Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json)
Hash identifier: X2bJDUI3WL+NLaHggjJCGR5ERk3Jo/R7wP4yE/5uWAw=
Subject key identifier: 38:AB:F5:5D:33:E8:34:66:29:FE:71:A0:F2:03:F2:50:A9:80:37:B3
Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42
Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942
Certificate serial: 0BDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
Manifest number: 0BD2
Signing time: Fri 31 Jan 2025 18:41:16 +0000
Manifest this update: Fri 31 Jan 2025 18:41:15 +0000
Manifest next update: Fri 07 Feb 2025 18:41:15 +0000
Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: sZ+EaM7fsjkaQFA0//NCDMb0Zl9d4oVsWJnvH5t9NJg=)
2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: TQZLfyrNNm4rH/joKuV/c0LtGb3rqWKsaid6lV6en3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3035 (0xbdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942
Validity
Not Before: Jan 31 18:41:15 2025 GMT
Not After : Feb 7 18:41:15 2025 GMT
Subject: CN=679d194b-be29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:87:b8:0d:4d:70:66:1e:f0:d1:36:e2:a1:
a2:50:a6:63:1c:ff:56:60:c2:df:cb:ce:44:54:c6:
36:cb:30:71:32:ec:05:f2:9c:94:d4:5b:33:71:b5:
54:e0:4c:fe:f8:7c:53:5d:af:cc:4c:1b:17:0f:da:
dc:51:52:51:30:df:40:35:00:98:2e:ec:47:ad:3d:
eb:f6:d6:c7:09:30:fa:d8:17:69:d0:d0:f4:00:8e:
c5:9e:aa:8c:af:cd:96:c1:38:8d:34:43:b0:9d:d6:
fd:d0:ac:7e:84:e3:e0:e8:44:a9:9e:c2:3b:15:71:
3a:97:9e:c8:7b:4b:0d:c5:57:24:66:f2:31:d2:b2:
70:d6:cf:dc:53:1d:a4:6d:dc:46:10:3c:05:84:70:
2e:cb:b7:db:ca:d2:f9:18:97:52:06:d4:8d:d6:62:
56:68:59:ce:a8:23:54:fc:15:59:4a:a4:65:e2:f2:
c1:69:81:de:6a:ac:fc:62:26:e0:e6:a9:cb:a5:49:
2e:8d:16:27:b0:c2:08:56:ef:8a:de:da:00:8b:16:
a2:1f:22:83:89:d4:3d:42:3d:6f:02:48:bb:7b:8d:
70:2e:4b:a1:b0:79:ae:93:d3:5d:b0:7c:96:ab:9c:
45:98:58:69:27:45:fc:81:1e:2d:73:24:5c:32:6c:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:F5:5D:33:E8:34:66:29:FE:71:A0:F2:03:F2:50:A9:80:37:B3
X509v3 Authority Key Identifier:
keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:65:17:c5:96:fe:e0:27:21:6c:fb:71:15:26:12:d4:76:
4c:9a:fb:06:0b:95:30:52:40:8a:ac:fc:6d:b8:26:c9:05:b3:
b0:8c:a9:f3:43:22:5f:bb:29:a5:44:71:6d:5f:4f:83:12:d2:
f9:ed:49:c9:92:6e:87:cc:1c:40:f6:18:5c:03:ad:90:96:08:
53:68:30:fb:e1:25:fa:c6:fb:58:30:00:0c:a0:50:2d:e9:53:
83:7e:13:5f:4e:4b:e0:0f:8b:87:2f:05:ed:7d:ce:97:c5:32:
40:a8:89:25:99:45:ac:b2:8d:31:8c:4b:39:e4:d3:c1:67:3d:
62:87:e2:70:6b:20:4f:15:86:a0:5e:f0:30:bc:05:4a:54:30:
45:5d:54:58:2e:0a:7b:3b:86:24:6e:30:f2:a9:99:14:f7:7c:
6c:34:5e:73:df:93:c1:0a:1f:07:e3:cc:b6:e3:18:0a:3f:ba:
ab:4b:63:05:26:ee:49:34:ba:3f:42:25:a6:8f:87:42:46:a0:
d6:87:9b:4a:82:41:a4:ec:eb:65:95:7e:08:d6:43:d6:82:a3:
26:c2:71:b5:5f:0e:5b:f1:c6:c4:b8:94:c6:e3:20:c8:7a:1a:
e6:6b:49:4d:25:03:55:7a:de:31:bc:70:6f:92:a3:ec:99:08:
71:a8:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:22 2025 by rpki-client