Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json)
Hash identifier: ZeEkCYa/ds6n7zvqBsaiyhasJgmwDIKphbCK3woVDK8=
Subject key identifier: 66:AD:8C:7A:47:4C:84:97:D0:25:1D:47:97:82:E3:13:1A:3A:B9:25
Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Certificate serial: 1BA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
Manifest number: 1B98
Signing time: Fri 31 Jan 2025 16:16:21 +0000
Manifest this update: Fri 31 Jan 2025 16:16:20 +0000
Manifest next update: Fri 07 Feb 2025 16:16:20 +0000
Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: Gn3b1kw5X7U5PXHfOTzeddBpjFEU9Hwt4r5LN3z/10M=)
2: A88F22ECCC7011ED931BD15FC4F9AE02.roa (hash: BCcYD/VfHPlrE1idB6qMcYHXBoKVsq99H3ysbvhT4uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7074 (0x1ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Validity
Not Before: Jan 31 16:16:20 2025 GMT
Not After : Feb 7 16:16:20 2025 GMT
Subject: CN=679cf754-35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:3e:98:17:f0:f6:64:7e:1b:32:ed:08:db:
82:e3:49:c6:15:05:10:92:0f:0f:44:00:af:be:31:
49:6a:55:23:2c:0d:39:38:b7:2c:15:1d:d5:85:42:
1b:e1:ba:4b:8b:3d:a4:04:53:ca:ad:ce:93:c1:39:
b1:3e:41:ed:7c:9a:ad:e8:3d:7e:67:d4:c1:fa:29:
3c:3f:49:ad:c2:8a:15:46:1d:db:07:ac:17:61:a4:
6c:9e:03:cb:ca:bb:c2:60:23:11:98:55:4e:8e:58:
9f:cc:19:af:89:d2:cd:0e:84:cb:94:f7:be:4c:a9:
b1:13:9a:c8:e4:36:af:2d:5c:89:e2:b7:9e:8c:65:
09:1c:f6:5d:89:23:ad:7f:9e:c0:5b:33:23:3a:6f:
e3:fe:02:29:2c:d2:74:31:fd:ca:ad:c7:9b:c1:92:
8c:9e:21:91:cd:c6:6c:f4:9f:0a:a9:0c:6f:d1:90:
79:62:e3:af:fa:cc:a7:e8:c8:83:31:a7:07:72:8f:
64:43:4f:55:86:3b:e1:b3:40:fd:cc:c4:86:ae:1a:
27:d5:9d:51:d5:ad:d2:d0:dd:09:22:58:30:3e:56:
a4:bd:35:a1:bc:77:41:29:c1:54:69:1b:94:b0:89:
b6:9f:fc:4f:b5:e1:a8:30:b0:34:36:97:01:17:aa:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:8C:7A:47:4C:84:97:D0:25:1D:47:97:82:E3:13:1A:3A:B9:25
X509v3 Authority Key Identifier:
keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:c7:c5:17:a3:fc:e0:e7:13:f1:47:75:42:69:b6:68:e5:
56:73:59:09:33:cc:4d:45:58:72:66:67:d3:43:8f:55:99:e1:
a1:d9:08:54:3b:0d:37:09:22:b0:58:2d:35:ab:ed:da:52:d9:
0c:44:1e:10:cb:c5:88:1d:ef:cf:d0:a9:c2:d4:5e:a1:4f:7b:
31:2d:0b:f4:ad:85:a3:d3:05:8b:bc:58:7a:08:23:b8:cf:c6:
75:d0:c6:a1:49:d1:49:8f:b4:4f:16:ce:2d:ae:42:74:d0:26:
02:30:f6:43:98:ae:19:cc:6c:01:8f:2b:4e:89:88:67:a2:c7:
3b:e8:bc:35:45:ad:0f:75:ea:d2:ea:f7:45:fe:d3:88:fb:85:
1b:ee:f6:d4:89:74:b9:83:27:9e:26:5b:fb:f3:59:a3:1d:eb:
ac:0b:60:a6:1a:72:10:6e:08:ce:35:41:eb:4b:5d:b5:c8:22:
eb:bb:33:e2:e8:8d:e3:cd:07:5b:96:0d:ca:da:16:69:0f:9a:
ad:5d:55:de:81:f6:a1:86:5e:ea:5b:30:4e:53:13:fb:4a:02:
b5:a5:0a:bb:9c:96:f6:44:62:c5:5c:34:7b:03:10:ec:fc:08:
ef:cb:de:2f:2f:b8:86:c3:dc:09:76:b6:42:1c:ea:07:8d:23:
29:23:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:11 2025 by rpki-client