Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json)
Hash identifier: u3KQcXm0dK2jb56pMbR8TNUWNpNP2gKCJKLVTiJ/uPM=
Subject key identifier: C2:40:82:E0:FB:3C:09:D7:73:BA:C7:90:FE:7F:21:F8:F0:EC:F0:97
Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 03:36:54 +0000
Manifest this update: Fri 31 Jan 2025 03:36:53 +0000
Manifest next update: Fri 07 Feb 2025 03:36:53 +0000
Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: zsFdnuvz1Euf76DQk+UWw154xe2Un9qsb2+kmR4OCqI=)
2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: q2jyIpsgOSZMDylILKfsOrMIus5pnrAFZdrI/kJzgvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Validity
Not Before: Jan 31 03:36:53 2025 GMT
Not After : Feb 7 03:36:53 2025 GMT
Subject: CN=679c4555-db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:7a:3a:ac:9f:c7:2e:12:1d:10:e1:c4:c7:
66:88:b7:67:ca:3e:45:d0:ba:c9:a6:2e:87:b3:97:
3c:74:36:06:b3:4a:92:f5:b0:ed:7d:4d:75:5f:26:
40:9b:f1:ca:2b:d0:a7:63:44:68:ef:c0:e4:97:e6:
a4:72:f5:44:ed:f7:99:13:34:09:ae:a0:74:c1:06:
5c:d8:c6:76:f5:73:ae:2c:8a:c4:fd:44:c3:04:f9:
cb:76:16:38:9a:af:d8:4c:19:be:b6:e4:31:c0:9c:
de:23:48:ae:69:fb:7f:76:29:6d:f6:9c:ce:a1:de:
90:01:3c:ae:37:c8:40:f5:45:2d:30:3c:5f:f7:1d:
7b:67:db:92:67:54:6b:2b:96:55:ec:a1:9d:3b:42:
d9:de:d0:c1:e5:93:03:4a:0b:76:a8:30:5f:10:37:
87:ec:91:fe:cf:aa:30:ef:73:f7:41:f6:a1:9a:d4:
5a:90:d6:83:0e:0f:6a:33:c6:99:a6:1a:90:0c:0f:
99:f0:7d:8c:4c:08:71:49:7f:8d:0a:6a:0f:3a:81:
0c:cc:5d:a0:64:f6:64:c2:b1:4c:8a:c7:7f:8c:84:
c9:49:c8:41:da:d7:0b:48:b5:7b:12:98:69:25:8c:
62:61:cf:2b:74:62:df:02:58:47:75:02:e2:57:13:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:82:E0:FB:3C:09:D7:73:BA:C7:90:FE:7F:21:F8:F0:EC:F0:97
X509v3 Authority Key Identifier:
keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:30:03:a7:17:e3:fa:eb:02:6f:27:c1:5b:a6:57:92:f9:0a:
bc:c7:21:36:8f:ce:7c:99:cc:42:cb:09:27:72:25:79:0a:a1:
96:b0:fe:f9:e5:47:4b:85:62:7e:40:4c:44:c2:41:e5:3b:47:
60:a1:3d:12:59:c2:33:55:9c:5e:ce:a3:02:86:08:d8:71:4e:
cd:42:72:29:2b:9e:f9:e8:26:3a:9b:27:c5:e7:df:6e:ad:1a:
8d:ea:19:85:c4:c7:0c:c1:52:cc:e8:5f:8d:44:82:76:f2:a2:
72:11:dd:02:cb:09:a4:3e:9d:fe:5d:50:47:f8:a2:f4:2e:f8:
20:14:88:74:6b:31:e9:08:f9:07:2c:7d:28:1e:74:d5:23:99:
41:82:ff:7a:6d:c3:c0:cf:ac:11:47:fa:09:71:82:96:44:08:
d5:d8:0b:9a:35:d5:e5:22:b0:0b:37:18:a2:42:80:cd:8e:5e:
4b:c6:11:1e:5b:5f:c9:ec:0b:da:05:2a:82:07:2c:9c:c3:14:
8d:22:5a:bf:8e:a2:3e:2d:8e:f9:05:ca:93:93:05:59:cf:20:
e2:a0:45:a7:57:5d:f1:1a:08:4d:9e:fb:44:ce:49:dc:2f:81:
9c:f8:d3:1c:26:53:b1:a6:48:25:ce:42:0f:ee:a5:c0:92:b0:
a8:a4:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:50 2025 by rpki-client