Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
File: 2YRcGequkJIocqDK_QUfFmFPhK8.mft (raw, json)
Hash identifier: AJ/oL5h/6k4DOA1tiKN9SUtbQs5/oeQYyGGP28uMGTk=
Subject key identifier: 45:7E:F0:A8:74:4A:CE:56:9B:5D:23:BA:09:87:CC:75:D1:B9:5E:30
Authority key identifier: D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
Certificate issuer: /CN=A91C6BF0/serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Certificate serial: 0DDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
Manifest number: 0F21
Signing time: Fri 31 Jan 2025 17:52:50 +0000
Manifest this update: Fri 31 Jan 2025 17:52:49 +0000
Manifest next update: Fri 07 Feb 2025 17:52:49 +0000
Files and hashes: 1: 2YRcGequkJIocqDK_QUfFmFPhK8.crl (hash: t30SFZeq5c18nGggStO+4WI0KylvTolCcSF8kxedqqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3547 (0xddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0/serialNumber=D9845C19EAAE90922872A0CAFD051F16614F84AF
Validity
Not Before: Jan 31 17:52:49 2025 GMT
Not After : Feb 7 17:52:49 2025 GMT
Subject: CN=679d0df2-d492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:ab:1a:23:dc:ae:f2:dc:b6:a7:eb:8a:1d:
c8:6e:10:d0:2d:0b:ef:cf:31:95:08:ab:b3:35:b1:
be:ea:55:ae:11:ea:42:66:7f:53:d0:eb:0a:fb:6d:
2e:f2:1c:ab:7e:01:7b:d9:72:9d:cf:e7:7e:8c:99:
e2:1b:3c:9c:ed:5a:b6:37:d2:96:36:35:95:42:3d:
2c:4d:5e:e8:a5:4a:8e:ef:19:ce:7d:7b:03:55:4b:
b6:4e:8b:ee:b8:2a:a1:2c:92:c7:68:88:4b:1a:8d:
c1:95:37:3f:13:e3:f2:d3:c9:e2:af:47:ad:f2:16:
3d:a6:7c:c1:11:04:48:d4:52:0d:fa:04:1e:83:bf:
07:56:62:13:a5:f1:23:0d:dc:10:8c:d3:65:79:40:
65:0d:d9:a2:9a:31:62:ff:1a:bb:62:92:af:20:10:
23:5a:00:7c:d7:1b:90:da:fd:fa:1e:60:6d:10:aa:
68:4b:bb:04:bb:d0:76:53:77:55:f7:7f:44:54:f8:
80:88:55:7f:c1:66:75:d9:8e:fd:15:9a:c3:3e:fe:
51:65:51:83:f5:d2:12:5e:25:71:bb:65:17:c5:b6:
6c:55:8e:f2:c7:d0:d9:d3:ac:84:8f:68:f6:10:5b:
7d:86:fc:8e:5b:7a:ae:94:c3:91:54:06:69:ea:40:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:F0:A8:74:4A:CE:56:9B:5D:23:BA:09:87:CC:75:D1:B9:5E:30
X509v3 Authority Key Identifier:
keyid:D9:84:5C:19:EA:AE:90:92:28:72:A0:CA:FD:05:1F:16:61:4F:84:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YRcGequkJIocqDK_QUfFmFPhK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/2YRcGequkJIocqDK_QUfFmFPhK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:dd:95:e3:41:f6:82:4d:a3:fb:a5:23:03:f6:5b:14:5d:db:
25:9b:16:7a:d8:bd:d2:62:40:39:50:0c:45:40:e1:2e:48:c2:
98:f5:18:19:ca:b9:55:de:63:46:c1:f4:2b:35:12:33:00:6d:
df:8b:a1:8e:f2:49:66:d6:a3:3f:9d:13:c5:53:d2:de:71:93:
a5:36:1d:96:ef:33:94:94:fe:9f:c4:b8:2b:6e:f1:5c:1b:6d:
19:09:4c:10:11:ab:b0:6e:90:95:5f:3e:4b:43:fc:66:98:76:
fc:83:fa:06:08:4a:97:6a:b8:26:db:0a:c1:83:1f:5d:ee:97:
9f:ff:3a:6e:f0:29:0e:03:60:4b:50:a6:36:0d:05:ed:e5:95:
d3:23:5e:d8:70:80:e3:2e:fb:85:06:37:c9:0e:6c:5f:b9:95:
1d:36:18:f8:15:8c:fa:39:f7:69:10:57:1c:18:bf:bb:98:80:
a2:41:5f:45:77:3b:8c:44:7c:de:e5:97:a3:1d:5f:99:37:64:
a3:10:4f:d8:55:41:cf:46:7a:9f:72:f4:37:29:c4:31:3a:ce:
3b:3c:cb:fc:9c:61:11:f0:d9:b8:fa:31:fd:cc:8d:c0:e2:41:
31:9d:74:62:d0:8b:ad:26:3c:e0:c0:d9:1f:2e:f7:3f:52:50:
da:f8:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:04 2025 by rpki-client