Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json)
Hash identifier: teXGiF118m1X5PzhnSJKpVA07nt39rfxgGdivGb03WQ=
Subject key identifier: 08:3F:31:A3:4E:9C:61:D7:82:BE:A6:6D:3C:70:57:25:48:C1:AA:67
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial: 0598
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
Manifest number: 0594
Signing time: Thu 30 Jan 2025 23:13:47 +0000
Manifest this update: Thu 30 Jan 2025 23:13:47 +0000
Manifest next update: Thu 06 Feb 2025 23:13:47 +0000
Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: zF9FjKG+UY6CDN636F/0tmd8CIqXY+7jItIr4bUnGNs=)
2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: ei3bKZ/cpLIRgTqV0pdjcmnxhOkz7g6PWIVeDuQtGq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Validity
Not Before: Jan 30 23:13:47 2025 GMT
Not After : Feb 6 23:13:47 2025 GMT
Subject: CN=679c07ab-b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:8b:a8:95:1b:5e:9b:d0:58:a5:4f:68:ff:
ff:cf:8c:9b:29:e5:bc:a4:39:d7:5c:28:8c:af:2c:
bf:06:48:3f:32:42:a0:af:8f:b6:27:fd:b1:67:36:
28:37:bb:35:e4:ad:df:49:6b:6c:89:07:7a:9e:66:
06:f8:02:e5:40:b4:8f:b2:33:de:7e:c3:81:9a:50:
66:59:7a:b3:64:6e:79:63:cf:42:a3:f5:82:ea:d7:
cc:4f:9c:40:14:59:88:84:a4:68:07:9c:b5:97:c0:
29:b1:fa:7c:e5:78:5e:21:58:92:91:a8:d9:4b:4c:
3c:1e:76:13:0f:0a:f5:07:39:60:3b:c7:4c:cc:72:
1c:e3:4b:c4:ef:08:98:62:a8:cf:f0:ec:f7:03:ae:
b8:99:8c:12:6e:7e:7a:b7:1d:a8:e8:85:b1:9b:18:
3d:03:48:74:7b:48:68:77:d6:1f:d2:25:8e:46:cc:
8d:76:45:4a:7d:1b:dc:7f:0a:ae:04:5c:87:be:4c:
78:77:ad:48:89:18:79:b2:db:bf:eb:37:d2:af:f2:
2f:fe:23:90:b9:c8:de:83:d9:8b:ee:fb:b4:c5:8a:
0f:64:17:6b:9f:16:21:3d:43:e3:86:c7:aa:6b:a5:
88:e3:33:7a:2b:c5:e0:43:b7:99:b7:dd:30:9b:27:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:31:A3:4E:9C:61:D7:82:BE:A6:6D:3C:70:57:25:48:C1:AA:67
X509v3 Authority Key Identifier:
keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:2e:9d:99:6f:8c:14:70:98:76:77:7f:22:93:38:7e:d1:2e:
54:58:6f:2c:3c:c5:35:52:ee:79:8a:51:0c:8c:8c:da:69:94:
72:b8:61:93:6b:ed:c6:a5:b5:87:d1:fb:51:29:cb:4c:86:b3:
5f:1b:41:93:76:2d:81:f6:21:be:a6:83:26:be:c9:3a:7c:b2:
a9:d5:28:e2:34:57:0c:f3:25:83:d9:77:b3:93:58:23:ff:27:
0f:d3:15:f9:93:e5:b3:fa:38:7a:3e:fb:57:c1:4b:6b:c3:5a:
96:d7:d8:28:f6:e1:10:49:f7:91:20:68:4f:fd:4d:68:36:9b:
45:86:52:e3:54:b2:84:9a:bd:2c:dc:5f:8b:4e:36:94:30:4f:
b9:3d:2e:28:94:63:17:10:d0:5e:d7:f3:85:a1:58:2d:09:7c:
8a:fb:13:7e:9b:cc:72:93:a0:ad:48:60:62:c4:2e:cf:66:f5:
34:f0:27:91:a2:f0:4c:6c:a8:e5:58:44:f5:8a:89:ef:41:1b:
ae:3a:24:79:4f:b1:9f:59:fa:f8:c4:80:49:90:ca:9a:93:fa:
f8:a9:8a:1b:ba:ed:23:e2:28:ef:49:7a:ee:e2:22:01:c6:3a:
d0:b6:dc:bd:d2:d5:5b:e0:32:c5:ab:14:b8:cd:a2:b9:1d:aa:
6c:2a:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:32 2025 by rpki-client