Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File: mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier: FFmrAWjEaGqGjvB9ispjJkw50wXBw8xcHLbDVsSEuG4=
Subject key identifier: 23:12:57:AE:03:47:B5:81:7A:40:FA:6B:BA:B5:A7:B5:2A:0A:A4:CF
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number: 28
Signing time: Fri 31 Jan 2025 06:51:28 +0000
Manifest this update: Fri 31 Jan 2025 06:51:28 +0000
Manifest next update: Fri 07 Feb 2025 06:51:28 +0000
Files and hashes: 1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: hHQtYV9FXX4GqOm1wTvcA0FqaJ7RbwlV+Scn9zyIQv8=)
2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: Q2O3UQQcNoLM1v/zHql7wsFe9RZlWk5/+eqvd3Q27EE=)
3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: RrU3CkYFdXPh/xjxUTbpuTN6rb1MmkQpXUXbfG9JUVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Validity
Not Before: Jan 31 06:51:28 2025 GMT
Not After : Feb 7 06:51:28 2025 GMT
Subject: CN=679c72f0-f6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:5f:fa:dd:a4:23:ab:af:d4:91:d4:04:4b:
31:c8:18:f4:ca:3c:ec:65:62:2b:d3:09:86:c4:62:
e2:98:c5:3c:3c:dc:dd:e6:58:94:9b:6b:b9:29:fd:
4c:c6:16:36:0b:04:8b:bd:89:db:2a:82:26:e1:9c:
12:b8:4c:7c:cb:d3:e4:3e:7c:4b:51:30:54:00:18:
4a:19:45:4d:e6:5b:19:00:1a:53:df:d4:75:ae:c8:
db:5b:df:0e:9b:14:e5:b0:ba:06:0f:6b:88:d7:98:
c5:a5:34:fd:24:3b:44:92:cf:b4:38:c5:b2:e2:fc:
84:d9:37:bf:ce:ed:26:aa:4c:34:79:5f:8a:8e:15:
85:c6:49:74:9e:f7:30:b9:b0:c0:1c:24:49:cc:9a:
b1:0d:25:fc:e8:01:f4:ef:03:33:d1:58:c1:68:a1:
80:09:54:02:40:88:af:af:ba:9e:f9:c1:25:b6:db:
7f:1d:87:7a:80:94:13:26:a7:2e:72:ff:dc:7e:f3:
d7:42:fc:d4:9c:bd:c3:4d:40:26:81:2a:e8:a7:e3:
8c:b3:e8:94:7a:29:0a:8f:1a:d7:93:c1:3f:fc:3c:
e0:08:91:93:2d:00:31:0c:3f:64:f4:58:5c:af:ec:
99:4b:0d:93:18:b1:5e:c6:e6:6e:7c:73:54:38:d7:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:57:AE:03:47:B5:81:7A:40:FA:6B:BA:B5:A7:B5:2A:0A:A4:CF
X509v3 Authority Key Identifier:
keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1d:08:46:a8:96:e8:af:30:1c:58:22:1f:df:c2:3b:ef:60:
4a:0f:b3:b8:e4:1a:4a:56:3b:e2:a1:80:66:d3:91:05:69:80:
a1:58:54:bc:ad:a3:f0:fe:50:57:66:1a:9d:88:5a:f8:fe:9d:
9f:2e:37:42:85:52:50:79:8f:82:4b:68:1e:fa:71:24:8f:13:
b4:ab:de:d0:48:eb:8e:90:be:1d:1d:5c:0a:71:9c:a0:b1:68:
8d:02:74:6f:08:5c:33:f9:a8:d9:db:2a:b8:7e:15:ea:72:de:
8d:eb:11:0b:f5:7b:be:95:8e:0a:b7:bb:0e:61:db:b7:05:b4:
19:2f:20:12:98:87:5c:bd:d2:b6:ee:47:ea:8d:99:5c:37:74:
d6:85:56:7f:e5:d2:09:3e:89:24:7d:5e:f4:08:71:98:fd:ba:
95:3e:6d:17:bb:81:a4:fb:0a:6d:cb:1b:80:a0:25:30:e2:54:
5c:f1:0a:29:ae:cd:e4:51:19:a5:8e:a6:eb:7c:67:6e:cc:3a:
76:58:ca:c5:bd:76:2d:16:39:17:27:3f:26:ee:33:69:d7:cb:
63:a6:d0:7e:5b:33:48:4e:37:d9:14:30:41:42:07:2d:81:a1:
e7:a5:62:01:d8:61:38:c3:cf:19:71:64:9d:94:4b:86:28:64:
55:35:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:21 2025 by rpki-client