Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
File: -Q4hD858Z6Lysy3hTusFoEsNEOE.mft (raw, json)
Hash identifier: azXcPcQPaQvtkmT4hqXhByeahFQY6d2LsqC6KtWj7ZQ=
Subject key identifier: 1A:F0:5A:04:1C:44:CC:73:97:7B:DC:68:C6:D7:4A:56:2D:15:D1:3B
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
Manifest number: 010B
Signing time: Fri 31 Jan 2025 04:05:27 +0000
Manifest this update: Fri 31 Jan 2025 04:05:26 +0000
Manifest next update: Fri 07 Feb 2025 04:05:26 +0000
Files and hashes: 1: -Q4hD858Z6Lysy3hTusFoEsNEOE.crl (hash: 36kJsErRinR4R5ttefyzWosA6EYloDwong/q5RrJxrQ=)
2: A99E5658488011EE8113A766C4F9AE02.roa (hash: E13lbyCe1pFntvaZ0/XCP2JTKYjD9ZQaJQDpf4OhMJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Validity
Not Before: Jan 31 04:05:26 2025 GMT
Not After : Feb 7 04:05:26 2025 GMT
Subject: CN=679c4c06-cc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:b3:bd:5c:f1:b5:33:ce:38:69:2b:0b:30:
d8:c2:d2:ee:a6:fb:0c:43:0d:9d:a6:bd:4b:23:9a:
7e:fc:ca:b3:69:d4:26:bc:14:4e:ba:c9:61:3e:b6:
c6:8f:af:dd:61:8f:ab:49:c3:f2:ae:62:29:2c:b0:
ba:21:80:aa:82:8b:a3:06:04:d6:93:86:1e:0e:00:
26:d2:3b:46:b9:e9:51:df:17:dc:2d:04:63:f1:6b:
5d:88:04:55:33:5f:6b:f1:d7:c1:70:5a:51:40:98:
8d:e3:cd:b2:74:e0:7a:b2:6d:9e:04:d9:b5:d9:fe:
88:60:a1:b7:03:bf:c0:dd:42:82:e2:78:08:37:b1:
d5:41:aa:bc:52:63:90:c3:1b:1e:fa:99:ac:7c:02:
f2:3f:e8:57:ed:12:cb:52:ef:09:05:1b:97:1b:ca:
dd:3f:ce:03:94:07:52:6c:15:56:6d:d7:f5:23:40:
59:b0:1c:c8:6b:f3:fd:26:0e:e6:29:7b:22:0b:35:
12:a8:bf:0b:f9:21:0f:43:52:05:d1:78:2c:33:e3:
de:60:75:02:03:b8:1f:cb:1e:fd:d1:7f:1e:30:21:
c5:44:7e:13:90:0e:b9:39:a4:54:b5:be:8e:05:60:
ae:1b:a3:7b:ca:7e:8b:42:f2:01:8d:2b:83:31:54:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:5A:04:1C:44:CC:73:97:7B:DC:68:C6:D7:4A:56:2D:15:D1:3B
X509v3 Authority Key Identifier:
keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:37:64:cb:7b:4e:f2:cf:dd:7d:ca:80:97:f0:f2:80:19:12:
be:af:b2:bf:8b:95:64:c8:a3:3f:06:1b:c9:c2:91:16:c6:c7:
1e:9d:c2:d5:16:60:62:46:44:78:04:0c:5c:e0:50:1c:f7:65:
ee:bc:d9:76:3c:73:80:22:13:ed:50:47:c8:33:af:e3:6c:e5:
25:32:99:95:be:b6:90:c2:9f:1a:e4:e2:d0:7c:eb:a1:2e:05:
57:a3:6d:b6:83:60:60:bd:c6:ca:fa:bf:4d:cb:22:c3:1a:93:
cf:ec:74:cd:e3:55:e6:19:e8:c5:7b:fb:d2:54:b4:ad:7e:c2:
da:e7:be:51:10:cc:ff:67:cf:af:ea:34:d3:0a:92:ba:d7:bd:
00:2b:1d:ec:45:47:07:79:78:f3:fc:5d:72:ef:3a:f2:30:e1:
48:0c:4b:da:46:af:32:31:f0:ef:09:65:79:db:e4:be:da:05:
27:ed:29:d8:97:a8:a1:f2:98:5f:80:1b:e7:19:11:3f:73:e7:
14:8e:0a:14:7a:05:ee:ae:4b:da:7a:64:ff:a4:46:88:cd:cb:
3e:e1:b4:31:c7:a5:89:2a:36:0f:ec:f4:71:a8:28:9f:fb:0d:
ca:81:33:8c:61:5d:fc:43:5c:42:b7:88:d5:38:4b:b9:dc:b6:
89:98:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:18 2025 by rpki-client