Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier: h3jcHpLhWM2KxEsNl1S2HupyP42T6GCmveSV966U2uk=
Subject key identifier: 8A:7B:B6:C7:8D:70:9A:AF:5A:63:2C:30:6C:B0:81:0D:9B:10:E7:8F
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number: 57
Signing time: Fri 31 Jan 2025 06:13:21 +0000
Manifest this update: Fri 31 Jan 2025 06:13:21 +0000
Manifest next update: Fri 07 Feb 2025 06:13:21 +0000
Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: OoAfY339ayGTuN6rT4a782EcJTYav8HTt3b+p7zvYss=)
2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Validity
Not Before: Jan 31 06:13:21 2025 GMT
Not After : Feb 7 06:13:21 2025 GMT
Subject: CN=679c6a01-b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:38:16:2f:00:9b:3a:a7:3c:3e:9d:39:3a:
7f:28:42:f3:d4:28:f6:e4:a6:9c:bc:da:78:11:96:
4e:be:e1:8a:fb:d2:d0:a7:78:e4:70:e0:44:3b:8c:
75:55:37:e4:f0:cd:aa:ee:2b:6b:fc:e7:5a:31:68:
50:d5:a3:7e:17:a5:b0:f0:28:b6:88:7c:1b:38:7c:
d9:f5:5e:ba:0a:9b:07:1c:d7:15:77:37:0d:93:6d:
c6:40:ab:7a:29:22:87:cb:e3:4c:6f:b1:44:6e:2d:
de:47:90:86:16:3a:f4:9c:57:82:f6:ce:1f:2b:59:
ae:2a:84:19:55:25:25:60:df:d0:1c:3d:16:2c:51:
21:42:43:24:fe:c8:87:0c:04:d2:b0:3f:c1:13:74:
de:54:8f:96:1e:50:d4:23:42:da:a7:c3:0e:a8:0b:
b6:ac:cf:c3:77:b9:04:53:9e:62:bb:8b:b0:ca:0d:
16:7d:94:16:d2:f0:17:86:8a:ab:4e:75:3e:b9:fb:
45:19:25:6f:e8:dc:a7:e5:0b:3a:ba:7e:11:99:1a:
d3:7a:14:48:b8:28:92:f2:57:b4:47:6e:84:d8:87:
3f:b7:14:64:31:07:d4:cc:f1:46:3a:73:78:f0:e1:
8f:55:46:93:37:9a:6b:58:35:4a:2f:50:fe:16:c3:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7B:B6:C7:8D:70:9A:AF:5A:63:2C:30:6C:B0:81:0D:9B:10:E7:8F
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:a6:ea:2e:da:a8:58:71:e0:5d:8e:bd:99:a6:87:76:b3:
a4:a7:63:66:b1:17:6c:46:94:2e:04:eb:cc:95:25:12:ac:fa:
9b:e2:ce:5f:7a:6e:94:ce:10:e9:4b:29:a2:36:6b:9f:f0:4f:
1a:81:15:b5:ce:d0:0d:0f:8d:1b:2e:c4:a5:7f:b8:b5:a9:9f:
01:89:bc:49:89:60:a2:02:53:1b:ee:ca:61:4b:60:70:ad:73:
8c:1d:4b:94:87:9a:ca:18:2e:b3:3f:0f:09:1f:c1:79:7f:e4:
b6:f5:76:8e:1c:21:78:6f:99:3f:a3:3b:eb:b3:d4:32:ff:61:
2d:34:ec:ba:e3:2c:fd:70:d7:d3:91:fb:7b:cf:e3:a2:3b:3f:
1e:4c:da:d4:1b:ca:5a:a3:8c:37:23:98:34:b6:87:1c:91:59:
a1:01:d0:9e:fc:12:61:c6:c5:4b:f6:da:01:e9:1a:48:9d:b8:
08:65:5c:ca:ec:01:b0:ea:e0:3f:d7:40:dc:9c:22:32:fe:3c:
a0:1c:b5:6f:c4:b6:97:bc:ca:4f:13:89:95:70:98:60:09:fa:
f3:10:58:a6:e0:1d:8e:b4:04:3e:0a:f8:04:89:7e:25:5a:4c:
69:74:53:1c:0c:b7:34:b7:8e:0d:80:24:35:bf:97:b6:cd:fb:
05:be:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:29:34 2025 by rpki-client