Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json)
Hash identifier: fScVFi+1GrxQOPJvXyrUq3JnosGKYx7IYp3z/vqizz0=
Subject key identifier: EA:0C:4F:4F:31:05:F4:E9:CE:64:95:03:AB:EC:11:DC:7F:17:18:DA
Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84
Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
Manifest number: 026B
Signing time: Fri 31 Jan 2025 01:46:28 +0000
Manifest this update: Fri 31 Jan 2025 01:46:28 +0000
Manifest next update: Fri 07 Feb 2025 01:46:28 +0000
Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: DchV6M0uPcnUvpNRhGv57zs/rjdT7qM6oOQBY6VDX3Y=)
2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284
Validity
Not Before: Jan 31 01:46:28 2025 GMT
Not After : Feb 7 01:46:28 2025 GMT
Subject: CN=679c2b74-4135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:d8:0c:87:74:f7:88:75:83:70:ad:ae:8d:
ae:9d:a3:9b:08:f7:df:64:09:46:b3:3d:37:1c:37:
7f:fc:91:97:94:57:9a:1b:7d:09:93:8f:e1:90:e4:
65:69:34:51:08:1a:3e:3a:92:ea:01:af:39:f4:06:
b4:95:64:90:e6:e1:3d:0a:f9:c7:ae:fa:b1:ad:ff:
43:7e:8b:62:1c:a8:47:e7:c3:0b:88:3d:3d:f4:d9:
0f:53:59:86:89:51:a5:3f:c7:3b:cb:23:6a:8c:40:
c6:bc:1b:1f:ff:d6:a1:13:21:8e:26:9e:64:0d:af:
cb:72:bf:bb:a6:d9:ee:09:0b:dd:97:bb:b2:be:a3:
f3:8b:c6:3f:ea:04:14:3e:76:fa:65:8a:f6:9c:32:
89:e0:bf:d0:74:a0:86:6c:c1:a7:e3:e3:36:7b:64:
5c:9a:ed:46:d4:b9:e7:24:99:3a:62:93:3e:bc:c9:
49:eb:95:00:35:a9:22:4f:a0:df:da:99:a1:9a:dc:
b3:e2:0e:a9:6e:25:d2:f6:dc:13:e4:9f:9d:44:1f:
1a:f8:c3:ce:79:bb:ea:aa:16:ae:0e:79:b9:f9:99:
d6:c9:45:d1:32:3b:cf:9c:47:a8:8e:32:2e:3f:14:
85:a3:d0:a3:1a:2e:13:5a:e8:91:20:3d:41:dc:43:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:4F:4F:31:05:F4:E9:CE:64:95:03:AB:EC:11:DC:7F:17:18:DA
X509v3 Authority Key Identifier:
keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:c9:cb:d6:44:1e:97:6c:54:63:f8:82:6e:1a:69:47:5a:c5:
3a:00:6e:f9:7b:f0:ef:00:36:cc:f5:bd:3d:49:89:73:d1:fe:
5b:87:23:c0:e6:97:9e:df:e5:33:e7:0e:cd:b1:d0:25:ed:b9:
f3:c8:68:9f:68:fe:82:de:f1:42:a6:69:a5:f4:06:d3:5e:b5:
cc:d0:e7:22:8f:a2:a5:76:30:c6:ac:1d:59:59:e6:d5:ed:62:
4d:aa:fb:cd:ec:ac:8d:ad:2c:b3:c9:75:ad:bb:f1:cd:01:35:
ce:d2:ee:f4:2f:b2:57:a5:0b:8d:35:3e:77:8d:54:d5:a7:83:
6e:50:bf:e0:35:2e:b6:64:9e:64:97:cb:47:38:1a:94:ff:8a:
c9:33:dd:fd:37:91:98:3b:2b:6a:bf:78:f4:16:f0:fb:53:61:
be:64:41:78:bd:00:82:b5:95:26:d7:c4:46:a2:7e:a3:d1:b1:
e0:8e:56:c0:1d:27:81:77:cc:7f:5a:1f:e4:13:03:cc:af:10:
93:81:05:f0:83:e4:dd:33:25:95:0e:80:da:58:92:05:7e:de:
8e:83:e1:3a:e8:eb:9e:98:95:ef:22:e9:6b:9b:93:65:e3:d9:
0c:51:6b:23:d6:dc:b2:db:c1:8f:79:da:78:00:bb:bf:de:5d:
27:e0:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:16 2025 by rpki-client