Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json)
Hash identifier: ZRAof+XyckMSuWzLDzicijKQX+4SZc9L1+iwAho5zIE=
Subject key identifier: D4:BE:17:6F:8E:ED:52:32:02:44:AE:1F:6E:00:D1:E8:A9:0B:B6:CE
Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
Manifest number: 0179
Signing time: Fri 31 Jan 2025 03:01:01 +0000
Manifest this update: Fri 31 Jan 2025 03:01:01 +0000
Manifest next update: Fri 07 Feb 2025 03:01:01 +0000
Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: D9iJ2tXEYgp/QOZ5mYFuFm0FWXplIJXV9C8Tv8sIMwQ=)
2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: zju4K/C7v4F1RhA6Xn7FNtNsJOBeW7+E9YT9HJNBEfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Validity
Not Before: Jan 31 03:01:01 2025 GMT
Not After : Feb 7 03:01:01 2025 GMT
Subject: CN=679c3ced-6952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:d2:65:96:c1:42:f1:52:ec:19:16:d4:fd:
bf:4e:e4:55:06:cc:58:65:92:99:47:d3:17:59:84:
77:e5:f6:64:c6:87:0d:53:2c:2e:f0:4e:51:0c:8b:
5d:5e:08:48:f8:3c:b6:c2:1f:d5:b5:53:38:1f:87:
1c:fb:04:a2:74:c1:7d:d0:d0:ff:a4:99:14:23:b0:
8f:6e:54:fb:30:83:c0:8e:04:6e:f5:e0:aa:3b:c9:
fe:d5:ca:41:3c:f4:7e:cd:fa:0c:ae:5c:2e:90:ea:
15:07:0d:12:a2:a4:75:16:57:3d:ca:65:1e:c9:18:
10:e3:96:19:e3:a6:50:1d:d4:3b:2b:f4:1a:b6:4a:
99:66:b7:15:d5:64:30:95:95:56:42:24:c7:4a:fa:
15:c1:c2:cc:8c:f4:b0:5a:52:85:19:9d:3e:d6:e0:
19:ff:38:dd:d4:8e:25:99:ae:f2:24:22:c5:70:02:
56:35:a5:26:60:14:67:82:32:52:94:bf:f6:92:ec:
07:5c:53:55:44:03:7f:29:8a:42:5e:03:1e:f4:62:
b7:23:e8:88:0f:c4:d4:63:91:53:f4:ee:8c:fe:fe:
78:35:98:43:45:b6:9c:19:f7:64:2e:84:7d:5f:13:
4d:53:4d:66:cb:32:2c:f1:37:ac:3a:63:a7:9f:14:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:17:6F:8E:ED:52:32:02:44:AE:1F:6E:00:D1:E8:A9:0B:B6:CE
X509v3 Authority Key Identifier:
keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:46:40:f4:8e:cb:c3:65:b6:1b:a9:14:39:47:52:0a:0c:0f:
3d:ba:57:bb:1d:6b:34:95:b3:f3:08:61:a5:a7:d7:f4:11:03:
f1:b6:30:e3:a0:dd:05:fc:cd:62:cb:4e:8b:de:16:1d:0c:12:
33:f2:8a:08:99:d6:a0:f0:f9:55:0c:60:36:25:78:06:56:ed:
61:f9:eb:94:30:bc:dd:b1:ec:4d:b7:78:8d:bc:2e:bc:27:14:
40:e6:80:da:0e:ed:db:b1:6b:b8:a9:27:67:ed:b1:6d:a8:9a:
b6:71:98:1c:f7:4e:a4:2d:29:ef:4a:25:bf:bd:ea:61:ac:ec:
86:3b:54:60:4f:25:19:0f:20:44:f6:0f:1b:fe:9c:75:74:43:
69:03:0e:a0:e6:ea:46:f9:2f:12:40:9f:fd:21:60:94:1d:99:
66:26:c9:d7:ef:8a:aa:89:4f:5f:1d:7f:37:33:f7:0c:f2:92:
1a:eb:33:d9:b3:fa:84:07:6d:df:e7:ac:4b:fe:50:6a:81:cc:
32:2e:ae:df:8c:f6:7e:35:d0:a9:44:48:51:47:05:65:5a:07:
98:28:84:ef:fc:02:64:10:27:e9:af:9d:4d:97:e0:46:63:7d:
9a:7a:d0:c4:07:1b:25:fe:1e:56:06:0e:6d:7a:81:be:4a:2b:
6c:3e:99:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:28 2025 by rpki-client