Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json)
Hash identifier: sXvELEqGu9+obgDLnWlu/9tWJKiJVJQTylG9hgqOIF8=
Subject key identifier: 84:40:17:0D:EC:B0:63:6B:A9:79:D1:E1:07:70:AA:B4:2A:6F:D4:05
Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1
Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
Manifest number: 1164
Signing time: Thu 30 Jan 2025 19:54:13 +0000
Manifest this update: Thu 30 Jan 2025 19:54:13 +0000
Manifest next update: Thu 06 Feb 2025 19:54:12 +0000
Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: DguGzJjZ6Da/LFlvfCuDgl+2HKvuTECzqvzr6+8IAFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1
Validity
Not Before: Jan 30 19:54:13 2025 GMT
Not After : Feb 6 19:54:12 2025 GMT
Subject: CN=679bd8e5-847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0e:c8:ba:ae:92:10:63:1e:0b:58:53:6d:6d:
81:fa:05:bb:83:ce:3f:c9:05:21:79:c0:cc:1d:27:
f1:ee:df:5f:64:03:d0:84:bc:20:08:a9:65:a9:1f:
e6:63:e7:05:74:f9:61:e8:f5:2a:95:10:8f:9d:45:
ac:89:e7:46:2b:c4:7a:98:85:b7:b6:96:e3:a0:78:
c4:cc:f2:b2:b4:a7:89:59:86:15:72:6c:c7:ab:09:
95:ef:68:29:d4:39:f2:23:0c:3e:01:b2:1d:1b:42:
a9:51:d4:22:02:53:f2:ce:79:4d:cc:35:ab:80:f5:
65:19:31:1a:42:f3:8f:2d:e8:17:9a:b3:1c:46:dc:
6a:33:a5:1e:0e:5a:93:0f:4a:a3:b3:be:e0:01:8b:
dd:4c:c1:33:e7:c3:be:3b:e3:40:c0:b8:4b:29:10:
27:46:68:ea:89:a8:e8:14:aa:5d:43:b2:d0:d8:ff:
01:f0:54:7e:37:56:16:88:5b:10:26:6a:b8:d7:0d:
50:21:5d:e2:3f:c9:e4:52:49:c5:7f:c4:8b:b0:4e:
62:f4:0f:a5:4b:88:1c:cf:2d:2a:af:08:ac:d4:32:
8c:68:51:a9:f9:a4:08:11:38:ab:7d:ab:c0:e6:13:
c8:f0:fb:43:03:27:58:94:2a:62:d9:e5:7b:3d:f3:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:17:0D:EC:B0:63:6B:A9:79:D1:E1:07:70:AA:B4:2A:6F:D4:05
X509v3 Authority Key Identifier:
keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:d4:67:a9:53:02:c8:89:c6:49:f9:e9:af:f1:01:e5:98:25:
f4:1c:3f:ce:87:cd:fe:34:89:4f:f6:83:d0:ac:75:fb:f2:eb:
87:01:68:f0:84:9b:f6:45:d7:b1:45:3a:1a:56:02:81:01:23:
8e:c2:87:2f:75:65:58:1d:f3:d3:e5:e6:2d:76:a0:cc:6a:6f:
3a:ee:b6:eb:06:ae:cf:61:44:0c:ed:d8:34:28:22:1c:87:66:
ff:e6:07:84:5c:73:5a:80:6d:a5:b7:16:b7:db:4e:9c:71:cd:
4a:71:3a:54:30:04:e4:93:3a:07:23:0d:85:c0:15:33:6d:d7:
e2:c6:50:82:1e:03:5c:6b:98:a7:0a:73:13:5e:ad:ce:69:5b:
94:26:84:42:d0:04:1e:dd:e7:20:a3:9e:f9:8e:f5:78:73:29:
4b:ae:60:11:38:11:f2:7e:f6:46:81:56:e7:63:30:19:6e:db:
f2:b5:27:66:bb:a4:29:39:a3:b5:46:70:1e:6b:4a:f2:51:9f:
f0:0e:5f:d9:e8:4c:54:3e:36:55:c9:44:11:d5:eb:c1:28:6b:
fa:64:46:93:d0:3e:1c:35:5d:92:e6:d2:96:14:ea:65:b3:e7:
72:09:e2:43:94:ec:5a:15:bb:7a:1b:26:32:ce:b1:e0:1f:03:
8c:6d:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:56 2025 by rpki-client