Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier: lQ8kQTlC5/YmePaMhyBKT89RETO8aQWz0r1vzGtNZhw=
Subject key identifier: A7:66:01:0E:6B:AF:CC:C1:2A:41:FB:0D:66:39:E1:F3:D4:EF:A4:29
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number: CC
Signing time: Fri 31 Jan 2025 04:54:19 +0000
Manifest this update: Fri 31 Jan 2025 04:54:18 +0000
Manifest next update: Fri 07 Feb 2025 04:54:18 +0000
Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: 4AEM5GHTO954ky/lkkfIE1+5NDSYVP4rqDu/DQNlOj8=)
2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: 8zPxRe7MaH+hS0FNXaje7YOQ+Hnyx7RIa4mbg2ZFLUE=)
3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Oms7A+5CbFEtaIgmT8kB8Ycz88DQ95dp9Wjdw3xeV+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Validity
Not Before: Jan 31 04:54:18 2025 GMT
Not After : Feb 7 04:54:18 2025 GMT
Subject: CN=679c577b-d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:50:c4:0b:11:cb:50:25:25:d5:27:29:0b:
57:78:22:07:56:9d:b7:b0:74:c6:14:58:33:13:15:
9d:e5:be:73:f5:60:d0:46:b5:26:44:83:fa:61:1f:
0d:f8:cb:75:83:5b:1a:3d:4b:fe:a8:e4:23:ff:e6:
c4:bb:2f:a6:6f:7e:e1:1f:f0:f4:cc:fe:ec:5f:50:
53:7d:5e:4d:34:fd:61:8b:58:6d:03:74:9d:82:35:
e6:4f:85:7d:10:3c:a1:0b:83:46:18:a5:d4:5b:57:
03:a5:4d:1e:af:18:7e:fb:6c:13:ea:ae:b0:74:be:
34:6a:fd:20:c5:c2:c2:3a:b3:06:d9:4a:28:52:ef:
82:3a:75:34:4f:c1:a6:6d:3f:52:84:b5:0c:a1:08:
1d:f1:90:82:59:ef:1e:00:34:a4:2a:cd:b4:d4:c5:
96:4b:a1:4f:e6:be:46:6a:3f:c6:50:d5:e6:cd:66:
ef:c0:53:c8:60:c6:80:9f:fa:aa:92:4a:e7:c6:8c:
cc:fe:45:ea:bd:e0:f6:bb:42:f3:96:be:06:21:36:
2e:8f:82:70:53:4b:49:8c:c2:bd:08:92:6b:ef:fa:
ad:71:94:b1:fb:f7:ba:f9:c1:67:36:0e:ed:6c:e0:
bd:a0:29:6b:04:1b:84:63:d2:10:9d:61:91:1c:16:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:01:0E:6B:AF:CC:C1:2A:41:FB:0D:66:39:E1:F3:D4:EF:A4:29
X509v3 Authority Key Identifier:
keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:b7:b4:1d:d8:e5:bb:ff:b9:16:90:1c:25:54:56:a0:06:
80:c4:aa:eb:0e:8a:80:68:28:19:71:ab:58:d7:ed:c8:8c:2c:
8f:39:10:6b:25:5e:ae:75:eb:5e:44:01:c9:40:73:4d:fe:16:
2d:7a:42:26:16:8c:4c:1d:6c:eb:91:78:0c:ef:e5:7a:b3:4a:
84:d3:d3:b2:c7:d6:40:4d:5d:3b:c3:0e:6f:b1:61:8a:0a:7a:
68:d6:37:94:a5:11:43:01:ea:be:24:a8:7e:06:a6:48:e9:9c:
1c:b4:ae:52:72:8a:ff:cd:06:df:b8:88:b2:eb:c8:0e:db:9a:
ed:8b:48:0b:f9:be:18:a6:00:ec:e4:f5:d1:4b:f4:33:13:17:
32:a2:03:bc:71:1d:2e:8a:0a:74:1f:f8:10:c6:07:08:08:6d:
73:02:06:8d:d4:86:f7:63:9c:55:3c:c5:35:7f:e5:1b:57:d8:
04:cc:24:4c:9c:18:a5:43:38:4f:b0:68:69:2c:a7:e8:3a:69:
19:63:6d:f9:d2:79:04:56:c3:22:23:d3:e1:3e:c0:b1:e0:ef:
45:3f:e0:6b:09:67:fb:46:8f:d2:89:ac:ef:94:18:a8:5c:07:
e7:8b:03:eb:b0:00:0c:a0:4d:b2:0a:eb:d1:02:c9:d2:a7:d8:
d1:3f:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:52:44 2025 by rpki-client