Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
File: rRAu0CidxOT63nCzTXZgyg0rvSs.mft (raw, json)
Hash identifier: ptjg3+KCgGXUZDfkgTT12I7auvfpWaPG2NeP/+hzxnA=
Subject key identifier: F0:2E:2D:7B:A2:98:9C:8A:9F:23:42:83:7E:AF:46:38:86:4B:D7:E9
Authority key identifier: AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B
Certificate issuer: /CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
Certificate serial: 0464
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
Manifest number: 0456
Signing time: Fri 31 Jan 2025 00:44:33 +0000
Manifest this update: Fri 31 Jan 2025 00:44:32 +0000
Manifest next update: Fri 07 Feb 2025 00:44:32 +0000
Files and hashes: 1: rRAu0CidxOT63nCzTXZgyg0rvSs.crl (hash: ycqklTemIlaM+A5ZCkfOLgwxii6cgCv1IQFGPwl1UlY=)
2: A82A33A6C0A711EE97A2E984C4F9AE02.roa (hash: CnZXtw3/4AqdJCTI5d8ujaryQpbefwk1oaJ074/WgPk=)
3: A71C6AA6C0A711EE97A2E984C4F9AE02.roa (hash: rFwN+SF9461uZLERr0sJ+qKXXO8E4boiupW7Ykdk4aI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
Validity
Not Before: Jan 31 00:44:32 2025 GMT
Not After : Feb 7 00:44:32 2025 GMT
Subject: CN=679c1cf0-2a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:47:c2:49:83:a9:27:a7:bc:07:21:5c:33:
a6:9a:7b:36:de:5d:46:8f:8b:dc:67:16:df:ca:82:
ef:af:99:f7:dd:a6:8c:32:97:56:5e:91:b0:bf:80:
84:fa:a1:35:84:28:7f:32:ae:5f:34:df:e9:63:3f:
af:58:cb:88:72:c3:37:32:02:39:bb:71:85:32:e8:
bf:1e:c3:49:df:56:7d:80:04:50:d3:39:65:b4:ae:
fd:5d:f6:94:29:6b:9a:f0:c2:4e:96:53:23:72:20:
e2:48:bf:0e:e5:33:86:91:cd:f3:09:a1:ef:7a:cf:
54:32:63:0b:b3:0e:4d:d8:5c:74:04:eb:76:33:5c:
77:23:41:b7:d1:a4:b2:f7:62:6c:64:3e:cd:2d:d9:
1f:78:ea:5d:19:77:45:2f:35:ab:c5:54:fa:08:8f:
9e:7b:f2:92:c6:74:a5:4f:d8:47:46:cc:e1:07:78:
2a:02:91:0c:90:c8:e8:a6:d0:18:62:3f:bf:2f:85:
bb:44:c5:61:ab:a3:b7:e7:c4:59:03:bc:d5:eb:87:
41:82:77:25:d1:5d:4a:43:37:42:96:ca:b8:3c:b6:
85:98:68:1b:99:23:f3:b0:38:91:2f:63:fd:b3:38:
1a:2e:86:d3:be:58:ad:a6:3b:04:2f:12:2e:21:b8:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2E:2D:7B:A2:98:9C:8A:9F:23:42:83:7E:AF:46:38:86:4B:D7:E9
X509v3 Authority Key Identifier:
keyid:AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:25:2f:f6:68:f4:09:2b:4d:f6:ca:3c:ba:60:02:b3:80:a8:
3b:f8:23:e5:d4:34:63:52:da:2a:31:08:03:40:83:ae:61:7d:
a6:88:0b:49:79:5d:54:e3:0b:d6:fd:49:84:22:0f:d7:47:9f:
c9:a5:60:1d:d1:f0:42:29:7c:85:9a:fb:8a:53:ba:fe:7b:2f:
36:c1:b2:b3:64:0f:56:39:45:42:79:82:1e:3b:9e:87:4c:0a:
75:f7:6c:62:71:83:26:ef:ff:c6:f6:5a:ba:74:2d:8b:b1:1b:
67:47:76:8c:37:02:85:61:94:54:ee:dc:6e:1a:1f:c6:04:50:
ba:41:89:2e:1e:45:17:5b:3f:6e:68:56:d7:96:e5:0b:be:1f:
f6:fc:bc:4e:22:02:0d:ec:58:56:dd:79:8f:cb:b1:67:8f:99:
fb:4f:a1:ee:08:5d:64:e6:1b:4b:ba:b0:90:52:fd:00:59:c9:
1e:9f:02:db:f0:19:63:f6:84:ce:0e:18:18:ca:0e:dd:36:01:
85:62:cd:51:b7:0b:ad:ac:28:21:6e:a5:73:a4:71:3f:af:07:
e4:e2:a6:f1:43:41:40:ac:4f:63:18:06:6a:77:13:68:f8:54:
85:69:f9:fe:0f:e8:b2:4f:a9:3e:97:a2:de:3d:6a:b9:46:2d:
04:ac:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:29:27 2025 by rpki-client