Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier: 99+lFhLzeYnYc9DWU/SeqJqQ4FHUbd8/G4STx2rW+EA=
Subject key identifier: 41:00:09:1F:59:BF:6C:54:9B:98:EF:8E:8C:8C:9B:68:7A:15:B2:48
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number: 3F45
Signing time: Fri 31 Jan 2025 14:50:46 +0000
Manifest this update: Fri 31 Jan 2025 14:50:46 +0000
Manifest next update: Fri 07 Feb 2025 14:50:46 +0000
Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: RKGD7GQ1OzfR5KfZtX3nlVAJboFA3tsnQNXKlz/k6RE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Validity
Not Before: Jan 31 14:50:46 2025 GMT
Not After : Feb 7 14:50:46 2025 GMT
Subject: CN=679ce346-6ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:a0:93:d3:d6:63:c8:43:1c:51:98:c4:20:
b2:fe:e0:67:78:4a:26:f8:9a:1a:12:9b:06:53:aa:
0f:c3:51:1c:14:e6:f1:88:97:f7:a9:94:6f:a2:a6:
6e:13:9e:84:69:37:d3:da:cd:dd:d9:87:36:c0:bc:
9f:51:ca:0f:e0:16:0e:f5:62:d3:1f:fa:12:29:68:
6f:9a:ab:f5:be:8b:4f:79:de:3c:9d:38:14:24:dd:
a3:e2:f8:ab:13:ec:19:dd:38:d5:75:53:c9:e4:28:
61:cb:39:1a:77:33:1e:20:0a:97:4a:7d:e0:f7:3b:
aa:6e:90:fd:c7:8b:86:cb:e4:d3:8b:37:80:eb:83:
1a:3f:1a:85:e2:ff:8f:ff:40:1e:b1:5a:98:5b:c0:
dd:6a:95:16:55:92:6c:b1:1c:11:77:23:82:4a:1b:
0f:d1:f9:9c:8a:df:a5:77:b7:2e:a2:e8:12:1c:fc:
87:67:84:8c:4c:4a:48:24:74:7a:8b:fd:30:da:14:
5b:f3:ee:cb:76:3b:35:de:0a:6e:f6:52:c9:fd:f4:
9b:95:e7:55:f8:84:f1:e6:e2:99:d8:99:2e:61:ff:
f0:13:b6:5e:e6:92:1b:e7:9c:5a:dc:87:07:4b:f1:
75:6a:be:7b:5b:a7:7c:0c:b8:6f:89:b1:82:56:76:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:00:09:1F:59:BF:6C:54:9B:98:EF:8E:8C:8C:9B:68:7A:15:B2:48
X509v3 Authority Key Identifier:
keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:b5:ef:f3:d0:96:3d:07:48:c5:3b:fa:c1:82:8e:42:b7:fe:
b8:75:f6:b5:57:57:af:94:5f:2c:4c:de:f4:89:09:f7:c0:aa:
c1:82:10:05:54:db:9f:27:13:89:65:34:93:7c:00:0f:ad:6c:
86:f9:8a:ec:32:01:16:51:c2:6b:e5:3f:16:1e:22:c2:89:a9:
fe:91:f2:2f:49:b1:df:64:6b:8a:7b:91:3d:a7:d6:92:e4:d8:
82:84:e3:d6:b2:20:45:4b:a2:a6:ae:49:60:68:2d:da:94:54:
a9:52:b3:41:8a:e6:1e:67:e1:b5:3e:a6:d3:82:0c:da:2f:fa:
01:fc:4e:72:af:9c:7c:28:97:d8:61:69:81:ff:b5:10:5b:cc:
63:2c:4f:b1:b1:49:6b:a4:ca:b6:4e:8a:76:bb:f1:50:7d:bd:
e5:73:fd:f8:2f:f7:cd:3d:b6:53:31:0e:64:19:ea:d9:f4:41:
82:ac:40:8b:4b:44:4f:01:e5:d6:c3:55:5d:a7:ec:ff:78:9e:
bc:17:be:b7:be:f0:37:d5:cd:03:1c:45:e0:07:e3:12:b4:ad:
a9:26:de:90:0b:13:97:94:cf:df:44:9b:de:af:9c:2a:a2:19:
ab:ea:10:8a:86:70:4d:74:44:f4:4f:98:2d:ec:bb:56:61:40:
59:6d:6b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:19 2025 by rpki-client