Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json)
Hash identifier: BMKFnA9HmjffAz4mCQxySy/RZx4DdgsonoA6UqPNFtU=
Subject key identifier: 70:2F:22:9B:B3:27:E4:14:43:1E:98:52:4D:4F:26:5E:4A:81:3A:66
Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Certificate serial: 1CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
Manifest number: 1CE0
Signing time: Fri 31 Jan 2025 16:09:56 +0000
Manifest this update: Fri 31 Jan 2025 16:09:56 +0000
Manifest next update: Fri 07 Feb 2025 16:09:56 +0000
Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: z65B/ZEAneUqyR0EE2LdIAr0ROTRNLwYy9Sypaygm2A=)
2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: QN4dhYeOYexv58OGwmZdyDg8Z4B86G7ksX83Qid7CHk=)
3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: oh/v7iVJL2nmvk/qjcAVXe7OglXKPf/jEhdssMeYp/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7405 (0x1ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Validity
Not Before: Jan 31 16:09:56 2025 GMT
Not After : Feb 7 16:09:56 2025 GMT
Subject: CN=679cf5d4-1e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:f7:5b:92:de:1d:ec:98:2a:54:89:a0:eb:
8d:3c:ba:92:15:f0:4f:ba:f5:ba:4b:1c:f4:7a:a2:
23:a1:53:a3:12:c0:a0:af:bd:d8:8d:21:3a:9f:a4:
24:f7:d0:66:9b:4b:84:a4:d3:e5:66:0a:8a:c5:09:
ea:c0:5b:92:29:40:d5:e4:f9:27:3a:46:f9:37:0b:
4e:d3:4a:68:19:75:27:d2:60:f1:bf:17:9d:58:83:
0f:08:38:05:16:36:2e:c7:0c:1f:21:9c:4a:69:7d:
86:7e:bc:12:56:a3:dc:34:d6:7e:c3:85:cd:49:dc:
0c:80:c7:ac:ea:90:5b:2e:c0:1b:0e:ca:b2:dc:39:
2f:4d:89:13:37:c1:aa:88:34:88:df:48:bc:2b:fd:
42:fc:d3:08:6b:35:ee:b2:ea:13:3b:0d:cc:c1:8c:
19:55:87:18:9f:67:1c:65:d9:f0:64:59:eb:2a:86:
aa:7c:4f:1e:bc:f4:b4:7e:8b:8b:40:7a:77:fd:8d:
1b:ed:a6:f3:4b:3d:ee:5b:ad:ea:6d:15:f4:06:98:
0f:7b:87:c9:9d:d5:69:6b:2f:37:31:bd:46:05:60:
06:c0:f7:b7:7a:5b:f5:ab:70:87:fd:4b:cc:73:3b:
cc:f1:e6:08:2f:1c:78:f7:f2:a8:25:cd:20:18:5f:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:22:9B:B3:27:E4:14:43:1E:98:52:4D:4F:26:5E:4A:81:3A:66
X509v3 Authority Key Identifier:
keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:0f:59:31:84:c9:66:28:a9:4a:55:4c:5f:03:1a:fc:5a:
8b:6b:91:f9:be:45:1f:b0:0f:b2:23:ea:71:2d:c5:b5:30:c3:
e2:43:92:68:12:0b:57:a4:53:42:50:3f:3c:b0:a7:ee:b8:07:
3d:95:93:f5:bc:2f:18:01:c4:32:ce:f1:e0:f3:e5:8c:35:50:
4f:1c:f2:9b:58:64:b7:d0:33:d4:a0:18:f0:37:bf:ce:4e:e1:
4a:f1:06:49:23:9f:10:a2:28:17:41:ef:47:d7:32:ca:d2:f1:
6b:da:b4:51:63:ae:ef:d0:a7:d8:30:dc:d8:ed:75:bd:86:66:
e0:a0:df:15:03:10:37:1c:5a:6b:0e:11:61:c4:f1:41:36:45:
ad:fe:12:b5:f1:d4:c5:78:0f:7c:ae:e9:b9:1a:70:30:a5:3f:
14:f4:da:f9:cf:ee:ce:c4:de:ae:d4:76:ec:4b:54:a9:8a:5f:
11:4d:7e:36:7c:2e:22:35:9c:9f:67:2c:11:42:cf:3a:32:29:
82:97:1e:63:0c:f2:05:30:55:b3:45:7b:e7:cd:cd:b3:74:c5:
5a:89:2b:a5:aa:f0:1a:70:68:52:e6:9b:36:72:d7:0a:2c:22:
92:e1:1d:c1:14:f7:ea:7d:a8:56:56:0f:f7:c7:c6:bd:e0:cc:
3e:a3:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:32:05 2025 by rpki-client