Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File: NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier: n3kZNAjkEMeibLFMQqCwRWpadSVaOx3ov6LWRKjo1TE=
Subject key identifier: 32:26:B2:C3:09:3D:C9:F7:A5:56:81:EF:18:4A:7E:FD:73:36:00:16
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number: 0680
Signing time: Fri 31 Jan 2025 00:48:53 +0000
Manifest this update: Fri 31 Jan 2025 00:48:52 +0000
Manifest next update: Fri 07 Feb 2025 00:48:52 +0000
Files and hashes: 1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: AgpQoKa4ybmRojO14NbsGM7Yw6OLJLxZue2QGZPffWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Validity
Not Before: Jan 31 00:48:52 2025 GMT
Not After : Feb 7 00:48:52 2025 GMT
Subject: CN=679c1df4-d263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:ec:41:e8:57:40:13:4d:d8:95:32:0e:59:
0f:99:20:f3:46:70:7b:5b:f2:f6:42:eb:a5:f5:43:
82:b3:13:9d:4a:72:2a:b9:61:06:64:c5:22:0e:c8:
cb:dd:2c:78:4a:9b:01:20:e1:fd:06:dd:99:1c:fa:
f7:cd:d2:dd:cd:92:b8:97:f9:db:61:de:32:56:f5:
d7:56:cb:f4:d6:13:90:24:66:3d:17:0e:1e:ef:51:
cd:2e:ce:e9:d4:3e:51:07:67:3d:8c:80:87:70:c1:
2e:fc:37:be:aa:22:25:65:1f:15:62:c8:93:d4:54:
71:0e:ea:7e:f1:c8:c9:62:76:0a:54:cb:1a:56:00:
34:fd:7b:72:f5:e0:45:8d:23:5e:11:fc:0f:4d:85:
5e:59:ec:1f:2e:a4:ed:4e:85:af:77:1f:f2:b8:70:
31:df:ae:e8:07:40:03:1f:fc:a6:3a:f4:79:12:d4:
8c:49:71:da:d6:29:05:d0:aa:59:80:08:f7:18:1d:
39:64:68:d3:fc:78:bb:22:fc:8c:28:88:d5:77:cf:
a7:d1:ee:26:80:d8:55:bf:12:64:b5:26:f9:6e:d8:
43:ca:aa:e3:3d:a9:26:0a:b7:4e:bc:65:1b:1a:69:
2a:34:07:26:f8:db:09:8d:89:60:b3:1a:77:91:40:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:B2:C3:09:3D:C9:F7:A5:56:81:EF:18:4A:7E:FD:73:36:00:16
X509v3 Authority Key Identifier:
keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:2d:6a:e5:66:93:27:71:a9:79:c8:59:a9:91:b9:26:e4:66:
bf:21:db:04:11:2b:43:e8:fa:5d:bd:47:01:30:74:36:16:7a:
df:09:cc:80:6d:bd:5f:65:8d:3c:12:e1:51:81:05:77:0e:1b:
fe:89:1a:d9:e1:d6:40:54:71:2c:47:63:12:fc:1b:9c:36:09:
10:a4:6b:48:a8:b3:ae:ed:e8:90:f6:f4:31:b9:d4:09:4d:23:
4e:66:0a:d7:a9:43:8e:44:a5:4d:d5:1a:f0:35:2c:06:1c:f4:
27:5f:8a:f2:81:e1:4b:9e:ee:27:29:8f:80:40:68:b1:a1:ba:
7a:83:34:61:ae:81:dc:a8:e0:ad:5f:52:a6:20:88:71:47:cc:
36:df:79:62:dc:3e:9c:63:7e:87:67:80:cd:e9:94:28:88:93:
81:a5:f6:7a:06:f3:45:ab:39:19:22:36:63:38:33:7a:ea:1d:
53:95:bb:25:d5:4b:bf:83:f2:f1:78:8a:25:f5:02:00:5f:8d:
c3:04:d8:93:03:95:49:1e:e3:f3:a8:23:51:e2:a8:c1:75:62:
6a:fd:3b:4f:7c:51:fb:0e:3a:b8:10:45:82:72:37:98:de:65:
0d:5d:2e:0b:76:5a:22:b7:be:86:25:b2:9e:82:ce:a3:ec:4a:
59:ed:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:26 2025 by rpki-client