Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json)
Hash identifier: AFT3OiRvbp2kUQ9ghqdkpxx79WKNHMuAPm2oe6XKnw8=
Subject key identifier: 13:85:58:54:D4:C8:77:3A:08:CF:06:A4:BA:B1:4E:C7:5A:A0:13:A5
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial: 0C54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
Manifest number: 0C40
Signing time: Fri 31 Jan 2025 18:15:26 +0000
Manifest this update: Fri 31 Jan 2025 18:15:26 +0000
Manifest next update: Fri 07 Feb 2025 18:15:26 +0000
Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: cqjEyhy1OimEscYt5qSxCjzZi5SIqOZnAPlLdZa97ys=)
2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=)
3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Validity
Not Before: Jan 31 18:15:26 2025 GMT
Not After : Feb 7 18:15:26 2025 GMT
Subject: CN=679d133e-9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:4e:76:a0:8b:24:52:2a:d6:af:1f:cc:a5:
70:f4:4a:c9:f3:83:ae:95:80:bf:ea:b0:f2:59:c1:
59:23:e5:5d:ef:8a:3e:c9:b4:09:57:8e:a2:e6:69:
90:c5:9c:1a:a2:2b:07:2d:f0:e4:30:ef:c2:54:77:
bb:a0:9c:8b:37:44:50:f8:bf:97:bf:73:59:9d:24:
26:3a:c4:88:16:01:1d:cd:a8:28:e8:e9:46:1d:6a:
6e:28:80:6b:d1:ea:87:e9:5f:15:56:70:00:e3:55:
6a:80:ee:ad:26:44:7b:69:bf:ee:1e:91:cb:ca:58:
72:94:da:22:1a:99:a3:8e:9e:bd:12:0c:03:76:f2:
ca:d8:af:ef:21:9c:60:43:12:79:96:09:7d:9b:1b:
c9:c0:ab:1f:b8:70:33:7f:2a:84:be:8f:64:61:8b:
8d:bb:6f:b4:83:69:b0:5e:8e:6a:25:77:49:86:30:
78:01:e3:7c:47:81:ad:83:e1:8a:9d:e0:9b:97:08:
2d:da:9a:9b:c9:de:d5:1e:92:c4:c2:4f:83:f1:d9:
8d:be:09:57:de:e8:0c:99:fd:69:ff:2e:ba:50:e2:
7e:c6:ef:2e:55:72:07:4d:87:e4:b7:b1:82:ca:ef:
60:1f:86:5a:3c:54:80:9a:34:3b:15:90:0d:e2:5d:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:85:58:54:D4:C8:77:3A:08:CF:06:A4:BA:B1:4E:C7:5A:A0:13:A5
X509v3 Authority Key Identifier:
keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:72:6d:e4:68:71:0f:13:51:90:c5:90:18:d1:72:27:2e:be:
cf:92:39:78:4d:e7:85:06:c3:38:10:2f:51:fd:b8:36:b2:24:
2b:b7:4e:a0:df:a9:fb:bf:4f:44:16:ff:03:aa:b3:66:85:81:
e3:91:c1:26:e2:33:f9:89:53:f6:92:5c:87:8b:ca:30:d0:77:
57:03:7f:02:6d:89:bc:fa:01:4a:3f:85:fe:c7:4b:ac:70:3b:
85:42:3f:71:9c:7d:ad:57:d6:71:78:b0:bb:a7:72:d8:4b:24:
12:04:56:57:e1:13:ab:61:91:7c:59:d1:98:d5:fc:48:9a:12:
56:1a:16:3c:60:62:00:0e:a2:9b:0b:38:72:51:90:4e:e8:82:
08:0a:f2:4a:ff:ac:51:4d:e5:f7:b6:cb:11:27:60:26:75:9f:
15:33:01:0f:1b:10:73:d3:2a:dc:0d:a9:44:98:60:f9:4c:fe:
df:fa:3f:df:ee:70:3d:fd:c0:76:fb:01:e0:d0:dc:ee:33:88:
8c:b2:8e:a0:b2:28:b4:d0:9d:9b:39:95:8e:2a:68:77:b7:f4:
9d:c9:d4:fb:cb:c8:85:56:61:3c:3b:6c:47:18:13:d9:fd:48:
41:59:87:37:2f:4b:55:03:35:dd:2f:03:f8:74:21:be:30:d7:
30:5b:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:34:53 2025 by rpki-client