Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
File: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json)
Hash identifier: 76g5TnlXWS4dnCtB+Cja8rkYBVzdX/3HvljpxAUxsFc=
Subject key identifier: 89:D2:BB:0E:DD:3A:C4:B8:37:6F:24:7D:5B:B3:1B:9E:AD:79:D6:27
Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
Certificate issuer: /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Certificate serial: 03F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
Manifest number: 03EE
Signing time: Fri 31 Jan 2025 00:36:56 +0000
Manifest this update: Fri 31 Jan 2025 00:36:56 +0000
Manifest next update: Fri 07 Feb 2025 00:36:56 +0000
Files and hashes: 1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: YO/nu0bbxLfo9/nK3rSn9xYcTQx1WowEQ2y3i6XmPr8=)
2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: RCWPaj7t0e1p3rp6/K3vTM6gR0rDSmQTnwQnVmwe2ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Validity
Not Before: Jan 31 00:36:56 2025 GMT
Not After : Feb 7 00:36:56 2025 GMT
Subject: CN=679c1b28-1f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:b1:e9:4a:f7:40:6f:a7:7d:e8:de:d1:ba:
22:40:47:85:2c:5f:2c:b5:da:b8:88:a8:3f:84:89:
df:b4:ec:07:af:67:01:94:27:52:c9:8c:05:8b:7e:
14:b0:12:18:61:44:da:9a:34:2e:7c:40:d4:ac:7f:
9d:9a:a4:a5:60:58:6d:2d:ed:a4:79:b9:e8:57:5a:
81:c0:6f:cf:3c:28:3b:5d:ad:6e:cd:28:c3:75:c6:
88:f4:74:48:6a:95:a0:65:29:78:b6:d8:16:7b:4d:
5d:ef:21:2b:27:5a:ed:16:5e:1e:cc:94:4b:60:40:
88:0d:cd:6d:5a:13:2f:9d:58:e3:6d:15:5f:19:0c:
2a:ac:01:03:d5:20:cf:d0:71:5b:62:db:72:c4:45:
d1:22:94:61:99:a1:5d:df:0d:e0:5a:a7:f5:59:2b:
ca:99:83:af:8a:d4:b7:cf:2f:82:72:8f:96:f9:66:
1a:eb:9f:a6:f1:13:cc:8a:ab:ee:84:f8:a2:23:a9:
53:ec:0b:5b:58:06:e3:fc:d2:c3:d9:ca:96:26:ef:
34:07:6d:42:f0:65:3e:95:e1:ba:42:4c:95:ab:f6:
f8:76:07:c0:b5:b9:d3:46:6f:e7:1d:6e:6e:85:2a:
29:a8:81:ba:da:fb:7f:4f:90:98:8a:4f:67:d6:e6:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:BB:0E:DD:3A:C4:B8:37:6F:24:7D:5B:B3:1B:9E:AD:79:D6:27
X509v3 Authority Key Identifier:
keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ed:08:0d:5a:8a:18:ed:c5:1d:c2:82:c4:44:82:40:14:bc:
29:1d:46:ac:cf:8b:4b:ff:fe:e3:87:36:27:fd:76:6e:ee:c6:
42:9c:c1:25:16:45:cf:31:db:7f:59:88:7c:a9:40:16:ee:54:
d0:b7:77:92:f6:9b:8f:fa:97:25:c6:05:fe:87:6b:2a:83:44:
67:76:61:f1:23:e3:a2:1f:77:8f:c4:bc:eb:86:48:a6:90:f5:
74:c2:53:06:58:fa:5f:64:29:7f:de:61:de:5b:f6:01:cf:e8:
ac:b0:c7:7d:1c:af:88:5a:00:d4:aa:36:da:02:d8:38:74:bb:
94:a1:0d:64:31:8a:4e:98:2d:04:f1:94:d5:2d:d2:bf:ac:e3:
b4:7c:d5:53:7b:ec:e2:fb:c0:14:c0:a9:d9:0a:a3:4a:ad:22:
45:5a:74:b3:f9:4d:4a:86:2f:e3:1c:7a:3d:cc:8f:12:c6:32:
02:8d:c5:98:fb:e7:4d:16:f2:14:1c:da:71:fc:36:09:dd:9b:
a1:89:6a:25:97:11:da:d7:07:c2:42:2e:17:5b:d8:36:9e:da:
0a:dd:29:67:5c:40:88:fc:d3:ea:37:8f:4b:f0:4b:d8:1a:26:
4b:c7:e4:f0:74:fd:1a:ad:a5:7d:77:35:ea:69:78:c4:e3:73:
63:5d:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:15 2025 by rpki-client