Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json)
Hash identifier: jtM+wxb1nTFcyS76g6Qbj52ObtaXTVoglVbwV4LhetM=
Subject key identifier: EC:B2:07:D5:11:E3:2E:4B:C5:CF:78:81:42:0F:F6:BC:D3:FE:C2:D6
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
Manifest number: 65
Signing time: Fri 31 Jan 2025 06:01:36 +0000
Manifest this update: Fri 31 Jan 2025 06:01:35 +0000
Manifest next update: Fri 07 Feb 2025 06:01:35 +0000
Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: yoUkSZjUUxtpkebNJrnBgMtniib5BETI7k60+twMkUM=)
2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: vqfBcf5vpMBkoptdR186vKEyoOUdk3eFKxuU70CJf2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Validity
Not Before: Jan 31 06:01:35 2025 GMT
Not After : Feb 7 06:01:35 2025 GMT
Subject: CN=679c6740-b1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:17:bc:a4:0c:2a:54:77:69:34:3f:58:ff:
25:eb:a6:c0:d1:09:ed:2d:d6:84:a1:66:a4:bc:a3:
fd:c0:54:d3:dc:d8:5b:d6:0a:59:d5:46:e3:b0:ae:
ec:70:dc:70:8e:61:e4:03:cb:51:9a:e6:77:22:8e:
b9:55:88:d2:c8:e0:ba:c4:04:74:3b:a4:56:0d:00:
b2:ad:46:82:d6:9d:a9:f5:cd:50:b7:90:2d:53:64:
e7:10:2a:e6:04:e6:e4:45:bc:a1:b5:7f:99:50:db:
4b:cb:10:74:2d:48:69:ee:d7:26:ab:68:f1:ac:2f:
66:fb:cc:00:c9:08:6e:3f:1b:c0:aa:92:71:81:a1:
f7:0c:dc:2e:61:3a:ba:cb:14:a1:17:48:73:42:aa:
80:be:3a:8a:fd:b6:93:25:9b:fb:90:8c:60:bf:87:
ba:8a:4a:d9:56:44:de:09:70:69:13:79:d8:8b:ca:
f8:c9:16:41:23:2e:28:91:c0:e9:76:ec:05:12:1f:
b7:b3:d6:43:c4:43:f3:fa:61:78:16:e8:8b:23:9d:
d4:f9:68:b6:39:9c:f5:b6:95:e7:5f:ef:8a:6e:2e:
16:2e:88:09:ff:67:e7:38:5d:53:84:06:31:9f:9f:
9a:bc:45:40:0b:23:04:82:87:96:08:aa:2d:32:8b:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B2:07:D5:11:E3:2E:4B:C5:CF:78:81:42:0F:F6:BC:D3:FE:C2:D6
X509v3 Authority Key Identifier:
keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:ee:f9:81:a3:bb:a8:76:e2:c4:c2:9d:1e:34:b3:62:a7:
b8:63:b2:d4:cc:c1:ff:e0:67:a4:1f:26:03:4a:27:b5:27:90:
ce:64:f7:05:97:51:99:5a:c4:1a:4d:92:66:ff:2b:fb:52:df:
43:c4:b0:6b:5c:16:0f:3d:19:76:c6:f8:5e:73:4f:3d:fa:90:
d1:8f:a0:d6:7c:eb:40:76:46:61:73:3e:f9:8d:4c:cd:d8:f0:
a7:a3:8c:c8:6d:5c:e1:f8:bc:17:92:02:7e:f7:1e:5f:c3:13:
ce:9e:d4:e2:32:3d:79:d7:a5:09:6d:ce:fd:1f:a4:67:1a:86:
b1:e9:b1:1f:98:f7:ca:0b:66:42:32:a7:11:a3:bd:9e:2a:b7:
f8:a5:48:90:18:17:9e:7b:82:23:77:a7:9f:e9:c2:cc:65:ce:
86:c0:ef:0b:98:d7:4f:9e:83:a1:3d:86:78:f0:ae:8e:a4:e7:
c9:57:13:47:0e:71:db:7c:87:58:94:f3:14:20:73:ac:ac:10:
74:ac:5e:a6:3e:60:fe:21:8d:bc:42:bc:14:6b:d7:39:fc:82:
8a:eb:77:d5:7e:fa:81:7a:df:37:92:1d:79:e7:21:cc:cd:28:
09:78:fb:71:6f:7c:ca:fa:ac:86:aa:eb:87:af:cb:b1:d7:52:
75:95:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:21 2025 by rpki-client