Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json)
Hash identifier: Xo7OVTemtz9Pm/AKTfUaBPpvtP5jNrsVvQeKJg+h+WY=
Subject key identifier: 16:02:1E:34:E9:E9:F5:97:2A:81:F8:10:0C:41:CC:94:37:7F:95:AE
Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
Manifest number: 13
Signing time: Fri 31 Jan 2025 07:04:45 +0000
Manifest this update: Fri 31 Jan 2025 07:04:44 +0000
Manifest next update: Fri 07 Feb 2025 07:04:44 +0000
Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: yk1eM03WWZadNKsSAWaphZvtZUz4nd6tM076Zht83Mw=)
2: 8C293C92C6AA11EF8BCD0A11C4F9AE02.roa (hash: MuD/wPLuVqCwHXluDzMMjr5sOZ3G8oyIiZ4H3JFgaA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Validity
Not Before: Jan 31 07:04:44 2025 GMT
Not After : Feb 7 07:04:44 2025 GMT
Subject: CN=679c760d-e1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:fc:16:4e:c2:19:51:6d:8c:fc:3c:57:8e:
70:c2:89:06:bc:1f:32:85:ac:06:76:25:af:2a:f4:
d1:90:85:9c:07:f6:b1:14:cc:8d:d5:fa:2c:72:ed:
46:b1:cb:2f:1c:74:50:f2:4d:14:f4:4c:0e:83:d3:
be:21:85:37:07:72:58:a0:78:04:62:a8:b2:da:fe:
c0:67:68:78:11:ff:0b:1f:aa:60:2d:61:6b:fb:5d:
b3:aa:77:dd:24:14:a9:d1:25:e8:83:35:ab:4a:9f:
94:4f:15:b9:14:d0:52:58:af:66:de:d1:ad:6f:4d:
5a:ac:e5:ed:60:96:4f:cb:50:00:26:12:a9:43:c2:
bf:90:d1:6f:05:2d:27:9f:49:af:a0:29:4e:9d:fe:
31:ac:86:6f:9e:ae:76:5f:64:9b:d7:f7:9d:cd:8e:
14:a8:79:4d:1c:e7:f8:23:bd:e5:50:8a:77:f2:3c:
35:9d:84:ab:46:40:3f:74:30:ce:da:49:ef:44:f6:
7f:bb:b7:af:07:f8:c8:8f:e3:0c:63:df:a9:6b:67:
8e:0f:09:f9:19:fe:86:16:45:fc:bf:24:a5:7c:a0:
fa:31:ce:f0:c5:a7:0f:0c:3f:12:c3:f6:39:72:12:
02:1d:f2:4f:a6:dc:c5:d7:d2:0b:f6:dc:c6:85:37:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:1E:34:E9:E9:F5:97:2A:81:F8:10:0C:41:CC:94:37:7F:95:AE
X509v3 Authority Key Identifier:
keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fd:a1:49:a4:ac:8b:85:f1:0e:00:f1:1b:05:54:61:b7:46:
b2:83:25:5e:13:e3:52:be:f6:38:26:43:6d:85:1a:e0:9c:1d:
f3:61:22:71:91:9e:3f:6b:85:1a:54:9c:93:1f:1e:eb:e6:1f:
aa:e7:ee:d4:84:00:29:b9:70:f4:7d:bc:1f:05:89:c9:c9:cb:
b0:d2:1d:68:7c:cb:c2:3d:c2:47:37:a3:36:85:a1:26:16:5e:
08:f6:d2:53:07:2b:7a:95:91:78:74:c7:57:9f:01:7d:70:a1:
78:c8:29:db:67:3e:5b:2a:fb:fd:ae:c1:c7:96:e4:be:54:fa:
01:3a:d8:e9:7b:73:4e:90:21:3d:7a:d3:50:61:fe:36:38:1c:
47:bd:66:6d:4e:60:54:d3:ef:2f:d9:3e:b4:69:8f:20:f3:40:
3b:60:bb:26:b0:85:50:27:40:a0:db:92:7f:27:18:5a:d8:ad:
50:ec:6f:d2:02:91:c8:de:74:87:7e:ef:d1:c2:dc:3b:51:29:
94:e5:0d:04:32:11:e6:cc:43:aa:2c:89:c5:2e:09:38:52:1a:
a6:1e:c3:ce:09:6e:f9:94:ce:ac:62:ec:1b:b0:fd:4e:b2:9a:
dd:d8:8d:fb:e9:bf:99:a6:58:99:ca:82:cf:03:65:87:d5:74:
41:c8:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:56 2025 by rpki-client