:4c:95:2c:c8:3d:95:3b:94:a3:ca:
0e:96:36:c3:18:67:d8:cf:37:b4:fc:d9:2e:eb:c4:
6f:64:e2:30:25:77:33:89:57:88:70:97:e6:ad:b3:
2b:9f:1e:a9:b4:ff:a4:19:24:87:d2:35:99:8d:fa:
b4:ff:64:f3:cf:db:3f:9f:0d:33:7e:69:29:9a:c2:
16:f0:fb:06:61:79:8e:4d:72:68:d0:a2:7a:93:db:
3a:da:ff:52:6f:6f:f1:86:b4:ce:85:9e:86:b2:4f:
bf:87:98:48:93:32:1a:6f:cf:44:ac:84:a5:16:2b:
35:25:3b:14:74:a1:72:33:70:17:a8:0c:4b:aa:db:
91:7f:a2:80:b2:56:9f:72:79:03:64:d5:99:ca:4e:
55:96:cf:b7:81:61:22:07:52:6e:e1:cd:93:f7:5b:
26:96:22:89:93:b3:8a:ed:ca:40:77:86:4a:a7:f3:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:82:EF:F3:EA:BA:C3:19:80:FD:16:5A:B7:74:A2:EE:AF:FC:A4
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:6d:e2:de:c3:17:7c:51:a1:5d:17:b5:fa:d1:dc:91:34:3e:
7e:43:9a:00:d3:a9:7f:05:ae:7c:09:33:3e:34:f6:d2:9c:df:
6a:ca:5f:88:22:3d:08:aa:6e:b3:54:7b:48:e9:ff:8f:dd:68:
3d:04:ab:8f:12:51:a3:1a:c8:78:62:df:03:65:f9:b2:45:bb:
6e:c2:2d:fc:5b:6b:16:dd:a7:b2:57:cf:48:e4:2b:15:3b:97:
f9:dc:f9:c5:fc:06:cd:09:72:44:ca:0d:b4:e0:14:64:9d:0b:
9d:91:54:4d:21:35:0c:9d:7d:d1:b1:27:43:d0:34:0b:fe:66:
c7:8c:b1:fe:7e:c0:c0:69:58:5e:c9:83:c0:a8:f3:0e:09:3e:
30:e2:3f:89:6e:42:1d:25:e6:47:3f:c0:21:ca:d1:4c:2b:a5:
2a:09:53:d9:d6:91:0d:e7:b8:bb:9b:ec:a7:9d:18:10:4a:41:
11:90:d0:2e:36:ca:48:81:fa:c9:54:75:cd:14:96:0b:c3:2b:
60:42:bf:bc:83:fb:1a:23:3c:5b:47:79:d4:ce:28:70:de:d2:
f2:c1:bb:cf:16:b6:74:71:0b:9f:5f:76:76:9b:17:6e:52:ad:
28:cc:f2:10:42:fd:60:b2:5f:fa:0a:ca:f4:62:cf:cd:92:40:
7a:55:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:23 2025 by rpki-client