Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier: U3ts1DSAjG3FbMWJw/7QjS0u+6z3IfnhJki54e1yAUE=
Subject key identifier: C9:6C:6C:FA:C1:E9:58:21:AA:EA:DD:35:9F:6A:AB:34:A4:83:8D:86
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial: 0BC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number: 0BBB
Signing time: Fri 31 Jan 2025 18:44:24 +0000
Manifest this update: Fri 31 Jan 2025 18:44:24 +0000
Manifest next update: Fri 07 Feb 2025 18:44:24 +0000
Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: LMP0WO299mvpwrt0fjnQt5fFdM21lmWb5NgQHSKxfWI=)
2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Validity
Not Before: Jan 31 18:44:24 2025 GMT
Not After : Feb 7 18:44:24 2025 GMT
Subject: CN=679d1a08-59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:94:31:06:f1:db:69:b5:39:5a:ed:ff:2a:
30:0d:37:ed:68:a0:da:43:34:f3:3d:7b:e1:21:ed:
a8:9a:5c:86:e5:e1:6f:1b:6f:fe:85:9a:30:2c:25:
1b:15:a4:a2:0c:f1:c1:1b:3c:4d:c5:97:71:31:71:
5c:c8:c8:0e:17:f4:12:68:3e:61:58:c9:f9:e6:43:
e5:e3:7f:89:27:7b:d2:2a:ec:a2:fc:6e:ff:26:12:
f5:10:46:52:08:b3:37:9f:8b:ce:b7:cb:84:99:e1:
49:42:58:8d:23:90:38:24:4e:c2:de:fa:bf:bf:47:
fb:6a:e2:79:b2:81:0c:b9:8e:c8:8b:fd:2b:59:67:
5c:23:c3:ac:e2:b2:a6:96:82:7e:e4:c4:8c:95:16:
93:80:b2:bc:ab:44:ab:98:b1:0c:e5:7b:ff:2a:69:
75:a0:17:4b:42:0d:61:ad:b1:24:c7:8f:8c:72:34:
7c:96:4e:78:41:f8:78:b9:27:08:3b:f3:3a:ec:de:
48:1e:40:cb:33:8f:20:b5:76:7e:10:02:62:e5:3b:
0e:02:88:e2:b0:9a:3c:f2:dd:24:a0:96:97:93:9c:
46:45:f2:30:cd:55:6e:50:1f:af:88:ae:88:7c:62:
c4:79:7c:6c:68:0a:26:8f:5a:94:fe:bd:bd:37:69:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:6C:FA:C1:E9:58:21:AA:EA:DD:35:9F:6A:AB:34:A4:83:8D:86
X509v3 Authority Key Identifier:
keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:2c:e5:ae:c8:14:07:02:48:d6:df:4e:00:82:d3:ba:be:
4a:0d:0f:73:a8:e1:b9:f3:8f:55:64:d5:16:f7:75:dc:03:5f:
89:62:ea:c5:71:dc:c7:41:e3:bb:5b:78:96:e4:77:06:79:1e:
e9:3c:ed:66:02:e3:8c:1c:c2:ae:cf:e0:18:a1:e3:ea:8e:06:
f9:fa:5a:b3:a3:d0:dd:19:f2:24:95:19:68:12:d1:d5:71:f1:
86:61:9e:af:93:e8:73:d4:6a:36:1a:97:a9:d4:7e:de:95:dc:
c3:ca:0f:81:18:9f:06:24:c1:5a:f0:7f:bf:eb:86:03:48:e6:
68:45:f3:7a:71:97:e6:1b:dd:b5:7b:0d:64:c0:b3:bd:79:18:
96:90:75:cd:2e:f7:82:d4:e4:6e:6a:62:a1:6a:41:f7:5e:4e:
60:c7:d5:56:52:20:29:34:bd:4e:63:e2:68:db:59:cf:73:60:
27:1b:e6:e4:ec:64:83:02:d3:97:30:3c:91:90:77:3f:ff:dd:
39:24:22:d3:3a:26:0f:4e:01:5e:95:3e:d0:13:af:e3:c6:f2:
d7:29:a3:7e:67:10:6d:0d:c8:67:b7:7d:52:09:bb:5f:0a:94:
65:4d:9d:66:5d:38:08:9e:a8:9e:3d:8a:6e:1e:81:cc:41:66:
79:0f:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:55 2025 by rpki-client