Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier: jCBLNMguI41uXKib9qs+yK16GD0qhyL0YClNGDodrZI=
Subject key identifier: 20:09:0D:AE:02:6E:BA:E1:36:6D:84:BF:7A:AA:22:9D:8A:86:BD:4C
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number: 57
Signing time: Fri 31 Jan 2025 06:13:23 +0000
Manifest this update: Fri 31 Jan 2025 06:13:23 +0000
Manifest next update: Fri 07 Feb 2025 06:13:23 +0000
Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: q91sj8gWlRXmgWrOL38Z2sdQyhxk2rhspht3I6uMtos=)
2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Validity
Not Before: Jan 31 06:13:23 2025 GMT
Not After : Feb 7 06:13:23 2025 GMT
Subject: CN=679c6a03-579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:36:e2:2a:77:e2:5b:1e:99:79:fd:56:98:
2e:ef:c5:67:0f:e2:4e:98:bf:d0:03:a8:c5:2f:0e:
83:fa:dc:ea:3d:6e:f9:3c:b9:54:df:9c:18:66:cd:
ac:9d:d8:13:dd:03:c5:6c:2d:db:ee:d6:cf:ca:8f:
a2:1f:96:7e:81:9d:35:c3:2f:b3:15:d7:af:3f:26:
55:ff:03:32:49:85:61:8a:87:bc:c2:f0:e5:de:46:
f8:51:b9:c9:3f:0f:0b:7f:34:20:32:63:ad:46:f1:
bd:c2:7a:24:86:d7:ee:7a:92:b6:21:14:bd:7c:82:
db:8f:e2:b6:24:a9:7c:7c:1f:c4:78:ab:ea:1d:29:
97:0a:42:94:7f:f0:56:ca:0b:de:4a:d5:24:1d:a3:
f0:9f:e7:9b:7a:00:e0:eb:1a:79:21:38:6f:78:01:
d5:64:55:4d:ca:eb:f6:91:e5:56:65:7b:46:2c:2e:
d6:01:84:2f:3b:74:6c:45:07:81:e4:bf:90:80:89:
19:50:22:ce:0f:21:f0:f6:b4:9d:94:37:5c:30:9f:
df:d6:4c:bc:b9:41:af:40:8f:6f:a2:62:c5:5e:80:
55:15:92:f0:35:be:ca:61:1a:5d:a7:be:18:11:1a:
4b:dc:3f:46:84:bd:d7:3b:6e:39:05:cf:86:ca:87:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:0D:AE:02:6E:BA:E1:36:6D:84:BF:7A:AA:22:9D:8A:86:BD:4C
X509v3 Authority Key Identifier:
keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:58:d8:a5:ea:1a:8b:29:91:62:81:93:14:c1:b5:8e:61:
f9:1b:4c:b6:3d:2c:63:34:9e:19:66:36:76:28:d3:06:3f:9a:
54:fa:d3:4a:2c:c2:25:84:23:2e:a7:54:2d:9e:bb:a7:e3:9b:
8d:2a:86:96:a7:4e:59:12:55:af:80:a4:bf:c5:ee:34:65:20:
2b:2b:1c:1b:25:61:63:62:af:28:9d:c1:5d:12:3e:b9:d4:2c:
87:88:46:17:4a:6b:5d:8b:c4:66:01:6d:31:b2:88:82:28:83:
9f:3c:ef:c4:69:6e:46:0c:40:e0:b8:ef:e4:87:4a:c1:82:58:
ea:04:dc:0b:66:30:b4:73:89:5c:53:5e:60:4a:50:0e:4d:29:
35:77:1b:6b:17:d7:26:a3:3a:d9:ec:99:cc:28:04:c7:ab:48:
2c:58:73:32:6f:cb:f9:3c:a3:7c:8b:e9:f0:a2:6e:17:0c:27:
01:ed:b7:8a:6d:b2:03:48:a6:9c:c9:fd:e4:65:2f:92:e3:82:
9e:3c:45:5c:0b:bc:14:ed:ad:87:fb:44:77:76:af:c0:ae:0a:
a1:72:e0:3c:16:45:ec:d0:0b:64:e5:8a:a0:83:42:f9:b9:3c:
f4:6e:63:c7:72:13:f7:ca:df:86:39:3e:03:c1:20:f5:4a:fc:
0b:16:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:25 2025 by rpki-client