Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json)
Hash identifier: W6OorNh4N5vsqy1WpHd6AlkXJ85DLVn5EUgypxt7pXs=
Subject key identifier: 30:EB:12:56:0A:24:7B:39:90:24:2B:39:3A:46:D7:5A:05:10:05:EA
Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
Manifest number: 01C0
Signing time: Fri 31 Jan 2025 02:20:57 +0000
Manifest this update: Fri 31 Jan 2025 02:20:56 +0000
Manifest next update: Fri 07 Feb 2025 02:20:56 +0000
Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: i988/RzjFt9rUAEvoQuJl1PZn5mKaOUExmwRQTkfqN4=)
2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Validity
Not Before: Jan 31 02:20:56 2025 GMT
Not After : Feb 7 02:20:56 2025 GMT
Subject: CN=679c3389-d68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:04:f8:58:84:0f:64:58:e0:9f:3f:18:4f:
88:55:21:69:9f:54:0b:f4:03:93:d2:1a:b8:88:d3:
f7:6a:8e:12:82:8c:37:e6:c3:85:61:18:3d:04:89:
ee:06:51:90:b8:66:7e:0b:82:1a:8b:cb:47:45:79:
60:1e:94:7f:a5:4b:91:d0:af:f7:e9:8d:ee:67:59:
ac:8a:47:07:04:75:92:5d:0d:7f:75:e0:d0:5b:3f:
9f:95:cf:5b:91:db:ce:ce:e0:ce:08:eb:a7:1f:16:
e2:b9:e2:87:06:d9:c5:8c:a0:72:44:f0:31:31:34:
0d:92:0c:21:39:f8:dc:3c:3b:02:bf:83:b2:fb:cf:
93:bb:64:34:bd:4e:9f:95:44:46:60:1a:a4:3d:3c:
df:7b:46:98:93:3f:73:04:75:c7:0f:5e:c3:9d:5d:
4e:69:76:d9:2f:ca:bd:5f:41:37:2c:d6:8d:c6:f9:
00:cb:bd:cd:27:a5:d4:bd:6f:59:aa:21:a8:f5:58:
d2:0b:65:7f:77:a2:9a:ea:a2:e9:40:2e:58:ea:e4:
67:48:fa:2d:87:aa:7f:51:02:62:0e:72:a4:c9:f9:
fe:f9:39:50:fd:df:c3:c8:ce:73:62:f0:e5:ac:63:
af:07:5e:fb:f8:71:07:bd:27:13:28:f2:b0:21:a9:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:12:56:0A:24:7B:39:90:24:2B:39:3A:46:D7:5A:05:10:05:EA
X509v3 Authority Key Identifier:
keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d6:c5:5a:98:0d:5c:e1:ce:3a:04:de:17:21:ef:37:78:b5:
13:fc:8f:5a:44:c1:cb:42:dc:39:9c:85:16:11:66:a6:26:02:
41:1e:68:ea:73:2c:9e:3f:29:eb:4d:0e:03:72:b7:16:31:e3:
84:ef:29:8d:3d:de:a1:61:52:e9:87:e3:d8:25:9d:b2:27:94:
3b:ae:aa:12:49:26:44:5c:24:e4:e0:69:e9:3e:f8:ac:d4:e4:
09:a1:55:01:6c:2e:39:99:fc:27:f4:86:c8:25:e8:bc:60:65:
d1:75:cd:26:7e:fa:60:18:cf:8c:79:3b:1b:47:df:3b:2b:f2:
9c:84:d1:36:04:9d:29:a1:86:31:68:98:97:5c:a6:d6:74:1a:
0f:dc:1c:d9:dc:93:b8:24:1d:1e:0b:8e:50:d0:44:91:8f:b5:
21:c1:d3:b8:ed:39:aa:16:40:d0:b4:60:f3:61:4c:b2:8c:3f:
4f:31:e2:b7:68:23:fa:8a:76:12:91:ce:c9:f8:de:90:e3:8e:
13:df:42:9c:d9:1e:fa:d1:80:55:e8:95:45:7f:65:8a:9f:6b:
75:46:36:ac:10:88:bc:20:1d:6a:cf:5a:fd:65:55:71:92:09:
34:14:47:6a:a0:8c:82:e0:66:65:60:ed:12:15:3a:bf:83:e4:
7c:db:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:35:58 2025 by rpki-client