Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json)
Hash identifier: 6HVVVapl7wtED21PhMdbNd83Z45AkWJ9wvZqsGkHdOs=
Subject key identifier: B1:97:35:38:E4:A8:C0:CC:63:36:89:1A:D5:3A:15:A3:52:A3:62:65
Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Certificate serial: 3449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
Manifest number: 3449
Signing time: Fri 31 Jan 2025 15:09:32 +0000
Manifest this update: Fri 31 Jan 2025 15:09:31 +0000
Manifest next update: Fri 07 Feb 2025 15:09:31 +0000
Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: X+d2g5cN71J+0066knJArHyD5bBqASdyi6k6OE9ios8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Validity
Not Before: Jan 31 15:09:31 2025 GMT
Not After : Feb 7 15:09:31 2025 GMT
Subject: CN=679ce7ab-85be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:ac:05:86:b3:3b:36:df:c5:24:fb:09:5b:
8c:e0:b3:1b:3a:aa:42:8f:3a:ed:77:78:d1:85:91:
b7:9b:fc:b2:42:90:de:df:bf:f3:1c:f5:fa:73:9d:
3f:2e:fe:b6:1a:f7:77:f2:58:cc:02:d0:88:53:95:
14:5f:c6:24:b5:1d:db:e5:f0:90:5d:1a:a6:1e:86:
90:bf:b7:e1:35:81:5d:10:33:f0:d9:f8:4f:ff:16:
f4:10:77:54:30:36:48:00:28:7f:4c:0b:95:6b:8d:
2c:fc:2a:50:40:79:01:db:7b:d1:da:79:fb:3f:e0:
20:f7:53:1f:e7:4f:35:3d:79:bb:be:7b:5d:a5:f6:
07:2f:66:01:75:0f:fe:56:60:41:b2:68:00:96:c6:
f4:35:fa:fb:04:9a:08:c9:71:1d:d3:27:b3:b1:99:
19:e2:bf:b0:39:1a:af:6e:a4:11:06:a7:d6:5a:9b:
27:30:f0:d2:3f:5d:c4:47:e6:31:fb:a1:e6:92:82:
fc:3a:aa:5e:28:53:df:84:31:68:1f:c7:e3:98:fd:
5e:ae:d8:63:00:17:a4:94:f6:3e:7d:34:21:b6:64:
ba:4f:69:f5:2c:79:b6:6f:cb:11:1c:96:b3:7b:1a:
ef:14:66:54:2b:31:62:b2:32:f5:bb:14:50:10:0b:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:35:38:E4:A8:C0:CC:63:36:89:1A:D5:3A:15:A3:52:A3:62:65
X509v3 Authority Key Identifier:
keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:5e:6f:a2:7e:a8:59:3c:34:35:4a:0f:bf:57:75:89:d3:
5b:90:ef:f1:19:b2:a2:20:6f:f9:23:55:e7:cb:08:c5:b7:05:
c4:1b:97:bb:80:17:ed:27:2a:97:39:35:9a:de:ad:15:fc:16:
22:b4:5a:9f:d0:9b:0c:83:e2:f7:f4:5d:7e:54:bd:d5:17:b9:
a1:fa:91:69:ef:01:87:c1:96:8c:f1:c6:c0:ab:b2:b3:25:54:
ae:68:da:56:1d:32:6f:2d:9d:82:ac:35:d7:1d:77:8b:7d:3c:
47:3b:6d:30:71:a5:3d:45:77:59:54:55:64:77:ab:fe:47:c1:
43:09:e7:77:95:95:cc:02:a0:59:21:40:86:62:b7:32:50:5b:
ed:01:70:55:b6:bd:fb:71:79:42:4c:a8:0f:ac:ff:7b:e1:2f:
a9:ce:28:80:f9:4e:52:0f:fa:bb:2c:84:ae:06:fd:e1:43:a9:
68:47:49:de:68:21:51:25:f9:35:2e:5c:4c:65:f6:5e:de:41:
93:a5:24:21:08:47:7c:c2:b4:97:29:8e:3a:ad:71:95:3e:86:
1c:cf:99:17:5e:ce:f0:29:71:df:a6:37:10:76:de:65:f4:0c:
cb:43:6f:a6:0c:2c:80:dd:8d:9e:8e:ce:74:43:c5:8a:89:5e:
48:ea:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:59 2025 by rpki-client