Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json)
Hash identifier: hepvNZatD1RmBqnV970s30WLJiAciFGwOkbzx+STpmg=
Subject key identifier: 48:29:5C:FD:D3:89:48:62:36:82:A7:08:85:9B:9B:2E:93:B3:2B:DA
Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Certificate serial: 09F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
Manifest number: 09EC
Signing time: Thu 30 Jan 2025 19:59:20 +0000
Manifest this update: Thu 30 Jan 2025 19:59:20 +0000
Manifest next update: Thu 06 Feb 2025 19:59:20 +0000
Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: 3VPqo/GXkOsZmy3w05BAzKmYlqmI5ZHDZ7ik6aNqSTo=)
2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: 8IuCCJrlkn8DX5/stJkD0in4BPYiGVJv0wrZdIEdC4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545 (0x9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Validity
Not Before: Jan 30 19:59:20 2025 GMT
Not After : Feb 6 19:59:20 2025 GMT
Subject: CN=679bda18-7c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:22:2e:97:eb:88:37:55:3f:7c:d8:fc:50:
31:29:6b:ac:98:f0:b1:fa:55:f4:90:ea:64:21:ca:
3f:96:b3:a2:74:9f:f2:fc:97:e8:6f:f0:be:e5:42:
35:a9:ef:ee:e6:98:29:b5:17:4a:7f:b7:76:ab:35:
a4:dd:f6:98:21:7a:ff:8f:54:aa:7a:02:ab:a9:a9:
3f:88:90:c7:a4:07:0f:9d:e2:53:ee:34:f6:9c:f4:
38:d9:64:39:d7:be:e5:b4:52:3e:16:31:83:3a:66:
9a:38:df:ff:89:b7:f4:f4:b8:11:43:44:ba:cd:00:
e8:9c:5b:8b:32:db:79:cc:7a:54:58:6c:91:4c:1c:
51:12:25:4e:d2:66:b0:20:0d:d2:83:db:90:6d:e0:
f9:62:74:34:58:8c:d9:6a:a2:be:35:3a:f1:9e:b5:
45:ea:ef:7c:5e:15:d4:69:51:0c:ab:8e:42:97:b9:
c1:f3:de:2e:54:77:3b:88:22:3e:ef:cd:f1:34:53:
0c:ac:b1:8d:05:64:76:8a:94:a2:51:0b:8b:ac:d7:
c5:d7:0a:ce:9c:7e:0e:1a:72:9d:fa:82:7b:ed:86:
67:b8:d7:99:90:24:39:47:48:2c:f3:0a:2c:d3:df:
a2:63:b4:ae:6d:39:2b:fd:a5:ed:66:ab:d1:1e:d2:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:5C:FD:D3:89:48:62:36:82:A7:08:85:9B:9B:2E:93:B3:2B:DA
X509v3 Authority Key Identifier:
keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:51:bd:0a:ba:07:54:59:1e:e3:bf:ec:45:51:91:06:d0:
98:b7:97:7f:2d:e2:a2:35:b5:a4:af:b5:a0:86:b3:3f:79:cc:
1c:07:ec:68:c4:e0:97:d4:c2:00:1b:9f:65:36:2a:20:3d:9b:
24:dd:11:b6:85:56:53:79:91:e5:17:97:be:33:a1:8b:77:9a:
7f:59:e7:5a:54:9a:59:26:ae:6a:46:b4:ec:13:84:6d:c3:82:
f9:51:65:4c:4e:b4:80:f0:fb:f4:2c:4b:e8:0a:f3:dd:56:d0:
85:f6:28:01:cd:21:26:2d:a8:4f:81:38:36:c4:9d:a5:e7:3e:
ac:f6:16:5c:2f:39:57:ad:ff:d2:49:b1:af:70:34:f2:52:ba:
0a:95:3e:50:c8:13:8c:58:e5:30:05:68:6b:8f:47:b9:fb:bc:
c3:78:25:00:0e:68:71:dc:57:30:f2:bf:67:cd:46:a3:27:be:
8c:da:e0:8f:31:ca:53:a8:3c:71:be:f5:2a:60:23:fd:d3:61:
84:e8:1b:88:bc:66:d4:f0:e5:7d:d2:30:26:c5:df:ed:eb:50:
2d:63:79:02:ec:89:c3:a6:05:ba:0e:b3:4a:e1:17:4d:47:19:
b0:29:35:74:b1:a1:52:cb:e3:60:3f:94:15:df:87:ad:13:96:
3a:e6:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:50 2025 by rpki-client