Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json)
Hash identifier: 16kzG5ARF1IYQ4ULx8bFiMSWe4/t2mPPpsHyYYrpJ+U=
Subject key identifier: 91:0E:65:C3:23:21:AC:D8:EF:48:EB:A4:1A:F3:91:52:C4:8B:73:94
Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E
Certificate serial: 057B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
Manifest number: 0577
Signing time: Thu 30 Jan 2025 23:19:10 +0000
Manifest this update: Thu 30 Jan 2025 23:19:09 +0000
Manifest next update: Thu 06 Feb 2025 23:19:09 +0000
Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: 8ZHLaKR1VSRkukPwYhwcSiaReMlmbbSrPxtiVh2Rilw=)
2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: BLZihm/TeabqF4tkohMfsqoOF09WEG/Ggs7uUhIWlKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E
Validity
Not Before: Jan 30 23:19:09 2025 GMT
Not After : Feb 6 23:19:09 2025 GMT
Subject: CN=679c08ed-7207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:ee:70:5a:2b:ce:63:fc:94:9c:c2:b4:af:
d9:af:a4:7d:45:30:e9:1b:b7:e5:09:4c:a6:02:b9:
fb:55:8e:4d:40:7d:ac:2d:52:18:90:55:8b:91:83:
30:f6:54:de:2e:91:17:10:30:4c:b2:f7:03:e9:71:
77:43:1b:40:cd:e3:87:b4:66:f0:07:88:de:72:6f:
b8:fc:18:fa:fb:03:ee:6f:0b:5a:10:31:f7:0f:77:
28:2b:17:38:be:16:dc:c7:f4:71:08:ce:e7:00:38:
8f:78:af:70:71:85:ea:68:47:b9:0e:34:84:8a:9f:
e8:24:6b:01:4e:2b:c1:52:57:45:64:4a:fb:77:b7:
c6:6f:97:d2:03:bc:f0:7f:00:84:58:e5:ed:99:78:
e7:08:e5:15:7d:84:f0:c0:5e:67:e8:d5:4f:8c:4d:
e1:40:ae:50:06:98:3f:07:af:1e:80:be:3c:ae:3a:
a4:90:e1:04:d2:7b:f7:28:3d:6b:d7:a4:8d:24:a2:
3d:df:08:6b:5f:67:43:17:c7:bc:6b:52:5e:a0:ea:
e6:29:16:da:44:65:4f:92:4d:c7:b8:50:fd:6f:bf:
de:57:7f:5b:6a:16:16:08:9a:ed:a4:b9:7e:e8:53:
bf:5f:e9:ad:d9:c2:44:99:6b:71:0b:76:50:cf:26:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:65:C3:23:21:AC:D8:EF:48:EB:A4:1A:F3:91:52:C4:8B:73:94
X509v3 Authority Key Identifier:
keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7b:02:25:dc:3f:85:54:15:88:2b:28:79:84:aa:f3:25:cc:
1c:20:2c:21:5a:dc:d8:8e:1a:7f:fe:bf:39:63:b1:0a:b7:8d:
ef:eb:6c:22:2f:26:fc:6a:3d:74:9d:ad:b1:59:4a:df:79:19:
50:94:68:da:29:b9:7b:54:37:44:85:5e:9d:45:d5:48:1b:87:
fb:7b:42:14:1c:94:45:42:37:11:ca:bf:a8:2e:5f:f7:34:7f:
4b:ab:aa:61:a4:09:90:4f:e2:a3:56:5f:8a:1d:01:dd:3b:af:
12:0e:f3:32:4c:f7:5e:21:4c:c3:3f:48:ae:29:23:13:d4:b5:
16:b8:7a:77:7c:42:73:56:17:a1:11:d6:48:5f:cb:8d:4f:b5:
4c:7a:cb:0a:1f:44:44:3e:3a:84:18:e4:a1:3e:65:7f:56:41:
de:c9:6c:0b:2a:6e:09:da:cd:e7:31:bd:6c:fb:be:a2:83:4b:
e0:06:47:3a:fb:24:b8:8b:c2:3a:fe:fe:f1:37:45:0c:3a:a7:
eb:21:28:b4:38:c8:3d:9f:fc:70:e1:d0:aa:59:71:1f:98:1f:
c5:eb:e1:0d:0b:25:a5:48:a3:a3:a1:1a:34:fa:13:0c:11:5d:
66:2d:e4:3b:56:62:ec:62:eb:98:a1:85:c9:56:62:3c:35:8e:
8b:21:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:32:02 2025 by rpki-client