Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json)
Hash identifier: elb/ByYke/+0H9Gx2rVRKVDytRSSg7qjt5vHyqUbaFg=
Subject key identifier: 1F:20:EE:2B:0A:3E:05:4F:75:EE:88:11:06:44:AC:AB:5C:3A:8C:A6
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0CDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
Manifest number: 0CD1
Signing time: Fri 31 Jan 2025 18:04:52 +0000
Manifest this update: Fri 31 Jan 2025 18:04:52 +0000
Manifest next update: Fri 07 Feb 2025 18:04:52 +0000
Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: zQMlnu7pMho+9Q4U0gLcI7AXDpTCSBN7EwFI2NV3LWo=)
2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3291 (0xcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Validity
Not Before: Jan 31 18:04:52 2025 GMT
Not After : Feb 7 18:04:52 2025 GMT
Subject: CN=679d10c4-20ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:24:17:12:40:11:ea:5e:e8:79:8b:1b:b1:
71:9c:40:9b:91:f0:f3:96:f1:58:c0:13:52:e6:42:
65:19:d3:71:bd:cb:a0:b2:45:c2:12:10:c8:81:06:
43:2a:4f:5e:48:00:ca:12:37:da:cd:d0:4a:33:80:
6c:39:7a:a0:90:29:f2:27:bf:53:1f:f1:b1:09:29:
18:38:2d:aa:8e:71:be:34:84:fe:03:eb:f1:b0:59:
1d:dc:64:68:65:4c:2c:9a:31:41:2c:18:3f:7f:8e:
b3:08:fa:27:c0:35:08:e1:32:05:bf:e2:96:50:19:
8b:ce:38:f6:bb:a4:db:96:07:b3:b0:0f:d4:55:95:
cf:d4:a0:c0:b7:20:94:06:4b:00:08:51:e0:94:9b:
78:46:32:d2:6a:f6:ef:dd:ee:cb:31:04:f6:f0:14:
d0:04:d6:57:46:d2:4e:a7:94:f6:7a:55:3f:4e:de:
56:0d:04:56:c9:bd:85:00:5d:63:7a:e8:3e:82:46:
88:73:7b:61:9f:35:ed:8b:7e:4d:5b:6b:72:3b:27:
8a:c2:2d:5b:ec:fa:ee:8f:1f:f5:89:61:28:90:45:
4e:89:84:2f:70:b4:a6:9c:6b:cc:89:a4:b5:54:9d:
bd:3c:1f:25:67:0d:89:7c:eb:d2:c8:53:e1:bc:6d:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:EE:2B:0A:3E:05:4F:75:EE:88:11:06:44:AC:AB:5C:3A:8C:A6
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:85:d4:11:e2:80:0a:b5:aa:76:7f:aa:25:89:61:80:19:26:
52:f3:70:3d:19:01:a6:15:d4:3e:ee:8b:1b:ed:a2:44:29:b6:
9b:d0:fc:40:b5:71:bf:f5:4c:e4:fd:ce:43:f5:f9:6f:63:24:
72:64:c5:4a:19:d9:c5:c3:01:87:71:c5:69:60:91:40:2f:24:
70:9b:d0:43:6e:93:3e:c5:0f:49:a8:7b:32:3b:17:7b:2d:8b:
82:5a:98:28:34:c4:dc:78:d7:1e:e8:5d:a4:db:ab:48:7b:61:
76:c1:84:70:12:c6:56:e7:d1:a6:1e:85:d2:cc:f6:9f:cf:53:
57:63:46:2b:20:6b:57:0a:50:5b:a6:40:0d:db:d0:5b:c8:9b:
19:ed:b8:25:6f:3e:f4:2c:9a:61:e7:dd:df:a1:9a:79:86:52:
da:ed:16:bc:8b:53:d9:f2:96:76:dd:5d:26:9c:9d:c6:fe:44:
2c:e6:97:8c:6f:7d:eb:f3:04:aa:01:74:b6:aa:d2:24:1f:c1:
32:dc:bf:ae:d4:1a:fe:ab:58:c7:53:58:95:2a:a0:67:e8:62:
0d:a6:19:e4:de:fb:8a:df:dd:59:9d:3c:e2:11:09:5d:de:1a:
2e:f1:ab:e8:da:ea:f0:fa:47:f7:03:d6:8f:0a:40:a1:cc:04:
e4:10:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:19 2025 by rpki-client