Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json)
Hash identifier: IJDLKKWltWxj7D4CGDsPquN9gv+1roXK/Npw+tLimmc=
Subject key identifier: C3:C1:B0:E9:AE:46:FD:C1:0D:46:8A:3E:11:AA:6F:F6:24:9C:91:1B
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
Manifest number: 01B7
Signing time: Fri 31 Jan 2025 02:26:25 +0000
Manifest this update: Fri 31 Jan 2025 02:26:25 +0000
Manifest next update: Fri 07 Feb 2025 02:26:25 +0000
Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: 3qfN1w1hMbqQhP5EA9XaYr9pJ7ZDUtxwG3aIOFHIDZo=)
2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=)
3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Validity
Not Before: Jan 31 02:26:25 2025 GMT
Not After : Feb 7 02:26:25 2025 GMT
Subject: CN=679c34d1-10f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:34:46:ff:bd:c6:c0:f7:71:5f:d9:1a:4d:76:
7a:66:f3:a5:40:72:bc:3a:8c:73:4a:08:08:39:e2:
e1:be:3d:e9:3d:01:1f:ec:a5:86:95:a9:a6:a7:b6:
95:83:c6:29:82:53:20:e8:bb:3e:52:ac:87:98:3c:
6b:27:78:bf:cb:95:47:d4:0c:20:0f:70:37:40:0b:
c5:41:ba:42:80:00:9a:b9:43:8e:b6:a9:f6:ad:91:
9a:b2:29:6e:42:89:3e:4f:1f:b0:64:c6:dd:64:47:
7c:41:fe:71:5d:49:83:05:86:83:c6:31:c5:85:29:
a7:75:a3:30:18:6d:3d:66:ed:58:f8:b8:a9:8a:bc:
8e:e6:24:77:99:d6:49:c5:09:e2:a6:b0:b3:b6:35:
04:72:81:1a:1c:bf:e6:fd:33:92:6b:b1:5f:0f:89:
f1:6b:80:15:bd:0c:af:ce:fc:f8:58:cb:d2:a5:ee:
41:23:7a:ec:6f:da:04:85:22:f6:ee:54:f0:b1:d4:
07:9c:87:df:e5:a6:bd:22:20:da:5d:ce:c3:9e:8d:
00:1a:fb:83:3b:2f:a4:5e:8a:28:56:c8:af:10:09:
ac:a6:0a:fa:05:9f:38:9b:96:10:02:e2:cb:0a:32:
6b:e7:04:44:ae:f9:f1:a5:27:9a:64:3a:e7:cb:1a:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C1:B0:E9:AE:46:FD:C1:0D:46:8A:3E:11:AA:6F:F6:24:9C:91:1B
X509v3 Authority Key Identifier:
keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:00:16:d3:2d:72:49:0b:10:60:ab:7c:28:6f:a5:30:01:0c:
0c:39:23:30:7e:d3:3c:af:1a:f0:63:d6:19:39:1a:ff:80:41:
37:d1:6f:ba:0a:cd:34:ca:68:98:a7:ce:3e:85:01:d9:e2:43:
ad:d6:dd:c5:00:3f:ad:5f:39:3a:6d:92:a5:ea:54:07:7e:28:
2b:23:61:75:f4:33:48:20:31:5e:09:6a:87:ea:01:18:f2:b8:
ef:04:ef:af:f1:a0:18:3a:df:dd:d4:37:19:c8:9b:e6:ca:48:
75:e6:8b:92:c3:6e:77:79:9c:d9:7e:19:3f:e3:dc:cc:2b:53:
d8:55:e0:0c:12:b7:18:35:66:47:98:16:f3:ba:e7:0b:7d:19:
9c:f0:bc:fa:79:d3:84:ec:af:2a:cd:6e:d1:69:d5:6a:30:f1:
4e:b4:df:a9:b2:7e:18:b2:79:54:df:95:c6:c1:09:ad:a7:6c:
3f:0d:a1:c8:ab:85:38:3e:ca:d5:cf:b2:80:e6:86:ee:4a:77:
d6:5b:78:b1:3a:17:06:9e:ea:0d:4c:ae:7c:8c:87:b0:b7:17:
4b:3b:d3:6d:f3:e6:8e:39:40:aa:59:58:80:7b:1c:32:c5:ee:
d2:90:5d:fb:7f:b5:7b:8e:c1:7b:d3:0a:9f:5a:0d:cb:24:37:
1f:d1:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:07 2025 by rpki-client