Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json)
Hash identifier: gQo3XuuNPBvQtNo38y9pa2haGXsW6Azcr+06ThDhJdg=
Subject key identifier: 91:6E:44:0A:29:69:79:E5:C7:30:2B:FA:88:58:05:8E:8F:8B:18:9F
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
Manifest number: 01BC
Signing time: Fri 31 Jan 2025 02:24:06 +0000
Manifest this update: Fri 31 Jan 2025 02:24:05 +0000
Manifest next update: Fri 07 Feb 2025 02:24:05 +0000
Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: CoVRvzrAJ2dE2I6crcKySSFHdRCNUH2NNYPxikB1k+Q=)
2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=)
3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Validity
Not Before: Jan 31 02:24:05 2025 GMT
Not After : Feb 7 02:24:05 2025 GMT
Subject: CN=679c3446-04cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:d1:6c:0f:93:f8:b5:72:61:68:48:55:ed:
66:ad:93:ba:cf:80:e4:fe:4a:06:2c:99:a7:80:1b:
34:44:2a:7f:48:4c:e2:ed:75:22:f5:d9:b8:e4:b3:
2b:f5:9c:1d:cf:ca:90:89:ec:92:a0:a5:69:fb:6f:
b9:af:c4:ce:27:2f:b9:fd:14:69:20:5b:58:c8:31:
45:60:5c:cd:4f:b6:ab:ba:f1:24:6c:e8:20:04:59:
ef:a4:c3:bc:2b:d8:81:ea:99:43:87:f7:04:7d:b2:
38:ae:75:dc:84:10:d1:0c:08:2d:8c:b6:f2:e1:74:
bd:53:ec:de:89:1e:c6:a3:5d:b0:a4:ef:7e:79:11:
da:c5:5a:ad:1f:9e:a3:ad:6d:95:cd:6c:b0:39:29:
e8:f5:a9:b0:a2:c6:07:61:fd:02:10:2a:1c:36:19:
6e:8b:1e:7d:d7:96:44:52:2a:1a:02:31:ae:fa:6a:
e8:cd:bb:4d:49:8c:00:72:0b:eb:33:6a:0b:02:ca:
28:81:e9:0d:1e:1b:06:8d:a3:cf:6d:aa:ed:c7:6f:
ab:a3:00:0b:91:23:19:bc:78:20:f9:b6:22:14:f0:
c8:4b:51:aa:7b:c4:de:d0:37:16:16:04:68:a7:a7:
bc:0f:00:0b:c7:71:bc:85:39:cc:81:41:e0:41:3c:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6E:44:0A:29:69:79:E5:C7:30:2B:FA:88:58:05:8E:8F:8B:18:9F
X509v3 Authority Key Identifier:
keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:65:d4:e5:08:38:cc:ed:55:97:02:20:2a:3f:66:c9:29:d4:
b7:10:22:95:bb:18:87:f5:85:c1:09:ca:27:02:4b:0c:0f:d9:
00:e2:5d:5d:f9:91:8a:e0:25:2b:82:ca:42:e3:35:af:2f:8c:
99:c8:72:80:2f:1b:a0:c5:0a:c3:52:40:76:21:c5:96:83:8b:
df:8d:1c:4a:fc:6e:8a:7f:52:54:e8:0d:9a:eb:86:72:3a:17:
62:72:31:98:90:8c:d7:c8:5e:c5:e3:60:fe:0a:ae:3c:f4:91:
a0:53:4c:f0:eb:26:b0:fc:95:8c:e7:42:71:63:81:5d:34:52:
bc:bb:68:80:1b:95:0d:af:06:b9:11:fa:fe:5f:7a:99:4f:b5:
b7:3f:06:70:03:89:43:6e:8e:aa:dd:56:d7:5e:29:58:e2:f6:
3b:d7:28:67:41:11:64:af:b5:ab:83:b6:1b:8e:8f:58:d0:71:
4a:53:67:6d:11:fd:8e:ce:bb:05:8a:8c:60:fc:50:da:22:8f:
c4:a2:db:42:f6:f5:86:85:4b:d3:f7:6b:73:de:72:74:3e:1d:
3f:05:0d:6a:45:a8:57:36:5f:ed:55:d0:e1:55:13:c9:fc:97:
95:a2:4d:f4:65:aa:04:3a:b8:01:0f:6c:56:08:04:3b:23:8d:
3d:b5:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:41 2025 by rpki-client