Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json)
Hash identifier: 40qEK55ovRKzqQwOtv5fomqCfVX3P/+djLVFkzVyLOU=
Subject key identifier: 2D:64:CA:7F:5B:C1:65:C1:E7:4A:35:F1:E0:04:1D:FB:DD:47:C6:C1
Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Certificate serial: 069D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
Manifest number: 0697
Signing time: Thu 30 Jan 2025 22:16:20 +0000
Manifest this update: Thu 30 Jan 2025 22:16:20 +0000
Manifest next update: Thu 06 Feb 2025 22:16:20 +0000
Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: e90mFxEPYHEOFnvzQT1Cjy4FHgR0Y6N/JkC/3wwsMgQ=)
2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: z83yYebf2sYxVFu5kCi6t2rocwUEw/IAoFmnGJ1jIIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Validity
Not Before: Jan 30 22:16:20 2025 GMT
Not After : Feb 6 22:16:20 2025 GMT
Subject: CN=679bfa34-aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:aa:51:0d:d5:21:eb:d4:d4:3a:af:28:a6:a6:
ef:c4:17:3c:3e:3f:99:c6:d7:88:bd:0e:dc:4a:c5:
78:2d:77:e7:3f:40:d1:77:86:bb:fd:59:c2:96:f7:
1b:85:1e:c7:84:fd:cd:e4:f6:3e:c0:9c:a8:90:6a:
32:62:51:84:66:6b:4b:b0:39:23:d1:ca:e1:ca:f7:
9f:86:52:d7:b1:ce:77:10:c5:1f:1e:c9:c5:8f:ba:
17:8c:c5:43:4e:fe:c6:18:d6:6f:e4:11:e1:b1:3c:
d2:45:46:f9:e8:cb:98:24:ba:8a:1c:0d:0f:2b:eb:
74:28:0a:80:24:ca:c9:fa:c4:cf:55:fb:ee:35:28:
0c:b9:c2:2d:4f:b6:a3:12:4a:bf:e9:8a:40:1a:70:
89:bf:11:76:09:2f:75:01:9e:fd:4c:34:13:df:ab:
48:6c:87:f1:19:1d:b3:df:17:a1:30:96:ef:8c:d0:
c7:a0:1f:fc:c0:51:68:c6:18:2e:98:b1:f2:54:13:
de:ef:18:03:37:8f:d7:b2:b5:7c:01:85:7d:b0:1a:
5e:4b:fc:14:51:79:d7:4c:b6:ca:c7:bb:15:fd:79:
1c:4e:8c:be:8c:b2:d9:b9:29:0d:13:d5:a9:2d:af:
6b:c1:f0:04:5c:d0:15:e2:4f:de:c4:25:81:95:2d:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:CA:7F:5B:C1:65:C1:E7:4A:35:F1:E0:04:1D:FB:DD:47:C6:C1
X509v3 Authority Key Identifier:
keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:a8:cb:8d:c2:28:00:46:a7:3a:db:ce:4b:26:2a:ee:fd:
7f:dd:ac:26:fc:97:11:45:6d:6e:0d:aa:e1:ab:09:b0:bc:d8:
a0:43:37:56:d9:43:f9:bc:5c:05:6e:92:e4:49:40:cd:83:49:
a9:17:90:15:3d:24:49:f9:39:27:d1:d8:78:a8:13:d1:b5:63:
e2:de:6e:24:aa:70:2c:6c:b9:14:ca:22:9a:f4:8b:fc:c0:a2:
89:bf:fe:1f:de:f0:4a:b9:5d:3c:f1:7e:a1:a1:71:be:11:79:
2e:a8:66:bd:6a:5e:b5:98:69:a0:b8:33:a5:c9:7c:18:54:35:
d6:a6:e0:78:70:65:7c:b0:dd:09:c4:aa:d0:58:49:17:9d:49:
71:b7:86:49:a1:fe:18:6b:57:de:72:6d:c1:5c:09:e7:47:d9:
21:4e:16:6c:f7:21:a3:d5:b7:fa:fe:15:4c:a0:89:8a:a6:64:
70:96:28:34:e5:fa:00:2d:9a:7c:e5:d2:9f:f0:d7:fe:9f:eb:
c3:9c:69:4c:fb:a0:78:f3:b6:44:36:24:99:83:65:dc:25:4f:
d5:6c:03:27:a6:53:59:76:1f:fd:8c:ff:fd:0a:77:87:1a:2e:
db:19:7b:4d:73:24:95:d0:80:a5:c4:38:63:58:b9:46:58:40:
8e:57:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:13 2025 by rpki-client