Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json)
Hash identifier: iyflf2xH4B3mCaQuTTCd06VYoTLVJalkISfZzZzzxDM=
Subject key identifier: 1F:04:EA:34:0B:17:EB:BE:B2:1A:FD:00:4E:38:89:F4:27:D3:27:FA
Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
Manifest number: 0188
Signing time: Fri 31 Jan 2025 03:09:45 +0000
Manifest this update: Fri 31 Jan 2025 03:09:44 +0000
Manifest next update: Fri 07 Feb 2025 03:09:44 +0000
Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: irbY5vrC3iYWA1ou2ts+JzlxOFgCuJ3q/nzZ9iIcFMo=)
2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: Zh/Tjd/SF+RsN/kVNLHh3aj6ikiB7pm8zxWkTBX3Oxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Validity
Not Before: Jan 31 03:09:44 2025 GMT
Not After : Feb 7 03:09:44 2025 GMT
Subject: CN=679c3ef8-ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:ce:4b:ee:f3:eb:65:c0:8a:2d:4e:1b:8a:
c7:52:15:b4:23:db:e6:79:cf:50:5e:37:08:f0:45:
3e:87:1d:90:6b:a5:8e:ce:f1:25:43:9d:5e:7c:0e:
ef:6d:5b:dd:4c:cb:80:96:ce:4b:7f:b2:f6:16:49:
ac:42:70:66:8e:f6:2e:02:22:2c:25:c0:f1:5b:be:
bf:1f:d6:dc:b9:b5:92:1a:f4:59:6c:06:c8:7a:32:
8c:25:cc:8a:56:63:68:97:98:a7:6e:76:ff:15:c3:
53:65:5f:e5:2f:bd:f4:3e:be:f1:70:9d:8d:55:d1:
86:f6:6b:06:87:9a:8b:96:91:94:1f:b5:10:5d:ce:
27:b0:da:25:84:23:a8:2a:b6:c6:18:dd:0d:e3:3e:
fe:a0:f2:3a:ad:29:0d:cd:85:a8:ef:4b:35:82:32:
80:5b:b3:35:7f:b4:6a:a8:58:4a:81:20:48:b6:2c:
22:f4:20:27:32:f1:67:8e:43:7d:3a:6a:63:8e:84:
35:92:80:08:17:01:29:c8:31:38:ec:51:93:bb:cc:
55:4d:63:21:e2:c2:11:e4:5b:ac:59:04:b1:fd:e9:
5f:a1:3a:a6:07:9c:3a:36:71:bc:7a:d1:3d:b4:0a:
33:97:8a:5c:37:0c:1b:23:2f:51:68:96:2c:c8:37:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:04:EA:34:0B:17:EB:BE:B2:1A:FD:00:4E:38:89:F4:27:D3:27:FA
X509v3 Authority Key Identifier:
keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:3b:f9:cd:1f:28:d4:5f:a8:82:6c:a1:4c:b7:89:5e:2e:
82:55:7d:dd:b8:b1:0a:72:bc:af:a2:30:b5:e0:d0:66:a3:c1:
4d:e2:c1:b4:3e:a0:0c:16:de:3d:69:41:36:80:89:cc:f7:d0:
4d:1d:98:7c:dc:57:63:55:72:e0:87:55:d0:e7:25:5c:f4:f1:
7f:c8:f7:44:89:4b:48:89:ce:70:c9:6c:87:5c:21:6b:2a:1a:
01:40:da:c3:3b:43:f6:54:d7:cb:bb:e7:22:82:7b:56:9e:b0:
e5:c9:c9:f0:99:b8:71:79:73:95:72:0d:fb:9b:04:a3:9b:32:
84:c5:47:34:b1:a0:e5:c5:42:00:f2:a5:8b:db:33:5c:ea:e5:
c6:e2:5a:8c:8f:82:31:7d:62:b8:a7:bc:e7:8d:46:5a:0a:d8:
b7:79:67:4a:eb:c5:61:23:d4:1d:32:7a:2a:c3:fb:2a:65:f5:
5b:ec:78:56:49:91:b1:9f:e7:de:21:59:19:91:79:5d:de:36:
7d:48:d8:ca:f5:89:c6:5b:cb:b7:4a:ad:55:5d:df:50:bf:b3:
c9:eb:e7:e3:fe:3e:44:85:6f:a9:a5:89:fd:d9:5e:67:eb:b9:
20:ee:8d:cf:f9:27:57:20:d5:c2:23:4d:14:14:5e:61:1e:a4:
ec:32:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:35 2025 by rpki-client