Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier: AA02PErQhb4Gl1DSouv+vTzsA50+9ErAR71KZl5n4/c=
Subject key identifier: 2A:0F:9F:81:8F:A3:F5:9B:F3:F8:33:F8:E2:DF:31:7F:CB:42:F9:F2
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number: 019E
Signing time: Fri 31 Jan 2025 02:39:51 +0000
Manifest this update: Fri 31 Jan 2025 02:39:50 +0000
Manifest next update: Fri 07 Feb 2025 02:39:50 +0000
Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: npQqZCt1ZlNxUeBEQYrPi7sAAoqnQkUSn+XqZdQ3I7Y=)
2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=)
3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Validity
Not Before: Jan 31 02:39:50 2025 GMT
Not After : Feb 7 02:39:50 2025 GMT
Subject: CN=679c37f6-a22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:a2:7f:d2:9e:fe:21:08:cc:66:2c:59:70:
a8:52:a3:92:92:ca:0d:46:32:0a:16:24:84:f6:7a:
96:38:6b:69:84:38:c1:9b:1e:7a:ff:4f:23:8d:37:
c2:52:15:17:1d:f6:05:38:f0:1c:70:44:86:d0:78:
d9:a6:eb:49:fa:76:1f:f0:99:79:90:eb:5c:ec:fb:
0e:ae:20:bd:8c:b1:ea:29:81:65:79:be:9b:97:ba:
e2:6d:e4:79:8b:02:a2:bf:0b:38:c6:d3:6f:3b:f7:
b8:42:b2:c5:e4:80:9d:b5:31:0d:c3:e3:fb:c2:0e:
b5:e0:d2:12:8b:af:90:a1:ba:96:37:dc:ee:2d:14:
c1:16:79:dd:3c:b7:d6:19:55:ec:ee:38:14:cc:f9:
81:5c:71:49:2b:05:6c:49:3f:e0:24:8f:fe:16:b9:
cf:08:29:80:4f:cb:cd:b0:d6:96:e1:77:70:b8:f6:
85:c9:e0:f9:6d:fc:6b:d3:1d:d1:05:9e:91:d3:be:
5e:77:e8:4d:71:43:4e:d7:86:97:f9:55:28:4c:37:
41:1b:0d:ab:14:26:98:c9:62:cc:a9:d6:4b:03:66:
9e:1b:f2:25:10:31:8a:97:42:b0:22:41:7a:de:35:
00:3e:6e:c4:d6:ba:54:e9:f4:5c:62:ac:c8:a3:44:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:9F:81:8F:A3:F5:9B:F3:F8:33:F8:E2:DF:31:7F:CB:42:F9:F2
X509v3 Authority Key Identifier:
keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:ae:54:b9:2c:3c:22:d2:57:74:81:95:f2:0d:5e:86:aa:
6e:54:ce:5f:88:77:81:2c:93:f8:a9:68:28:45:f7:be:df:aa:
d1:f4:da:69:93:be:28:33:41:33:5c:0e:cb:0f:7b:ed:dc:6e:
75:5f:0d:73:b8:e7:52:a6:ac:58:ae:46:28:ae:06:67:72:ff:
74:43:79:38:b5:1d:ad:7e:3c:94:7b:79:b3:18:95:af:17:ff:
42:03:a5:8f:b2:1f:46:0b:41:32:84:e3:a9:ea:59:7e:0f:48:
7b:83:a5:a7:65:d2:a8:e7:8e:5f:c7:9a:0e:01:4d:ff:d9:21:
a7:31:55:30:d5:46:36:04:af:40:69:55:b5:f5:3a:f6:8e:4e:
e2:f8:9d:a8:1b:c6:0c:de:f7:fd:fa:f1:44:22:34:5c:86:51:
85:b4:e3:57:15:e4:f3:02:4d:71:c1:ff:6e:ea:b0:fd:37:89:
ed:b5:78:8f:f4:fb:d7:ef:42:1d:b3:ff:e1:c7:41:ca:6b:27:
58:87:de:75:4a:63:0c:e1:2e:7e:84:e9:cf:96:59:6e:f2:3b:
c8:21:28:ec:9b:b3:a4:62:12:9c:31:f7:0b:49:b4:7a:b6:e9:
8c:47:2e:0c:46:aa:7c:5c:c9:c6:f7:31:e2:e0:e5:4a:e6:75:
6b:a3:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:49 2025 by rpki-client