Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json)
Hash identifier: MjsQGPxY7zWmshuAnx4jJT43CxCy/MNRcC8VdpMiDFQ=
Subject key identifier: A0:FA:92:1C:8C:C0:A8:CE:F3:3B:82:89:65:5A:01:A3:89:D4:2C:92
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial: 0AD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
Manifest number: 0ACC
Signing time: Thu 30 Jan 2025 19:30:21 +0000
Manifest this update: Thu 30 Jan 2025 19:30:21 +0000
Manifest next update: Thu 06 Feb 2025 19:30:21 +0000
Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: GQnP1WmAwXRN4WYL2wv1ZV+hUMFAlxy2D0el0fA2Lg0=)
2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: nseKpzm/ZWWtW2UIWjTt9RcmdCE4ujuM4SPShmqFf3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Validity
Not Before: Jan 30 19:30:21 2025 GMT
Not After : Feb 6 19:30:21 2025 GMT
Subject: CN=679bd34d-5dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:c5:8f:cf:2a:33:52:6e:26:0b:27:d3:6d:
9e:55:49:23:3a:31:cd:7b:24:e4:a7:3e:ae:fa:c5:
58:4d:4d:37:3e:d5:06:bb:60:8b:ed:35:48:6f:e1:
5f:66:a3:e7:2e:8c:9d:0a:a0:0a:00:e2:86:33:af:
50:8c:ce:62:8a:38:91:67:b0:8b:0a:8f:17:f3:61:
04:f8:a5:5f:65:f5:f7:5d:c2:aa:8d:73:c2:29:95:
68:66:7e:2c:3b:72:ac:a3:be:c5:26:7a:79:e8:5e:
01:0c:a1:36:a3:8b:26:b9:b2:d1:3c:0e:14:4b:f9:
30:23:ab:a6:7d:a5:0a:1c:6f:72:fe:27:30:cf:bd:
af:b3:76:e0:4f:e0:76:58:ea:7b:17:f9:84:09:38:
28:fd:d0:b2:79:50:c0:4d:9d:4f:7f:23:a3:56:6b:
4c:71:27:ea:26:a9:8b:d0:ae:b7:9f:a4:9c:8e:28:
b1:97:95:1b:37:ce:7b:ae:44:e2:d8:35:ee:fd:58:
78:38:50:cd:7d:82:ff:34:07:bd:89:d6:23:11:fd:
68:dd:b1:15:3f:b6:ce:d9:26:0e:9d:80:43:d2:d5:
c0:f0:ef:a0:a3:9b:a4:82:38:57:67:74:5b:53:69:
c4:26:71:82:6d:a8:21:d2:3e:44:bd:32:7e:f7:e4:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:92:1C:8C:C0:A8:CE:F3:3B:82:89:65:5A:01:A3:89:D4:2C:92
X509v3 Authority Key Identifier:
keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2c:0f:4e:f3:89:4e:73:44:f1:6d:52:6c:35:6e:aa:3a:15:
3c:fc:6f:2a:cc:07:1f:36:73:fb:61:1c:0e:45:09:bf:6d:c5:
18:c1:a9:b0:e2:cf:a6:a1:be:4a:6a:73:44:4a:ba:90:42:72:
2b:9f:d7:2d:15:be:93:6a:40:d5:e2:f7:85:4c:8f:a2:02:d9:
be:4d:4e:af:d7:57:6b:96:cc:b3:f3:4f:9e:08:4f:c6:bd:00:
ea:1f:0d:63:94:75:aa:52:f8:a2:61:53:7d:f2:af:23:a2:7c:
a6:74:11:4a:eb:44:7c:91:ce:6b:85:fb:c5:3a:35:9d:5a:0d:
c8:fc:9b:56:dc:a4:47:91:32:a1:fa:a2:10:d9:40:4e:87:56:
d7:96:ea:35:1f:76:1a:2c:1f:56:a9:cf:6e:11:05:b4:95:ae:
a1:7b:7f:0a:33:14:cd:a3:7f:70:db:50:a9:76:21:ee:8f:71:
21:62:9e:23:fa:d1:9a:65:3c:32:25:95:d2:35:c4:80:14:ce:
9e:fd:53:eb:83:3d:98:a0:06:93:94:0c:10:9e:58:70:16:7e:
48:aa:40:ab:0c:9d:8a:5d:92:62:d1:9c:2d:b1:1c:f2:37:50:
c8:db:71:1b:2b:81:b8:47:3a:1f:08:2b:f4:9a:2f:8d:f7:24:
83:60:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:36 2025 by rpki-client