Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json)
Hash identifier: 8HurOoo9+9wGirId7RCs55Vd59V9U8ooYtPlGW3jCwk=
Subject key identifier: 92:86:42:8F:8B:6C:80:75:4E:B9:10:A1:CB:4D:04:C1:00:08:6B:0F
Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Certificate serial: 3443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
Manifest number: 3443
Signing time: Fri 31 Jan 2025 15:11:46 +0000
Manifest this update: Fri 31 Jan 2025 15:11:45 +0000
Manifest next update: Fri 07 Feb 2025 15:11:45 +0000
Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: bcvpRfpsUdl8fz3vRF+Y8sjF2fYyGT4Iob4IFznkxnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13379 (0x3443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Validity
Not Before: Jan 31 15:11:45 2025 GMT
Not After : Feb 7 15:11:45 2025 GMT
Subject: CN=679ce832-3346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:9f:f0:f5:0a:5d:94:29:0c:b3:7c:89:07:
3b:57:2f:e4:57:b0:5b:f4:4f:7a:c5:e7:bc:66:68:
0c:f4:8f:50:e4:25:ee:90:19:32:d4:a9:cd:48:c6:
34:1e:0a:47:ac:44:3a:a9:1e:be:d5:b9:13:fe:1d:
e7:a6:b6:62:9c:b0:8d:20:0e:fe:20:1c:4e:dd:6d:
1f:58:1f:ad:64:bb:11:9a:90:9e:fa:39:81:0a:e6:
25:fb:5c:3f:0d:b6:96:92:f7:2b:d2:b9:18:7d:76:
a4:93:2d:a4:d1:e3:5c:e2:35:91:e8:59:40:92:97:
82:6c:0a:f3:fa:0a:05:1b:c9:cd:2a:44:c2:d7:b0:
72:8b:58:fb:71:d8:c3:7f:98:6c:f4:f5:30:28:36:
9c:c8:80:d1:b9:c5:a0:4b:2f:d6:c9:3e:b0:6d:c2:
6e:e9:0c:43:be:96:b4:24:c7:ae:a5:de:d9:20:d8:
b1:9a:34:fb:12:e1:66:02:98:3a:88:7f:62:2f:ef:
20:3b:d7:9b:7a:8a:00:33:22:a7:c8:d2:88:2e:13:
35:c5:2d:0f:95:fb:bf:f6:06:63:90:2e:bf:0b:28:
4b:1e:10:f7:2d:65:97:c8:4b:a1:ee:45:46:73:77:
d8:65:0f:f1:72:0b:bd:5c:d1:49:9f:0d:99:f5:dc:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:42:8F:8B:6C:80:75:4E:B9:10:A1:CB:4D:04:C1:00:08:6B:0F
X509v3 Authority Key Identifier:
keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d5:33:c3:aa:e1:3e:32:4f:d6:36:e4:cc:fd:7e:32:0b:e5:
99:23:7d:ee:18:05:75:ad:af:e2:1e:3c:4e:63:07:6b:a7:66:
66:e5:ac:f9:61:24:a6:43:fb:c8:4d:5a:53:cb:67:bf:f8:25:
8c:f8:b6:50:f9:34:c8:87:60:3c:8a:1c:d8:77:47:ee:42:98:
6c:6a:8a:df:32:ba:c4:5d:18:f3:27:e8:07:0f:4f:e0:40:40:
06:69:68:43:d1:37:b1:15:35:f7:0c:5a:1f:a6:04:44:bc:a3:
0e:ea:3a:48:91:f5:d8:66:75:8a:05:8d:77:66:9e:ed:b1:33:
b3:08:d8:99:44:3b:cd:6a:90:c8:be:49:25:84:fa:f5:aa:88:
ec:0d:50:81:ee:c1:75:d5:bd:da:88:6e:33:94:71:64:a9:81:
ed:4a:f1:7f:6e:a2:15:d0:13:b2:e0:1c:52:32:c3:18:85:72:
ba:6c:ed:89:de:21:aa:72:4e:00:08:a9:4c:98:26:10:5c:66:
82:ad:22:49:9e:d7:30:12:c5:fd:e1:f5:ba:0e:53:0e:d3:2d:
79:e5:7e:82:eb:b2:f5:41:f3:a1:e7:95:42:e1:4d:fe:1b:19:
e5:ba:b4:6d:11:ad:db:98:77:6d:f0:ce:04:04:71:52:8e:00:
54:71:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:51 2025 by rpki-client